SpinPin Privacy Policy

SpinPin collects personal data needed to operate an online casino and sportsbook account, process transactions, meet legal duties, and protect users against fraud or unauthorised access.

Personal data may include:

• Identity details, such as name, date of birth, address, and identity document information;
• Contact details, such as email address, telephone number, and account messages;
• Account details, such as username, login records, preferences, and account status;
• Payment information, such as deposit and withdrawal records, payment method details, and transaction references;
• Compliance information, such as age verification, affordability checks, source of funds checks, and safer gambling records;
• Technical information, such as IP address, device details, browser type, cookies, and website usage data.

Data protection measures may include encryption, access controls, secure storage, monitoring for suspicious activity, staff access limits, and internal procedures for handling confidential information.

Users have rights under the United Kingdom General Data Protection Regulation and the Data Protection Act 2018. These rights may include:

• Access to personal information held about the user;
• Correction of incomplete or inaccurate information;
• Deletion of personal data where no legal reason requires retention;
• Restriction or objection to certain types of processing;
• Data portability where the law applies;
• Withdrawal of consent where processing relies on consent.

Some information must be kept for legal, regulatory, tax, anti money laundering, fraud prevention, dispute handling, or responsible gambling purposes.

Collected information is used only for lawful and transparent purposes connected with the services, legal duties, security, and account management.

Personal data may be used for:

• Creating and managing user accounts;
• Confirming identity, age, address, and payment details;
• Processing deposits, withdrawals, refunds, and transaction records;
• Delivering casino, sportsbook, support, and account services;
• Applying security checks and fraud prevention controls;
• Meeting anti money laundering, gambling, tax, and data protection obligations;
• Recording safer gambling interactions, limits, exclusions, and account restrictions;
• Improving website reliability, functionality, accessibility, and content;
• Analysing website performance, user behaviour, and service use;
• Sending service notices, account messages, and required legal updates;
• Sending marketing only where consent has been given or another lawful basis applies.

The platform does not sell personal data. Marketing preferences can be changed where account tools or support routes allow this. Service messages may still be sent where they are required for account operation, safety, or legal compliance.

Users may request access to personal data held in their account records. Requests may require identity confirmation so that information is released only to the correct person.

Users may ask for:

• A copy of personal data held about them;
• Correction of inaccurate or incomplete details;
• Deletion of data where retention is no longer required by law;
• Restriction of certain processing activities;
• Information about the purposes, categories, recipients, and retention periods linked to their data.

A deletion request may not remove all records immediately where legal or regulatory retention duties apply. This may include records linked to payments, security, anti money laundering checks, responsible gambling, complaints, disputes, and account integrity.

By using SpinPin, users consent to security checks necessary for account protection, fraud prevention, identity confirmation, and regulatory compliance. Payment information may be processed by authorised payment service providers for deposits, withdrawals, refunds, chargeback handling, and transaction verification.

The services are intended only for persons aged 18 or over. Users under 18 must not register, deposit, place bets, or use any gambling service.

The operator cannot confirm age with certainty unless valid identity, age, payment, or verification checks are completed. If an account is suspected to involve a minor, the account may be suspended while checks are carried out.

If a parent, guardian, or legal representative believes that a minor has supplied personal data, a deletion request may be submitted through the available support or privacy contact route. The operator will review the request, remove data where legally permitted, and retain only information needed for legal, fraud prevention, dispute, or safeguarding purposes.

Personal data may be processed outside the United Kingdom where service providers, technology partners, payment processors, verification providers, analytics providers, or support partners operate in other countries.

Any transfer of personal information must follow applicable data protection requirements. Safeguards may include adequacy regulations, contractual confidentiality duties, the United Kingdom International Data Transfer Agreement, standard contractual clauses, access controls, and security measures.

By using the services and submitting information, users acknowledge and, where required, consent to international processing connected with account operation, payments, security, verification, analytics, and legal compliance.

Partners that handle personal data are expected to keep information confidential, use it only for approved purposes, and protect it against unauthorised access, loss, misuse, alteration, or unlawful disclosure.

A disclaimer connected with this Privacy Policy may affect the scope, interpretation, or effect of specific rules in this document, where permitted by applicable law.

This disclaimer applies when a user accepts the policy through any recognised acceptance method, including:

• Electronic acceptance on the website;
• Signature or written confirmation;
• Account registration or accession to the services;
• Continued use of the account after policy publication or update.

No disclaimer can remove rights that United Kingdom data protection law gives to users. If there is a conflict between this document and mandatory legal protections, the mandatory legal protections take priority.

Cookies are small text files stored on a device when a user visits a website. Similar technologies may also be used, including pixels, tags, local storage, and analytics identifiers.

Cookies may be used for:

• Website statistics and performance measurement;
• Behaviour analysis across pages and services;
• Account security and session management;
• Personalisation of content, preferences, and settings;
• Error detection and website improvement;
• Marketing measurement where consent is required and has been given.

Cookie information may be retained for up to 1 year unless a shorter period applies or the user deletes cookies through browser settings. Some cookies are needed for account security, login sessions, fraud prevention, and core website functions. Optional cookies may depend on user preferences and consent tools where available.

Using SpinPin indicates full acceptance of this Privacy Policy, including the collection, use, processing, storage, disclosure, and retention of personal data as described in this document.

The current published version of the policy prevails over earlier versions. If the policy is updated, continued account use after publication may be treated as acceptance of the updated terms, where permitted by law.

Users should review the policy at reasonable intervals so they remain informed about data handling, user rights, cookies, third party processing, and retention rules.

Personal data may be shared with third parties where this is required by law, needed for dispute handling, or allowed under agreements necessary for the services.

Third party recipients may include:

• Payment service providers and banks;
• Identity, age, address, and document verification providers;
• Fraud prevention and security providers;
• Anti money laundering and compliance partners;
• Analytics, hosting, technical, and customer support providers;
• Regulators, public authorities, courts, law enforcement bodies, and dispute resolution bodies;
• Professional advisers, auditors, insurers, and legal representatives.

Where third parties are listed on the website, users can review the stated purpose and scope of data use. If a recipient is not named, the operator should state the type of recipient, the purpose of sharing, and the categories of information involved where required by law.

A user who submits personal information consents to necessary third party processing where consent is required. Third parties may have their own privacy notices, security practices, and retention rules.

The website may contain links to external websites, payment pages, verification tools, responsible gambling resources, social media pages, or other online services operated by third parties.

External websites may collect and use personal information under their own privacy policies. The platform does not control external websites and is not responsible for their data use, security standards, cookies, content, or retention practices.

Users should take care when leaving the website and should read the privacy notice of any external website before submitting personal data, payment details, identity documents, or account information.