Spinsy Casino Privacy Policy

Introduction to the Spinsy Casino Privacy Policy

At Spinsy Casino, we recognise that your personal data belongs to you, and we take the responsibility of safeguarding it extremely seriously. This Spinsy Casino privacy policy document explains in plain language what information we collect, why we collect it, how we use it, and how we protect it. Whether you are browsing our website or actively playing at Spinsy Casino, your privacy matters to us at every step of your journey. We believe that transparent data processing practices and robust data protection measures are the foundation of a trustworthy online casino experience.

This policy is aligned with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). Where relevant, we also observe the principles of the European Union's General Data Protection Regulation (GDPR). The Spinsy Casino privacy policy governs all personal information collected through spinsycasinos-au.com and any associated mobile applications or services. We encourage you to read this document carefully so you fully understand your privacy rights and how Spinsy Casino fulfils its obligations under Australian and international law.

If you have any questions or concerns about Spinsy Casino data protection practices, please do not hesitate to contact our dedicated team at [email protected]. We are committed to responding promptly and ensuring your concerns are addressed in full.

1. Identity of the Data Controller

Spinsy Casino is operated by a company registered in Curaçao and licensed by the Government of Curaçao. As the entity responsible for determining the purposes and means of processing your personal data, this company acts as the data controller for all information collected through the website at spinsycasinos-au.com and any associated applications or services. When we refer to "we", "us", or "our" throughout this document, we mean Spinsy Casino and its operating company. Our commitment to confidentiality and responsible handling of user data is central to everything we do as a licensed operator serving the Australian market.

2. Personal Data We Collect

Spinsy Casino data collection encompasses several categories of personal information. Understanding exactly what data we gather helps you make an informed decision about using our services. We collect only the information that is strictly necessary for the legitimate purposes described in this policy, and we always handle your personal data with the care and confidentiality it deserves.

2.1 Identification and Contact Data

• Full legal name
• Date of birth
• Residential address
• Email address
• Phone number
• Nationality and country of residence
• Government-issued identification numbers (for KYC verification)
• Copies of identity documents (passport, driver's licence, or national identity card)

2.2 Financial Data

• Payment method details (credit and debit card numbers, e-wallet identifiers, cryptocurrency wallet addresses)
• Transaction history, including all deposits and withdrawals
• Bank account details where applicable
• Source of funds documentation required for anti-money laundering (AML) compliance
• Billing address associated with payment instruments

2.3 Gaming Activity Data

• Game session records, including time, duration, and outcomes
• Wagering history and bonus usage across our 4,000+ game catalogue
• Preferences and favourite games among our 50+ software providers
• Responsible gambling settings, including deposit limits, session limits, and self-exclusion status
• VIP programme participation and cashback history

2.4 Technical and Device Data

• IP address and geolocation data
• Browser type and version
• Operating system and device type
• Unique device identifiers
• Log files and access timestamps
• Cookie identifiers and similar tracking technologies
• Referral source and session pathway data

2.5 Communication Data

• Records of correspondence with our customer support team via live chat or email
• Complaints, queries, and feedback submitted by you
• Promotional opt-in or opt-out preferences
• Survey responses and voluntary feedback

2.6 Sensitive Data

In limited circumstances, Spinsy Casino may process sensitive categories of personal data, such as information relevant to responsible gambling assessments — for example, self-declared vulnerability status or financial hardship indicators. We handle such sensitive personal information with the utmost care and collect it only where strictly necessary and with your explicit consent, or where required by law to protect your wellbeing.

