01 Introduction & Data Controller Details
Welcome to the official Spin Casino Privacy Policy. This privacy document details how Spin Casino ("Platform", "we", "us", "our") collects, organizes, utilizes, discloses, stores, and protects personal data gathered when you visit us-spincasino.com, interface with our responsive web software, initiate monetary deposits and withdrawals, or participate in real-money slots, progressive jackpots, and live croupier streams.
Operating in full adherence to international data protection mandates—including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), and applicable United States state-level privacy statutes—Spin Casino acts as the certified Data Controller of your personal records.
Our Privacy Commitment: We never sell, monetize, or rent your personal identifiable information (PII) to third-party data brokers, advertising collectives, or unauthorized corporate marketers. Every byte of personal data gathered is deployed strictly to provide licensed wagering services, ensure financial integrity, and maintain anti-money laundering compliance.
02 Categories of Information We Collect
To provide safe, legally permitted real-money wagering entertainment, we gather distinct classifications of information directly from you, automatically through your device interactions, and from accredited third-party verification bureaus:
| Category | Data Points Included | Collection Channel |
|---|---|---|
| Identity Records | Legal full name, date of birth, residential street address, government national identification number, passport, driver's license, and taxpayer identification (SSN/SIN). | Provided by you during registration and KYC account verification checkpoints. |
| Contact Data | Primary email address, mobile telephone number, secondary emergency contact, and physical postal jurisdiction. | Collected during onboarding and updated via account settings. |
| Financial Credentials | Masked credit/debit card numbers (first six and last four digits), PayPal identifiers, ACH routing tokens, and bank settlement account details. | Furnished when initiating deposits or configuring withdrawal payment rails. |
| Wagering Telemetry | Game play sessions, wager quantities, game ID references, spin outcome logs, jackpot triggers, deposit frequency, and bonus playthrough status. | Automatically generated by our certified PRNG gaming engine during gameplay. |
| Technical Diagnostics | Internet Protocol (IP) address, operating system, browser architecture, device fingerprint, battery level, resolution, and connection latency. | Automatically recorded via server logs, cookies, and network tracking scripts. |
03 Legal Grounds for Data Processing
We do not process personal data arbitrarily. Under regulatory frameworks including the GDPR and US state gaming laws, every processing action is justified under one or more established legal bases:
- Contractual Obligation: Processing necessary to execute the user contract between you and Spin Casino, including hosting games, calculating bets, funding wallets, and distributing withdrawal winnings.
- Statutory & Regulatory Compliance: Strict obligations imposed by state gaming divisions, anti-money laundering (AML) laws, Bank Secrecy Act (BSA) mandates, counter-terrorist financing directives, and mandatory tax reporting.
- Legitimate Interests: Monitoring gameplay patterns to prevent automated bot scripts, detecting syndicate collusion, thwarting software tampering, and fortifying network infrastructure against cybersecurity attacks.
- Explicit Consent: Delivered when you opt-in to optional promotional marketing notifications, SMS bonus alerts, or specialized customized rewards programs. You may revoke consent at any time.
04 How We Use Your Personal Information
Your personal details enable us to maintain an enjoyable, highly secure, and legally transparent casino lobby. Specifically, we utilize your records for:
- Player Account Management: Creating your authenticated player profile, maintaining single-account integrity, and providing password recovery tools.
- Financial Settlement: Facilitating rapid incoming deposits and authorizing real currency withdrawals back to authenticated payment channels.
- KYC Verification: Validating player identity against national civil registries to eliminate fraudulent profiles, identity theft, and underage wagering.
- Responsible Gaming Monitoring: Tracking velocity, duration, and deposit caps to proactively detect problem gambling behaviors and activate autonomous limits or cooling-off periods.
- Auditing & Fair Play: Providing anonymized telemetry data to accredited independent auditing agencies (e.g., eCOGRA) to certify payout percentages and game RTP accuracy.
05 Geolocation Verification & Mobile Telemetry
Under state and provincial gaming statutes (such as those in New Jersey, Pennsylvania, Michigan, and Ontario), real-money wagers can only be executed while you are physically within approved geographical boundaries.
To maintain regulatory compliance, Spin Casino deploys automated geolocation software provided by accredited vendors (including GeoComply). At the moment you launch real-money games or make a wager:
- Your device’s GPS coordinates, nearby Wi-Fi network MAC addresses, and cell tower triangulation data are sampled to corroborate physical location.
- System checks are executed to identify Virtual Private Networks (VPNs), remote desktop applications, and proxy servers engineered to mask true geographical positioning.
- Geolocation coordinate tokens are cryptographically signed and archived for regulatory validation; they are never traded or repurposed for commercial advertising.
Notice on Location Consent: Disabling location access in your browser or smartphone settings will automatically prevent the launching of real-money slot reels or live casino tables, as geolocational verification is an indispensable legal prerequisite.
06 Cookies, Tracking & Device Fingerprinting
When accessing Spin Casino, small text files known as cookies, local storage objects, and web beacons are placed onto your computer or mobile device. These serve critical functional and diagnostic purposes:
1. Strictly Necessary Cookies
These files are essential for navigating the site, authenticating your encrypted login session, and tracking your wallet balance across table switches without forcing re-authentication. They cannot be disabled within our systems.
