Privacy Policy

1. Introduction

Spins House (“we,” “us,” “our,” or “the Casino”) is committed to protecting and respecting your privacy. This Privacy Policy (the “Policy”) explains how we collect, use, disclose, and safeguard your personal data when you visit our website spinshouse.uk, use our mobile application, or interact with our services (collectively, the “Services”).

This Policy is designed to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR). By using our Services, you consent to the data practices described in this Policy. If you do not agree with the terms of this Policy, please do not access or use our Services.

We are licensed and regulated by the Curacao eGaming Authority under license number GLH-OCCHKTW0702282021. Our data controller representative for GDPR purposes can be contacted at [email protected].

2. Information We Collect

We collect several types of information from and about users of our Services:

A. Personal Data You Provide Directly:

Identity Data: First name, last name, maiden name, username or similar identifier, date of birth, gender.
Contact Data: Billing address, delivery address, email address, and telephone numbers.
Financial and Transaction Data: Bank account and payment card details, deposit and withdrawal history, wagering activity, bonus history.
Profile Data: Your username and password, preferences, feedback, and survey responses.
Verification Data: Copies of identification documents (e.g., passport, driver’s license), proof of address (e.g., utility bill), and source of funds documentation, as required for our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations.
Communications Data: Records of your communications with our Customer Support team (via email, live chat, or telephone).

B. Personal Data We Collect Automatically (Technical Data):

Device Data: Internet protocol (IP) address, device type, unique device identifiers, browser type and version, time zone setting, and location.
Usage Data: Information about how you use our Services, including full URL clickstreams to, through, and from our site, pages viewed, game session duration, and page response times.
Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies. For detailed information, please see our Cookie Policy (accessible at the bottom of our website).

C. Personal Data From Third Parties:
We may receive personal data about you from various third parties, including:

Payment Service Providers: To verify and process your transactions.
Fraud Prevention Agencies: To help us verify your identity and protect against fraud.
Publicly Available Sources: Such as social media platforms (where you have made information public) or credit reference agencies.
Identity Verification Services: To assist with our KYC/AML checks.

3. How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we will use your data in the following circumstances and for the following purposes:

Purpose	Lawful Basis for Processing
To register you as a new customer and manage your player account.	Performance of a Contract with you.
To process deposits, withdrawals, and manage financial transactions.	Performance of a Contract and Legal Obligation (e.g., financial record-keeping).
To verify your identity and age, and conduct security/AML checks.	Legal Obligation and Legitimate Interest (to prevent fraud and operate a secure service).
To provide customer support and respond to your inquiries.	Performance of a Contract and Legitimate Interest (to provide good service and retain customers).
To manage our promotional campaigns, bonuses, and offers relevant to you.	Legitimate Interest (to grow our business) or Consent (for certain marketing communications).
To ensure the security of our website and Services, including detecting and preventing fraud, money laundering, and other illegal acts.	Legitimate Interest (to protect our business and customers) and Legal Obligation.
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data).	Legitimate Interest (for running our business, provision of administration and IT services, network security).
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences.	Legitimate Interest (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy).
To comply with legal and regulatory reporting requirements to the Curacao eGaming Authority and other relevant bodies.	Legal Obligation.

4. Data Sharing and Disclosures

We may share your personal data with the following categories of third parties for the purposes set out in this Policy:

Service Providers: We engage trusted third parties to perform functions and provide services to us, such as payment processing, KYC verification (e.g., Jumio), customer support, IT infrastructure, marketing analytics, and game providers. These providers are contractually bound to protect your data and use it only for the purposes we specify.
Group Companies: We may share data with other companies within our corporate group for internal administrative purposes and to provide a unified service.
Regulatory and Government Bodies: As a licensed operator, we are required to share certain data with the Curacao eGaming Authority, financial regulators, law enforcement agencies, or other authorities to comply with legal obligations, protect our rights, or prevent crime.
Professional Advisors: Including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.
Business Transfers: If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that deal. We will notify you via email and/or a prominent notice on our website of any change in control or use of your personal data.

We do not sell or rent your personal data to third parties for their marketing purposes.

5. International Data Transfers

We operate globally and may transfer, store, and process your personal data in countries outside the European Economic Area (EEA), such as Curacao, where our parent company is based, or where our service providers operate. When we transfer your data outside the EEA, we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:

Transferring data to countries deemed to provide an adequate level of protection by the European Commission.
Using specific contracts (standard contractual clauses) approved by the European Commission which give personal data the same protection it has in the EEA.
Relying on other legally approved mechanisms for transfers to third countries.

You can obtain details of the specific mechanism we use for international transfers by contacting our Data Protection Officer at [email protected].

6. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of your personal data against accidental loss, unauthorized access, use, alteration, or disclosure. These measures include encryption (SSL/TLS) for data transmission, secure servers, access controls, and regular security assessments.

Despite our safeguards, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. We cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, and the applicable legal requirements.

As a licensed gambling operator, we are legally required to retain certain transaction and identity data for a minimum period. Typically, we retain:

KYC documents and account data: 5 years after account closure.
Financial transaction records: 7 years after the transaction.
Marketing preferences: Until you withdraw consent or object.

After the retention period, we will securely delete or anonymize your personal data.

8. Your Data Protection Rights

Depending on your location, you may have the following rights under data protection laws:

Right of Access: To request copies of your personal data.
Right to Rectification: To request correction of inaccurate or incomplete data.
Right to Erasure (‘Right to be Forgotten’): To request deletion of your personal data, subject to our legal obligations to retain it.
Right to Restrict Processing: To request we suspend the processing of your personal data.
Right to Data Portability: To request the transfer of your data to another organization.
Right to Object: To object to our processing of your personal data, particularly for direct marketing.
Right to Withdraw Consent: Where we rely on consent to process your data, you can withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. We may need to request specific information from you to confirm your identity before processing your request. You also have the right to lodge a complaint with a supervisory authority, such as the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), which is the lead supervisory authority for Curacao-based entities under the GDPR.

9. Cookies and Tracking Technologies

Our website uses cookies to distinguish you from other users, enhance your experience, and improve our Services. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly. For full details, please read our separate Cookie Policy.

10. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other reasons. We will notify you of any material changes by posting the new Policy on this page with a new “Last Updated” date and, where appropriate, we may notify you by email. We encourage you to review this Policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Data Protection Officer (DPO):

By Email: [email protected]
By Post: Data Protection Officer, Spins House N.V., Emancipatie Boulevard 29, Willemstad, Curaçao.
Via Website: You can also submit inquiries through the “Contact Us” form on our website.