2.7 Data Received from Third Parties

We may also receive user data from third-party sources to supplement our own records and ensure the accuracy and integrity of our operations. Third-party sources include:

• Identity verification agencies and fraud prevention databases
• Payment processors and financial institutions
• Affiliate marketing partners who referred you to Spinsy Casino
• Publicly available sources such as sanctions lists, PEP registers, and regulatory registers
• Credit reference and source-of-wealth verification services

3. How We Collect Your Personal Data

The data collection methods used by Spinsy Casino include the following channels, each designed to be as transparent and unobtrusive as possible while meeting our legal and operational obligations:

1. Direct collection: When you register an account, complete identity verification, make deposits or withdrawals, claim a bonus, or contact our support team, you provide personal information directly to us.
2. Automated collection: As you navigate our website and use our services, we automatically collect technical data through cookies, log files, pixel tags, and similar technologies embedded in our platform.
3. Third-party collection: We receive information from payment providers, fraud prevention agencies, and affiliate partners to enhance the accuracy and data security of our records and to meet regulatory requirements.
4. Device-based collection: Our Android APK and iOS Web App (PWA) may collect device-specific data when you access Spinsy Casino via mobile, including device identifiers and operating system details.

4. Purposes of Data Processing

All Spinsy Casino data processing activities are conducted for clear, legitimate, and documented purposes. We never process your personal data in ways that are incompatible with the reason it was originally collected. The table below outlines the primary reasons we engage in data processing and the corresponding lawful basis for each activity.

5. Legal Basis for Data Processing

Spinsy Casino personal data processing is always grounded in a lawful basis recognised under the Australian Privacy Act 1988 and applicable international frameworks including the GDPR. Our data processing activities rest on one or more of the following foundations:

• Contractual necessity: Processing required to enter into or perform our contract with you, such as operating your player account, processing transactions within our minimum deposit of A$20 and withdrawal of A$30, and enforcing our terms of service.
• Legal obligation: Processing mandated by applicable laws, including KYC and AML requirements, gambling regulations, tax obligations, and data retention laws. This includes mandatory identity verification before your first withdrawal.
• Legitimate interests: Processing necessary for our legitimate business interests — such as fraud prevention, network security, and service improvement — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your explicit consent — for instance, for direct marketing communications or certain non-essential cookies — you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Cookie Policy

The Spinsy Casino cookie policy describes how we use cookies and similar tracking technologies on our website. Cookies are small text files placed on your device by a web server when you visit a website. They help us recognise you across visits, remember your preferences, and deliver a personalised and secure experience. As part of our commitment to transparent data processing and genuine information security, we provide a full explanation of each category of cookies we use below.

6.1 Types of Cookies Used at Spinsy Casino

6.2 Managing Your Cookie Preferences

You can manage your cookie preferences at any time via the cookie consent banner displayed when you first visit spinsycasinos-au.com. You may also configure your browser settings to block or delete cookies; however, please note that disabling essential cookies may impair the functionality of the site and prevent you from logging in or making transactions. If you wish to opt out of analytical or marketing cookies, you can do so through the preference centre accessible via the cookie banner. For full details about the Spinsy Casino cookie policy, or to update your preferences, contact us at [email protected].

7. Sharing Your Personal Data with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own commercial purposes. However, in certain circumstances, Spinsy Casino may share your user data with carefully selected partners and authorities to operate our business lawfully and deliver the services you expect. All third-party data sharing is governed by strict data protection and confidentiality agreements.

7.1 Payment Service Providers

To process deposits and withdrawals, we share relevant financial personal data with our authorised payment partners. Depending on your chosen payment method, these include providers of PayID, Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, bank transfer services, and cryptocurrency networks (Bitcoin, Ethereum, and Litecoin). Standard withdrawal processing takes between 24 and 72 business hours within daily limits of A$5,000. All payment partners are bound by strict data protection standards and confidentiality obligations.

7.2 Regulatory and Law Enforcement Authorities

We may be required by law to disclose personal information to regulatory bodies, law enforcement agencies, tax authorities, or courts. This includes responses to lawful requests under AML legislation, gambling regulations, or court orders issued in Australia or Curaçao. Spinsy Casino data protection obligations do not prevent us from complying with such mandatory legal disclosures, and we will always inform you of such disclosures where permitted by law.

