Spinboss logo

Privacy Policy

This privacy policy outlines how Spinboss collects, uses, protects, and manages your personal information when you access and use our online gaming platform. We are committed to safeguarding your data and maintaining transparency about our information handling practices. This document applies to all users who register, play, or interact with our casino services. By using Spinboss, you acknowledge that you have read and understood this policy and consent to the collection and processing of your information as described herein.

Information We Collect

Spinboss collects various types of information to provide you with secure gaming services and comply with regulatory requirements. When you register an account, we gather personal details including your full name, date of birth, residential address, email address, and telephone number. This information is necessary for identity verification and to meet legal obligations under Irish and European gaming regulations. We also collect payment information such as credit card details, e-wallet accounts, and banking information to process deposits and withdrawals, though sensitive financial data is processed through encrypted third-party payment providers and not stored on our servers.

During your use of our platform, we automatically collect technical information including your IP address, device type, browser version, operating system, and geographical location data. This technical data helps us optimise platform performance, prevent fraudulent activity, and ensure compliance with territorial restrictions. We maintain records of your gaming activity, including game selections, bet amounts, wins and losses, and transaction history. This casino privacy policy ensures that all collected data serves legitimate purposes related to service provision, security, and regulatory compliance. Cookies and similar tracking technologies are deployed to remember your preferences, maintain session security, and analyse usage patterns across our site.

How We Use Your Information

Your information serves multiple essential functions within our operations. We use personal data primarily to verify your identity, confirm your age and eligibility to gamble, and create and maintain your gaming account. This verification process is mandatory under Irish gambling legislation and helps protect vulnerable individuals from accessing age-restricted services. Payment information enables us to process your financial transactions securely, including deposits, withdrawals, and bonus credits, whilst maintaining accurate records for accounting and audit purposes.

We analyse your gaming behaviour and preferences to personalise your experience, suggest games that may interest you, and develop new features that enhance platform functionality. Technical data allows our security team to detect suspicious activity, prevent fraud, identify multiple accounts, and protect against cyber threats. The Spinboss casino policy requires us to retain certain records for regulatory reporting, tax compliance, dispute resolution, and cooperation with law enforcement when legally obligated. We may contact you via email, SMS, or phone regarding account updates, promotional offers, responsible gambling reminders, and important service announcements, though you retain the right to opt out of marketing communications whilst still receiving essential account notifications.

Data Sharing and Third Parties

Spinboss does not sell your personal information to third parties for marketing purposes. However, we share data with selected partners and service providers who assist in operating our platform. Payment processors handle financial transactions on our behalf, receiving only the information necessary to complete deposits and withdrawals securely. These providers operate under strict confidentiality agreements and comply with Payment Card Industry Data Security Standards. Game developers and software providers may receive anonymised usage statistics to improve game performance and develop new content, but they do not access personally identifiable information.

We share relevant data with regulatory authorities, licensing bodies, and government agencies when required by law or to maintain our operating licences. This includes reporting suspicious transactions to financial crime prevention units and providing information during regulatory audits. Legal obligations may compel us to disclose information to law enforcement, tax authorities, or courts in response to valid legal requests. Third-party verification services assist with identity checks, age verification, and fraud prevention screening during account registration and ongoing monitoring. Marketing partners may receive limited data to deliver targeted advertisements on external platforms, though you can control these preferences through your account settings or by adjusting cookie preferences on your browser.

Your Rights and Data Protection

Under the General Data Protection Regulation and Irish data protection law, you possess several fundamental rights regarding your personal information. You have the right to access all personal data we hold about you by submitting a subject access request through our customer support channels. We will provide this information in a structured, commonly used format within one month of your request. You may correct inaccurate or incomplete information by updating your account details or contacting our support team for assistance with fields you cannot modify directly.

The table below summarises your key data protection rights:

RightDescriptionHow to Exercise
AccessObtain copies of your personal dataSubmit request via customer support
RectificationCorrect inaccurate informationUpdate account settings or contact support
ErasureRequest deletion of your dataSubmit written request after account closure
RestrictionLimit how we process your dataContact data protection officer
PortabilityReceive data in transferable formatRequest through customer support
ObjectionOppose certain processing activitiesAdjust marketing preferences or contact support

You may request erasure of your data after closing your account, subject to our legal obligation to retain certain records for regulatory and accounting purposes. We must retain transaction records, identification documents, and gaming history for specified periods mandated by licensing authorities. You can restrict processing of your information or object to specific uses such as marketing communications. Data portability rights allow you to receive your information in a format suitable for transfer to another service provider. To exercise any of these rights, contact our data protection officer using the details provided on our website. If you believe we have mishandled your information, you have the right to lodge a complaint with the Data Protection Commission in Ireland.

Security and Data Retention

Spinboss implements comprehensive security measures to protect your information from unauthorised access, alteration, disclosure, or destruction. We employ industry-standard SSL encryption for all data transmitted between your device and our servers, ensuring that sensitive information remains secure during communication. Our systems are protected by firewalls, intrusion detection software, and regular security audits conducted by independent cybersecurity professionals. Access to personal data is restricted to authorised personnel who require the information to perform their duties, and all staff undergo mandatory data protection training.

We store your information on secure servers located within the European Economic Area or in jurisdictions that provide adequate data protection standards as recognised by European authorities. Regular backups ensure data integrity whilst maintaining the same security standards applied to primary systems. Our retention periods vary depending on the type of information and its purpose. Account information and transaction records are retained for seven years following account closure to comply with anti-money laundering regulations and tax requirements. Marketing preferences and communication records are kept for three years after your last interaction with us. Technical logs and security data are typically retained for two years unless required for ongoing investigations.

When information is no longer required, we securely delete or anonymise it to prevent reconstruction or identification. In the event of a data breach that poses risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours as required by law. We continuously review and update our security practices to address emerging threats and maintain the highest standards of data protection. This privacy policy is subject to periodic review and may be updated to reflect changes in our practices, legal requirements, or technological developments. Material changes will be communicated through email notification and prominent display on our website, with the updated version taking effect immediately upon publication.