2. Performance & Analytical Cookies
These cookies help us evaluate page load speeds, identify broken links, and measure server response latency across desktop and mobile browsers. Data gathered is aggregated and stripped of identifying markers.
3. Anti-Fraud & Security Tokens
We capture device characteristics (screen resolution, browser configuration, hardware acceleration attributes) to generate a unique digital hardware hash. This safeguards your profile against unauthorized credential stuffing and account takeover attacks.
07 Third-Party Data Disclosures & Strategic Partners
Spin Casino shares personal information strictly with vetted third-party service providers bound by strict contractual data-processing agreements (DPAs):
- Payment Processors: Tier-1 merchant gateways, including Visa, MasterCard, PayPal, and VIP Preferred ACH, to safely execute real-money transactions.
- iGaming Software Studios: Game providers like Microgaming (Games Global), Evolution Gaming, NetEnt, and Pragmatic Play receive encrypted player IDs to populate game sessions and verify jackpot wins.
- Regulatory & Judicial Bodies: State gaming control boards, tax authorities, and law enforcement agencies when compelled by valid subpoenas, court orders, or statutory AML disclosures.
- Identity Verification Bureaus: Credit reference bureaus and KYC validation services to confirm your legal age, name, and address without impacting your personal credit rating.
08 Cross-Border Data Transfers & Escrow Storage
To provide 24/7 uptime and redundant failover safety, personal information may be transferred to, managed in, or replicated on cloud infrastructure located outside your home state or country, including data centres situated across the United States, Canada, the United Kingdom, and the European Union.
When transferring data internationally, Spin Casino enforces rigorous safeguards recognized by global regulators, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Data Transfer Addendums ensuring equivalent standards of data sovereignty and privacy rights.
- End-to-end hardware-level AES-256 encryption applied to all data in transit across international fiber backbones.
09 Data Retention & Mandatory Recordkeeping
We do not preserve personal data indefinitely. Personal records are retained only for as long as your account remains open, or as strictly mandated by legal and regulatory frameworks governing real-money gaming establishments:
- Active Player Profiles: Maintained throughout the lifespan of your active membership to deliver continuous platform access.
- Financial & Transaction Records: Kept for a mandatory minimum of five (5) to seven (7) years following account closure or transaction completion, as required under international Anti-Money Laundering (AML) directives and state revenue department laws.
- Self-Exclusion & Responsible Gaming Records: Retained indefinitely or for the duration of the exclusion term to guarantee that self-excluded individuals cannot reopen accounts or circumvent spending protections.
Upon expiration of statutory retention periods, personal records are permanently erased, anonymized, or destroyed using military-grade data sanitization procedures.
10 Your Individual Privacy Rights
Depending on your place of residence (such as California, Virginia, Colorado, Ontario, or the European Economic Area), you possess defined legal rights concerning your personal information:
- Right to Access / Know: Request a comprehensive disclosure of what personal data categories we collect, use, disclose, and maintain about you.
- Right to Rectification: Demand the immediate correction of inaccurate, outdated, or incomplete biographical or banking records.
- Right to Erasure ("Right to Be Forgotten"): Request that we delete your personal information, subject to mandatory statutory AML, tax, and licensing retention limits.
- Right to Data Portability: Obtain a structured, machine-readable export (JSON or CSV format) of the personal records you furnished to our platform.
- Right to Opt-Out of Automated Profiling: Object to automated processing of personal information used to evaluate risk or customize marketing communications.
- Non-Discrimination: We will never deny you service, alter odds, or diminish gameplay quality for exercising any of your statutory privacy prerogatives.
Submitting a Privacy Request: To exercise any of the rights enumerated above, email our Data Protection Office at [email protected]. We verify requester identity before releasing records and fulfill formal inquiries within thirty (30) days without charge.
11 Cybersecurity, 256-Bit TLS & Fraud Protocols
Protecting your data against unauthorized interception, digital exfiltration, and compromise is a fundamental responsibility at Spin Casino. We maintain a defense-in-depth cybersecurity framework incorporating:
- Transport Layer Security (TLS 1.3): All network communications between your web browser and our servers are shielded by 256-bit cryptographic encryption.
- PCI-DSS Compliance: Our financial processing tier strictly conforms to Level 1 Payment Card Industry Data Security Standards; complete raw credit card numbers are never held on our servers.
- Isolated Segregated Networks: Production player databases are isolated from public web tiers via multi-layered hardware firewalls, intrusion prevention systems (IPS), and continuous AI anomaly detection.
- Routine Penetration Testing: Independent certified cybersecurity auditors execute biannual ethical penetration exploits to detect and resolve software vulnerabilities.
12 Protection of Minors & Data Protection Officer
Spin Casino strictly prohibits participation by individuals under the legal gambling age (21 years of age in the United States, 19 in Canadian provinces, and 18 internationally). We do not knowingly collect personal information from underage minors. If we discover that personal records belonging to an underage individual have been collected inadvertently, the account will be immediately terminated and the associated data expunged.
Contacting Our Data Protection Officer (DPO)
If you have questions, feedback, or concerns regarding this Privacy Policy or our operational handling of your personal data, please contact our dedicated Data Protection Officer:
- Email:
[email protected] - Mailing Address: Data Privacy Office, Spin Casino Compliance Directorate, 1200 Atlantic Avenue, Atlantic City, NJ 08401
- Response Window: Our legal compliance team responds to all formal privacy communications within one (1) business day.