7.3 Game Providers and Technology Partners

Our platform hosts games from over 50 providers, including Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming, Yggdrasil, Hacksaw Gaming, Push Gaming, Spribe, Red Tiger, Nolimit City, and Relax Gaming. Limited technical and session data may be shared with these providers solely to operate their games correctly on our platform, in accordance with their own privacy and security standards.

7.4 Identity Verification and Fraud Prevention Services

To fulfil our KYC obligations and safeguard data security, we engage accredited identity verification agencies and fraud prevention databases. These partners process only the personal data strictly necessary for verification purposes and are prohibited from using your information for any other purpose.

7.5 Affiliate and Marketing Partners

We may share limited analytical and attribution data with affiliate marketing partners to measure the effectiveness of their referrals and calculate commissions. This data is aggregated or pseudonymised wherever possible and shared subject to appropriate data protection safeguards and your marketing consent preferences.

8. International Data Transfers

Spinsy Casino operates internationally and, as a result, your personal data may be transferred to, stored, and processed in countries outside Australia — including servers and processors located in the European Union, Curaçao, and other jurisdictions. Whenever we transfer your personal information internationally, we take proactive steps to ensure that an adequate level of protection remains in place, including:

• Relying on standard contractual clauses approved by relevant data protection authorities
• Ensuring recipient countries provide a level of data protection equivalent to Australian standards
• Applying technical and organisational information security measures consistent with our obligations under the Australian Privacy Act 1988
• Conducting data transfer impact assessments where required by applicable law

If you would like further details about our international transfer mechanisms or the countries to which your data may be transferred, please contact our Data Protection Officer at [email protected].

9. Data Security

Spinsy Casino data security is among our highest operational priorities. We implement a comprehensive, layered suite of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our information security infrastructure includes the following safeguards:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers, ensuring that your personal information and financial details remain fully protected in transit
• Advanced firewalls and intrusion detection and prevention systems (IDPS) monitoring our network 24/7
• Secure data storage with role-based access controls, ensuring that only authorised personnel can access sensitive data on a strict need-to-know basis
• Regular vulnerability assessments and independent penetration testing of our platform and infrastructure
• Certified Random Number Generator (RNG) technology, audited by independent testing laboratories to ensure game fairness
• Mandatory KYC verification before processing any player's first withdrawal
• Comprehensive staff training on confidentiality obligations, data protection best practices, and incident response procedures
• A documented data breach response plan, including notification procedures compliant with the Australian Notifiable Data Breaches (NDB) scheme

While Spinsy Casino applies industry-leading information security measures, no online system can guarantee absolute security against every conceivable threat. We strongly advise all players to use strong, unique passwords, enable any two-factor authentication options available, and contact us immediately at [email protected] if they suspect any unauthorised access to their account.

10. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes described in this Spinsy Casino privacy policy, or as required by applicable law. Our data storage and retention practices are guided by legal minimums, operational necessity, and the principle of data minimisation. The following table sets out our standard retention periods by data category.

Once the applicable retention period expires, Spinsy Casino securely deletes or anonymises your personal data in accordance with our internal data protection procedures and industry best practices. Anonymised data, from which individual identification is no longer possible, may be retained indefinitely for statistical and research purposes.

11. Your Privacy Rights

As an Australian resident or an individual whose data is processed by Spinsy Casino, you hold a range of meaningful and enforceable privacy rights. We are committed to facilitating the exercise of these privacy rights promptly, transparently, and without unnecessary obstacles. Below, we set out each right and how you can exercise it.

11.1 Right of Access

You have the right to request a copy of the personal data that Spinsy Casino holds about you. Upon receiving a valid and verified request, we will provide a comprehensive summary of your data within 30 calendar days. This right allows you to confirm what personal information we hold and to verify that it is being processed lawfully. There is no charge for a first access request in any 12-month period.

11.2 Right to Correction

If any of your personal information held by Spinsy Casino is inaccurate, incomplete, or out of date, you may request that we correct it without undue delay. You can also update certain details — such as your email address or phone number — directly through your account settings on spinsycasinos-au.com. For more complex corrections, please contact our team at [email protected].

