Our Privacy Policy at Spinado Casino
This page explains what personal data we collect when you register, play or contact us, why we process it, how long we keep it and the rights you hold over it. Spinado Casino is operated by Spinado Gaming N.V. (Curaçao), licence OGL/2024/165/0921.
Data We Collect
We collect personal data directly from you and automatically as you use our site. The categories below cover everything we process, and nothing beyond them.
- Identity data: name, date of birth, email address, phone number, residential address.
- Verification documents: copies of your ID, proof of address and proof of payment method, required under our KYC policy.
- Transaction data: deposits, withdrawals, bonuses claimed and wagering history, in GBP, EUR, BTC, USD, CAD, NOK or USDT.
- Technical data: IP address, device and browser type, operating system and connection information.
- Gameplay behaviour: games played, bets placed, session times and results, used for fraud prevention and responsible-gambling monitoring.
- Marketing preferences: your choices on bonus emails, SMS and promotional communications.
How We Use Your Data
We process your personal data for specific purposes only. When you register, we create and maintain your player account. Before your first withdrawal we verify your identity, address and payment method as required by our licence conditions.
- Processing your deposits and withdrawals across Visa Debit, Mastercard, e-wallets, bank transfer and crypto.
- Preventing fraud, money laundering and multi-accounting through behavioural and transaction monitoring.
- Monitoring play for signs of problem gambling and enforcing the limits you set.
- Sending you marketing messages where you have consented, including our weekly 15% cashback and weekend reload offers.
- Meeting legal, regulatory and audit obligations under our Curaçao licence.
Our Legal Bases
Contract
We process identity, transaction and gameplay data to perform our contract with you: providing your account, running the games and paying out winnings. Without this data we cannot offer the service.
Legal obligation
KYC verification, AML checks and transaction record-keeping are required by our regulator. We keep these records for the statutory retention period whether or not your account remains open.
Legitimate interest
We rely on legitimate interest for fraud prevention, site security and aggregate analytics. These interests never override your rights, and we balance them against potential impact on you.
Consent
Marketing communications and non-essential cookies run on your consent. You withdraw consent at any time via account settings or the unsubscribe link, without affecting your gameplay.
How Long We Keep It
Retention depends on the type of data and the reason we hold it. We delete or anonymise data as soon as its purpose expires.
| Data category | Retention period |
|---|---|
| Identity and account data | For the life of your account, then up to 5 years after closure |
| Verification (KYC) documents | Minimum 5 years, per regulatory requirements |
| Transaction and wagering records | Minimum 5 years from the transaction date |
| Marketing preferences and consent logs | Until you withdraw consent or delete your account |
| Technical and device logs | Up to 12 months |
| Support correspondence | Up to 3 years after the enquiry |
Sharing With Third Parties
We never sell your personal data. We share it only with processors and authorities who need it to deliver or police the service.
- Payment processors handling your deposits and withdrawals, such as card schemes, e-wallet providers and crypto gateways.
- KYC and AML verification providers that check your documents and screening status.
- Our regulator and law-enforcement bodies where legally requested.
- Game and platform providers delivering the 6,000+ titles in our lobby.
- Analytics and hosting providers working under data-processing agreements that bind them to our instructions.
Your Rights Over Data
You control your personal data. Email [email protected] or contact our support team, available 24/7 via live chat, and we respond within one month.
- Access: receive a copy of the personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion where no legal retention duty applies.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: stop marketing processing at any time.
- Complaint: raise a concern with your national data protection authority.