Spinit Casino Privacy Policy

At Spinit Casino, protecting your personal data is a fundamental commitment. This Spinit Casino privacy policy outlines how we collect, process, store and safeguard your personal information in full compliance with the Australian Privacy Act 1988, the Australian Privacy Principles (APPs), and the General Data Protection Regulation (GDPR) where applicable. We believe in complete transparency about our data collection practices, and we want every Australian player to feel confident that their user data is handled with the utmost care and confidentiality.

1. Data Controller Identity

Spinit Casino is operated by a company registered in Curaçao, licensed by the Government of Curaçao. As the data controller, Spinit Casino determines the purposes and means of processing your personal data. For any data protection queries, you can reach our dedicated Data Protection Officer (DPO) at [email protected]. We are committed to upholding the highest standards of information security and data security across all our operations.

2. Categories of Personal Data We Collect

Spinit Casino collects several categories of personal information to deliver a safe, personalised and compliant gaming experience. Our data collection covers the following types of user data:

2.1 Identification Data

Full legal name, date of birth and gender
Government-issued ID details (passport, driver's licence)
Tax identification number where required
Profile username and account credentials

2.2 Contact Data

Email address and phone number
Residential and correspondence address
Preferred language and communication settings

2.3 Financial Data

Payment method details (Visa, Mastercard, Skrill, Neteller, PayID, Paysafecard, Neosurf, Bitcoin, Ethereum, Litecoin, bank transfer)
Transaction history — deposits, withdrawals, bonuses
Wallet addresses for cryptocurrency transactions
Bank account details for bank transfer verification

2.4 Gaming Activity Data

Games played, bets placed, wins and losses
Session duration and frequency of play
Bonus and promotion usage history
Responsible gambling tool usage and self-exclusion history

2.5 Technical and Device Data

IP address and geolocation data
Device type, operating system and browser version
Cookies and tracking pixel data
Log files and clickstream data

2.6 Communication Data

Customer support chat transcripts and email correspondence
Survey responses and feedback submissions
Responses to promotional communications

2.7 Sensitive Data

Where necessary for responsible gambling compliance, Spinit Casino may process certain sensitive categories of personal data, such as information relating to financial vulnerability. This is done solely to fulfil our duty of care obligations under Australian law.

2.8 Data from Third Parties

Identity verification data from KYC/AML service providers
Fraud detection signals from payment processors
Affiliate referral tracking data

3. How We Collect Your Data

The data collection methods employed by Spinit Casino include:

Direct collection: Information you provide during registration, KYC verification, deposit/withdrawal requests, bonus claims and customer support interactions.
Automated collection: Technical data gathered through cookies, log files and analytics tools as you navigate our platform.
Third-party sources: Data received from payment processors, identity verification providers, fraud prevention services and affiliate partners.
Public sources: Publicly available information used for due diligence and compliance purposes.

4. Purposes of Data Processing

Spinit Casino processes your personal data for the following clearly defined purposes:

Purpose	Details	Legal Basis
Account management	Creating, maintaining and securing your player account	Contract performance
Service provision	Processing deposits, withdrawals, bonus credits and gameplay	Contract performance
KYC/AML compliance	Verifying identity and preventing money laundering	Legal obligation
Security & fraud prevention	Detecting suspicious activity and protecting accounts	Legitimate interest
Responsible gambling	Monitoring play patterns and applying self-imposed limits	Legal obligation / Legitimate interest
Marketing & communications	Sending promotional offers, newsletters and updates	Consent
Analytics & improvement	Analysing platform usage to improve features and content	Legitimate interest
Customer support	Resolving queries and improving support quality	Contract performance

5. Spinit Casino Cookie Policy

The Spinit Casino cookie policy explains how we use cookies and similar tracking technologies on our platform. Cookies are small text files stored on your device that help us deliver a personalised and functional experience. The Spinit Casino website uses four categories of cookies:

5.1 Essential Cookies

These cookies are strictly necessary for the website to function. They enable core features such as secure login sessions, shopping cart functionality and fraud prevention. Essential cookies cannot be disabled without affecting site performance.

5.2 Analytical Cookies

Analytical cookies (e.g., Google Analytics) help us understand how players interact with our platform — which pages are visited most, how long sessions last and where users navigate from. This data processing helps Spinit Casino continuously improve the player experience. Analytical cookies are activated only with your consent.

5.3 Functional Cookies

Functional cookies remember your preferences — such as language settings, display options and responsible gambling tool configurations — to provide a more personalised experience during future visits to Spinit Casino.

5.4 Marketing Cookies

Marketing cookies enable us and our advertising partners to display relevant promotional content tailored to your interests. These cookies track browsing activity across websites and are only set with your explicit consent as part of our cookie policy.

You can manage your cookie preferences at any time through your browser settings or our on-site cookie consent tool. Withdrawing consent for non-essential cookies will not affect your ability to use Spinit Casino core services.

6. Sharing Your Data with Third Parties

Spinit Casino does not sell your personal information to third parties. We may share your user data in the following limited circumstances:

Payment providers: To process deposits and withdrawals securely (e.g., Visa, Mastercard, Skrill, Neteller, PayID processors).
Identity verification providers: KYC/AML partners who verify your identity as required by law.
Regulatory authorities: Government bodies and licensing authorities in Curaçao and, where applicable, Australian regulators, when we have a legal obligation to disclose.
Fraud prevention services: Third-party agencies that help detect and prevent fraudulent activity.
Technology partners: Cloud hosting providers, game studios (Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming, Yggdrasil, etc.) and software vendors who process data on our behalf under strict data protection agreements.
Affiliate partners: Limited tracking data shared with referring affiliate sites for commission purposes.

