logo Sign Up
Login Sign Up

Privacy Policy

Welcome to WinSpin Casino. This Privacy Policy explains how we collect, use, share and protect personal information when you visit or create an account on our site, use our services or contact our support team. We aim to be clear about our practices and to comply with applicable data protection laws, including GDPR principles where they apply.

Information We Collect

We collect information that is necessary to provide and improve our services, to meet legal requirements and to communicate with you. Categories of personal information we process include:

  • Account and registration data: email address, username, password (stored securely), date of birth, and contact details you provide.
  • Identity and verification data: identification documents and proof of address where required to confirm identity or meet legal obligations.
  • Usage and service data: records of your interactions with our site and services, such as games accessed, features used, and support requests.
  • Technical and device data: IP address, device identifiers, browser and operating system, connection information and other technical details collected automatically.
  • Communications: transcripts of live chat, emails, and other correspondence with our support team.
  • Preferences and marketing data: language, marketing preferences and opt‑in choices.

How We Use Your Information

We use personal information for specific, legitimate purposes, including:

  • Creating and managing your account and profile.
  • Verifying identity and meeting legal and regulatory requirements.
  • Operating, maintaining and improving our services and user experience.
  • Providing customer support and responding to inquiries.
  • Protecting our service and users by detecting, preventing and responding to fraud, abuse or security incidents.
  • Sending important notices about your account and updates to our policies.
  • Where you have consented, sending marketing communications and promotional offers.

Legal Basis for Processing (GDPR)

Where GDPR applies, we rely on one or more of the following legal bases to process personal data:

  • Contractual necessity: processing necessary to perform our contract with you and to provide services you request.
  • Legal obligation: processing required to comply with laws and regulatory obligations.
  • Legitimate interests: processing for business purposes such as fraud prevention, security and improving services, provided those interests do not override your rights.
  • Consent: where you have given clear consent for a specific purpose, such as receiving marketing messages or certain tracking technologies. You may withdraw consent at any time.

Cookies and Similar Technologies

We use cookies and similar technologies to provide core site functionality, to remember your preferences and to analyse how our services are used. Categories include:

  • Strictly necessary: required for basic site operation.
  • Preferences: to remember choices you make so the site works more efficiently.
  • Analytics: to understand site usage and improve performance.
  • Marketing: to deliver relevant communications where you have consented.

You can control cookie settings through your browser; please note that disabling certain cookies may affect site functionality.

Data Sharing and Disclosure

We share personal information only as necessary and with appropriate safeguards. Typical recipients include:

  • Service providers who perform functions on our behalf (e.g., hosting, analytics, support), under contract and confidentiality obligations.
  • Regulators, law enforcement or other authorities when required by law or to respond to lawful requests.
  • Professional advisers, auditors or other parties to handle disputes or legal matters.
  • In the event of a business transfer (such as a sale or merger), personal data may be transferred as part of that transaction, subject to privacy protections.

International Transfers

Your information may be processed in countries outside your own, including jurisdictions where our service providers operate. When transfers occur, we implement appropriate safeguards such as contractual measures or other lawful mechanisms to provide an adequate level of protection for your personal data.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, to meet legal and regulatory obligations, to resolve disputes and to enforce agreements. Retention periods depend on the type of information and the purpose of processing. When personal data is no longer needed, we will delete or anonymise it in a secure manner.

Your Rights

Depending on applicable law, you may have the following rights in relation to your personal information:

  • The right to access a copy of the personal data we hold about you.
  • The right to request correction of inaccurate or incomplete data.
  • The right to request deletion of your personal data where we have no legal basis to retain it.
  • The right to restrict or object to certain processing activities, including profiling for direct marketing.
  • The right to data portability for information you have provided to us in a structured, commonly used format.
  • The right to withdraw consent at any time where processing is based on consent.
  • The right to lodge a complaint with a supervisory authority if you believe your rights have been violated.

To exercise your rights or for requests concerning your personal data, contact us. We will respond in accordance with applicable law.

Security Measures

We implement industry-standard technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration or destruction. Measures include encryption in transit, access controls, secure storage and regular security reviews. Two-factor authentication is not currently available. If you suspect a security incident affecting your data, contact us.

Children's Privacy

Our services are intended for adults. You must meet the minimum age required by your jurisdiction to register and use our services. We do not knowingly collect personal information from children. If we become aware that we have collected information relating to a person who does not meet the applicable age requirement, we will take steps to delete that information.

Changes to this Privacy Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. We will publish the revised policy and, where appropriate, notify you of significant changes. Please review the policy periodically for the latest information on our privacy practices.

Contact Us

If you have questions, requests or concerns about this Privacy Policy or our data practices, contact us.