11.3 Right to Deletion

In certain circumstances, you may request the deletion of your personal data held by Spinsy Casino. This right applies where the data is no longer necessary for the purpose for which it was collected, you have withdrawn consent, or you object to processing where there is no overriding legitimate interest. Please note that we may be required by law to retain some information — for example, transaction records for AML and tax purposes — even after a deletion request is made. Where full deletion is not possible, we will inform you of the reason and the anticipated retention period.

11.4 Right to Restriction of Processing

You may request that Spinsy Casino restrict the processing of your personal data in specific situations — for example, while you contest the accuracy of the data, while we assess an objection you have raised, or where the processing is unlawful but you prefer restriction over deletion. During a restriction period, we will store your data but refrain from actively processing it beyond what is necessary for storage.

11.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON). You may also request that we transmit your data directly to another organisation, where technically feasible. This right supports your ability to switch services without losing your information history.

11.6 Right to Object

You may object at any time to the processing of your personal data where Spinsy Casino relies on legitimate interests as the lawful basis. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defence of legal claims. If you object to direct marketing data processing, we will cease processing your data for that purpose immediately and without question.

11.7 Right to Withdraw Consent

Where Spinsy Casino processes your personal data on the basis of consent — such as for marketing communications or non-essential cookies — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal. To withdraw your marketing consent, simply click the "unsubscribe" link in any email communication or contact us at [email protected]. To update your cookie consent, use the preference centre on our website.

To exercise any of the above privacy rights, please submit a written request to [email protected], including your full name, registered email address, and a clear description of the right you wish to exercise. We may request additional identification documents to verify your identity before processing your request, in order to protect your data security and ensure that requests are genuine.

12. Supervisory Authority — OAIC

If you believe that Spinsy Casino has not handled your personal data in compliance with the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to lodge a formal complaint with the Office of the Australian Information Commissioner (OAIC) — the independent supervisory authority for privacy and data protection matters in Australia. We would, however, appreciate the opportunity to address your concerns directly before any escalation to the OAIC. Please contact our privacy team first at [email protected], and we will endeavour to resolve the matter to your satisfaction within 30 days.

The OAIC contact details are as follows:

• Website: oaic.gov.au
• Phone: 1300 363 992 (within Australia, business hours)
• Online complaint form: available at oaic.gov.au/privacy/privacy-complaints
• Post: GPO Box 5218, Sydney NSW 2001

13. Data Protection Officer

Spinsy Casino has appointed a dedicated Data Protection Officer (DPO) responsible for overseeing all aspects of Spinsy Casino data protection compliance. The DPO monitors our adherence to this privacy policy, advises on data processing activities, and acts as the primary point of contact for all matters relating to privacy, data security, and the exercise of individual privacy rights.

You may reach our DPO and privacy team using the following contact details:

• Data Protection Officer (DPO): [email protected]
• General privacy enquiries: [email protected]
• Security incidents: [email protected]
• Customer support (live chat, 24/7): available via the spinsycasinos-au.com website
• Customer support (email, reply within 12h): [email protected]

14. Changes to This Privacy Policy

Spinsy Casino reserves the right to update or modify this privacy policy at any time to reflect changes in applicable legislation, evolving best practices, or changes in our business operations. When we make material changes to the Spinsy Casino privacy policy, we will notify you in advance by email (sent to the address registered on your account) and/or by displaying a prominent notice on the spinsycasinos-au.com homepage. The effective date of the most recent revision will always be clearly indicated at the top of this document.

We encourage you to review the Spinsy Casino privacy policy periodically to stay informed about how we collect, use, and protect your personal information. Your continued use of our services after any changes to this policy constitutes acknowledgement and acceptance of the updated terms. If you do not agree with changes to the policy, you should cease using our services and, if appropriate, request closure of your account in accordance with our standard account closure procedure.