Privacy Policy

Spinland Casino acts as data controller for the information described below and is registered with the Information Commissioner's Office. Written enquiries should be addressed to our Data Protection Officer at [email protected].

Because we operate under both a UK Gambling Commission licence (52894) and a Malta Gaming Authority licence (MGA/B2C/370/2017), some records are held to satisfy two regulators at once. Where the two regimes prescribe different retention periods, we keep the record for the longer of the two.

Registration details include your full name, date of birth, residential address, email address, telephone number and chosen currency. Verification material may include a passport or driving licence image, a recent utility bill and, where source-of-funds checks are triggered, payslips or bank statements.

Financial records cover deposits, withdrawals, the last four digits of a payment card, wallet identifiers and the outcome of each transaction. We never store the full card number or the security code; those stay with our PCI DSS certified payment processors.

Gameplay records include stakes, results, bonus participation, session start and end times, and the safer-gambling settings you have applied. Technical records include IP address, approximate location derived from it, device type, browser fingerprint, and the pages you viewed before and after visiting us.

Support history covers live chat transcripts, emails and — where you have been told at the start of a call — voice recordings, which we keep as evidence of what was agreed.

Performance of our contract with you covers opening the account, settling wagers, paying withdrawals and answering support requests. Without this information we cannot provide the service at all.

Legal obligation covers age verification, anti-money-laundering checks under the Proceeds of Crime Act 2002 and the Money Laundering Regulations 2017, the reporting duties attached to our licences, and the retention of gambling transaction records.

Legitimate interest covers fraud prevention, collusion and bonus-abuse detection, network security, and the identification of markers of gambling harm so that our player safety team can intervene. We have assessed each of these and consider the benefit to customers and to platform integrity to outweigh the limited privacy intrusion involved.

Consent covers marketing by email, SMS and push notification, and any non-essential cookies. Consent is asked for separately, is never bundled with acceptance of the terms, and can be withdrawn at any moment from the Communications tab or by using the unsubscribe link — withdrawal does not affect the lawfulness of anything done beforehand.

We disclose information to identity-verification agencies, payment providers, game suppliers, cloud hosting partners and analytics processors, each bound by a written contract that limits them to acting on our documented instructions. We also disclose to the Gambling Commission, the Malta Gaming Authority, the National Crime Agency, HMRC, the police and GAMSTOP where the law or our licence conditions require it.

Spinland Casino does not sell personal information, and we do not pass your contact details to affiliates or advertisers for their own marketing purposes.

Some of our processors operate outside the United Kingdom. Those transfers rely on UK adequacy regulations or on the International Data Transfer Addendum to the EU Standard Contractual Clauses, supported by a transfer risk assessment that we review annually.

Data is encrypted in transit with TLS 1.3 and at rest with AES-256. Access is restricted by role, logged, and reviewed quarterly, and our infrastructure is penetration tested by an independent firm at least once a year.

Account, transaction and verification records are kept for five years after the account closes, as anti-money-laundering law requires. Chat and call recordings are kept for 24 months, marketing consent records for six years after withdrawal, and self-exclusion records indefinitely so that an exclusion cannot be accidentally reversed.

You may request access to your information, correction of anything inaccurate, erasure where no legal duty compels us to retain it, restriction of processing, portability of the data you supplied to us, and objection to processing carried out on legitimate-interest grounds.

Send requests to [email protected]. We respond within one calendar month and may extend that by two further months for complex cases, telling you why. There is no charge unless a request is manifestly unfounded or excessive.

If you are unhappy with our handling of a request you may complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, or to the Office of the Information and Data Protection Commissioner in Malta.