All third parties engaged by Spinit Casino are contractually bound to maintain the confidentiality and security of your personal data and to process it only for the specified purposes.

7. International Data Transfers

As Spinit Casino operates globally, your personal data may be transferred to and processed in countries outside Australia. Whenever we transfer personal information internationally, we implement appropriate safeguards — including standard contractual clauses and data transfer agreements — to ensure your data receives an equivalent level of protection to that provided under Australian law. Our data storage infrastructure is protected by robust security measures regardless of geographic location.

8. Data Security at Spinit Casino

Spinit Casino data security is maintained through a comprehensive suite of technical and organisational measures:

256-bit SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted to the highest commercial standard.
Firewalls and intrusion detection: Our servers are protected by enterprise-grade firewalls and real-time intrusion detection systems.
Database encryption: Sensitive personal data is stored in encrypted databases with restricted access controls.
Access controls: Only authorised personnel with a legitimate business need can access user data.
Regular security audits: Our information security posture is regularly tested by independent cybersecurity professionals.
RNG certification: Our gaming systems are certified by independent laboratories, reinforcing our commitment to fairness and data integrity.
Two-factor authentication: Available to all players as an additional layer of account data security.

Despite our extensive precautions, no internet-based system can be guaranteed 100% secure. In the unlikely event of a data security breach that poses a risk to your rights, Spinit Casino will notify you and relevant authorities promptly in accordance with Australian law.

9. Data Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Our data storage retention periods are as follows:

Data Category	Retention Period	Reason
Account and identity data	5 years after account closure	AML/KYC legal obligation
Transaction records	7 years	Financial regulatory requirements
Customer support records	3 years	Dispute resolution
Marketing consent records	Until consent is withdrawn	Consent documentation
Technical logs	12 months	Security monitoring
Responsible gambling data	5 years after self-exclusion ends	Player protection obligations

Once the applicable retention period expires, your personal data is securely deleted or anonymised in accordance with our data storage protocols.

10. Your Privacy Rights

As an Australian player using Spinit Casino, you have the following privacy rights under the Privacy Act 1988 and the APPs:

Right of access: You can request a copy of the personal data Spinit Casino holds about you.
Right to correction: If your personal information is inaccurate or outdated, you can request that we correct it.
Right to deletion: Subject to our legal obligations (such as AML/KYC retention requirements), you can request deletion of your user data.
Right to restriction: You can request that we restrict data processing of your personal data in certain circumstances.
Right to data portability: You can request a structured, machine-readable copy of your personal information to transfer to another service provider.
Right to object: You can object to data processing based on legitimate interests, including direct marketing.
Right to withdraw consent: Where data processing is based on your consent (e.g., marketing cookies), you can withdraw that consent at any time.

To exercise any of your privacy rights, please contact our DPO at [email protected]. Spinit Casino will respond to all valid privacy requests within 30 days.

11. Supervisory Authority — OAIC

If you believe that Spinit Casino has not handled your personal data in accordance with the Privacy Act 1988 or the Australian Privacy Principles, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au
Phone: 1300 363 992
Email: [email protected]

We encourage you to contact us first at [email protected] so that we can attempt to resolve your concern directly before escalating to the OAIC.

12. Changes to This Privacy Policy

Spinit Casino reserves the right to update this privacy policy at any time to reflect changes in law, technology or our business practices. When we make significant changes to our data protection practices, we will notify registered players by email to the address on file and/or display a prominent notice on our website. The updated Spinit Casino privacy policy will take effect from the date of publication. We encourage you to review this page periodically to stay informed about how we protect your personal information.

Frequently Asked Questions

What personal data does Spinit Casino collect?

Spinit Casino collects identification data (name, date of birth, ID documents), contact data (email, phone, address), financial data (payment method details, transaction history), gaming activity data, technical data (IP address, device info) and communication data. This data collection is necessary to provide our services, meet legal obligations and maintain data security.

How does Spinit Casino use cookies?

Under the Spinit Casino cookie policy, we use four types of cookies: essential (required for site function), analytical (usage statistics), functional (preference memory) and marketing (personalised advertising). You can manage non-essential cookie preferences through your browser settings or our on-site consent tool at any time.

Is my personal data shared with third parties?

Spinit Casino shares user data only with payment processors, KYC/AML providers, regulatory authorities (when legally required), fraud prevention services and technology partners. We never sell your personal information and all third parties are bound by strict data protection agreements to ensure confidentiality.

How does Spinit Casino protect my data?

Spinit Casino data security relies on 256-bit SSL/TLS encryption, enterprise firewalls, database encryption, access controls, two-factor authentication and regular independent security audits. These measures ensure robust information security for all player personal data stored on our systems.

How long does Spinit Casino keep my data?

Spinit Casino data storage periods vary by data type: account and identity data is retained for 5 years after account closure (AML/KYC obligations), transaction records for 7 years, customer support records for 3 years and technical logs for 12 months. After these periods, your personal data is securely deleted or anonymised.

How do I exercise my privacy rights?

To exercise your privacy rights — access, correction, deletion, restriction, portability, objection or withdrawal of consent — contact the Spinit Casino Data Protection Officer at [email protected]. We respond to all valid requests within 30 days. If you are unsatisfied with our response, you can escalate to the OAIC (Office of the Australian Information Commissioner).

How do I opt out of marketing communications?

You can withdraw consent for marketing communications from Spinit Casino at any time by clicking the 'unsubscribe' link in any promotional email, adjusting your notification preferences in your account settings, or contacting us at [email protected]. Opting out of marketing will not affect the data processing necessary for your account management or legal compliance.