Privacy Policy

This privacy policy explains how Spin Boss Casino ("we", "us", "the site") collects, uses, stores and protects the personal information of players and visitors. It applies to the account you register, the cashier you transact through and every page you open on this website. By creating an account or continuing to use the site you agree to the handling of your data as set out below. We review this policy regularly and publish the date of the latest revision at the foot of the page.

We act as the data controller for the information described here. Where we rely on third parties — payment processors, identity-verification partners and analytics providers — those parties process data on our instructions and under their own obligations. This policy sits alongside our terms and conditions and our cookie policy, which together govern your use of the site.

We collect information that you provide directly and information gathered automatically as you use the site:

• Account details — your name, date of birth, email address, telephone number, residential address, username and password.
• Verification documents — a government photo ID, a recent proof of address and confirmation of how you fund the account, needed to satisfy age and anti-money-laundering checks.
• Financial information — deposits, withdrawals, payment method and transaction history. We do not store full card numbers; these are handled by our payment partners.
• Gameplay and account activity — the games you open, bets placed, bonuses claimed, session times and the responsible-gaming limits you set.
• Technical data — device type, operating system, browser, IP address, approximate location and cookie identifiers, collected automatically.

We process personal data only where we have a lawful basis to do so. The main purposes are:

• opening, running and securing your account, and verifying your identity and age;
• processing deposits and withdrawals and preventing fraud, money laundering and multiple accounts;
• meeting the conditions of our gaming licence and other legal and regulatory duties;
• providing customer support and responding to your queries;
• enforcing responsible-gaming tools and self-exclusion;
• improving the site and, where you have consented, tailoring offers and sending marketing.

You may withdraw consent to marketing at any time without affecting the lawfulness of processing carried out beforehand.

We do not sell your personal data. We share it only where necessary: with payment and e-wallet providers to settle transactions; with identity-verification and fraud-prevention services; with regulators, auditors and law-enforcement bodies where the law requires; and with technology suppliers who host or maintain the site under confidentiality obligations. Any transfer of data outside your region is made with appropriate safeguards in place.

We keep personal data only for as long as your account is active and for the period our licence and anti-fraud obligations require after it closes, after which it is securely deleted or anonymised. Data in transit is protected by SSL encryption, access is restricted to staff who need it, and payment details are handled to recognised security standards. No transmission over the internet is ever completely secure, but we take reasonable steps to protect your information against loss, misuse and unauthorised access.

Subject to the applicable law, you have the right to request a copy of the data we hold about you, to have inaccurate data corrected, to ask for erasure where no legal duty requires us to keep it, to restrict or object to certain processing, and to receive your data in a portable format. You can also withdraw marketing consent and set or close responsible-gaming limits at any time. To exercise any of these rights, contact our support team through the details on the contact page; we respond within the period set by law.

We may update this privacy policy from time to time to reflect changes in the law, our practices or the services we offer. The current version always appears on this page with its revision date. Material changes will be notified through the site or by email where appropriate. Continued use of the site after an update constitutes acceptance of the revised policy.

We only process personal data where the law gives us a basis to do so. Operating your account and processing deposits and withdrawals is handled on the basis of performing our contract with you. Identity, age and source-of-funds checks are carried out to meet legal obligations placed on licensed operators. Fraud prevention, platform security and service improvement rest on our legitimate interests, balanced against your rights. Optional marketing is sent only on the basis of your consent, which you can withdraw at any time.

We keep personal data only as long as there is a reason to, after which it is deleted or anonymised. The periods below reflect our main obligations; account and transaction records are held longer where anti-money-laundering law requires it.

Some of our processors operate outside the United Kingdom. Where personal data is transferred abroad, we put appropriate safeguards in place — standard contractual clauses or an adequacy decision — so that your information continues to receive an equivalent level of protection wherever it is handled.

Parts of our fraud, anti-money-laundering and responsible-gaming monitoring are automated, and may flag an account for human review. These checks can delay a withdrawal or pause an account, but a person always makes the final decision, and you may ask for that decision to be explained or reconsidered.

If you have opted in, we may send offers and product news by email, SMS or push notification. Every message carries an unsubscribe option, and you can change your preferences or opt out entirely at any time from the account settings. Opting out of marketing never affects the service messages we must send about your account, payments or security.

To make a request about your data — access, correction, deletion, restriction, portability or objection — contact us through the details on the contact page, and we will respond within the statutory time frame. If you are not satisfied with how we have handled a request, you have the right to complain to the relevant data-protection supervisory authority.

Not all of the data we hold comes directly from you. Payment providers confirm that a transaction has cleared and return limited details needed to reconcile it. Identity and anti-money-laundering agencies help us confirm that the name, age and address on an account are genuine, and fraud-prevention networks may share indicators that an account or device has been linked to abuse elsewhere.

We combine this with what you give us only to the extent needed to run the account lawfully, keep the platform safe and meet the obligations that come with holding a gaming licence. We do not buy personal data for marketing, and we do not enrich your profile with unrelated information bought from brokers.

The account works best, and your withdrawals clear fastest, when the details we hold are correct and current. You can review and update your name, address, email and phone number from the profile area at any time, and we ask that you do so promptly after a change. Out-of-date verification details are one of the most common reasons a payout is delayed.

If you believe any information we hold is wrong or incomplete, you can ask us to correct it, and we will do so without undue delay once we have confirmed the change.

We maintain procedures to detect, contain and investigate any suspected breach of personal data. Where a breach is likely to pose a risk to your rights, we will notify the relevant supervisory authority within the statutory window, and we will inform affected users directly where the risk to them is high.

Our response is designed to limit harm first — isolating affected systems and resetting credentials where needed — and then to put right whatever allowed the breach to happen.

For the purposes of data-protection law, the operator of this site is the controller of the personal data described in this policy, and decides how and why it is processed. Where we use processors — payment firms, verification agencies, hosting and analytics providers — they act only on our instructions and under contracts that bind them to protect your data.

If you have a question about how your data is handled, or wish to make a request about it, the contact page explains how to reach the team that deals with these matters.