Privacy Policy – Spin City Casino
This Privacy Policy explains what personal data Spin City Casino collects from players in Canada, why we need it, how long we keep it and what rights you have over it. We process data to open and protect your account, verify your age and identity, handle deposits and withdrawals, prevent fraud and money laundering, and meet the obligations attached to our Curaçao eGaming licence (8048/JAZ). Our standards follow the principles of the GDPR and are aligned with Canadian PIPEDA expectations: collect only what is necessary, keep it secure, and be transparent about it. We never sell your personal data. Reading this page takes a few minutes and tells you exactly where your information goes.
Data We Collect
We collect information you give us, information created while you use the site, and information required by law.
| Category | Examples |
|---|---|
| Identity | Name, date of birth, nationality, ID document |
| Contact | Email, phone number, residential address |
| Account | Username, password hash, currency, preferences |
| Financial | Deposits, withdrawals, payment method details, balance history |
| Gameplay | Bets, sessions, bonuses claimed, limits set |
| Technical | IP address, device, browser, approximate location, log files |
Why We Process Your Data and on What Basis
Each purpose has a clear legal basis:
- Contract – opening your account, processing payments, delivering games and support.
- Legal obligation – age verification, KYC, anti-money-laundering checks, record keeping, responsible gambling duties.
- Legitimate interest – fraud prevention, platform security, service improvement, internal analytics.
- Consent – marketing emails, personalised promotions and non-essential cookies, which you can withdraw at any time.
Cookies and Similar Technologies
Cookies keep you logged in, remember your language and currency, and help us understand how pages perform.
- Essential cookies – login, session security and fraud prevention; they cannot be switched off.
- Functional cookies – saved preferences and interface settings.
- Analytics cookies – anonymous or aggregated traffic statistics.
- Marketing cookies – measurement of campaigns; used only with your consent.
You can accept, refuse or change cookie categories in the consent banner and later in your browser settings. Blocking essential cookies may prevent the site from working correctly.
Who We Share Data With
Access is limited to what each partner needs to do its job, and every recipient is bound by contract and confidentiality.
- Payment providers and banks, to complete deposits and withdrawals.
- Identity verification and AML screening services.
- Game studios and platform providers hosting the games you play.
- IT, hosting, email and customer-support suppliers.
- Regulatory or legal authorities, where disclosure is legally required.
When data is transferred outside your region, we rely on recognised safeguards such as standard contractual clauses. We do not sell personal data to advertisers or data brokers.
Retention Periods
We keep personal data only as long as necessary. Account, transaction and verification records are retained for the period required by anti-money-laundering and licensing rules after your account closes, typically several years. Marketing consent records are kept until you withdraw consent plus a short evidence period. Self-exclusion records are kept for as long as needed to enforce the exclusion. Technical logs are held for a shorter, security-driven period, after which data is deleted or irreversibly anonymised.
Your Rights
You can exercise the following rights free of charge:
- Access a copy of the personal data we hold about you.
- Correct inaccurate or incomplete information.
- Request erasure, where no legal retention duty applies.
- Restrict or object to certain processing, including profiling for marketing.
- Receive your data in a portable, machine-readable format.
- Withdraw consent and unsubscribe from marketing at any time.
Send requests from your registered email address; we may ask for identity confirmation and normally reply within 30 days.
Security, Minors and Contact
We use TLS encryption in transit, hashed passwords, segmented access rights, monitoring and staff confidentiality obligations to protect your information. No system is completely risk-free, so choose a strong unique password and enable every security option offered. Our service is for adults aged 18+ only; if we discover data belonging to a minor, the account is closed and the data deleted. Questions, data requests or complaints about privacy can be sent to the support address in the site footer or raised in live chat. We review this policy regularly and publish the revision date at the top of the page.