Log inSign up

Your Privacy at Spinsup Casino

This Privacy Policy explains what personal data we collect when you play at Spinsup Casino, why we need it, how long we keep it and the rights you hold over it. It applies to spinsup-aud.com and every service we operate.

What Data We Collect

Categories of personal data

We collect only the data we need to run your account, process your payments and meet our legal obligations. Here is every category we hold and where it comes from.

  • Identity data: your full name, date of birth, email address, phone number and residential address, provided by you at registration.
  • Verification documents: government-issued ID, proof of address and proof of payment method, collected during KYC before your first withdrawal.
  • Transaction data: deposits, withdrawals, bets, wins, losses and bonus activity across AUD, USD, EUR and crypto balances.
  • Technical data: IP address, device type, operating system, browser and approximate location derived from your connection.
  • Gameplay behaviour: game history, session times, betting patterns and self-assessment responses used for responsible-gambling monitoring.
  • Marketing preferences: your opt-in choices for bonus emails, SMS and push notifications, plus your opt-out requests.

How We Use Your Data

Purposes of processing

We use each category of data for a specific purpose, never for anything unconnected to our service.

  • Account creation, login and account management.
  • KYC identity verification before your first withdrawal, completed within 3 business days.
  • Payment processing for deposits from 40 AUD and withdrawals from 50 AUD.
  • Fraud prevention, collusion detection and anti-money-laundering screening.
  • Responsible-gambling monitoring, including deposit limits, loss limits, session reminders and self-exclusion enforcement.
  • Marketing and bonus offers, only where you have given consent.
  • Compliance with our Curaçao licence conditions and other legal obligations.

Contract. We process your identity, account and transaction data because they are necessary to open your account, honour your bets and pay your winnings. Without this data we cannot provide the service you signed up for.

Legal obligation. We process verification documents, transaction records and suspicious-activity reports because gambling and anti-money-laundering law requires us to. This basis overrides marketing preferences and applies whether or not you consent.

Legitimate interest. We use technical data and gameplay records to detect fraud, secure our platform and prevent bonus abuse. We weigh our interest against your rights and keep this processing to the minimum needed.

Consent. Marketing communications, optional cookies and any processing not covered above run on your consent. You can withdraw it at any time without affecting the lawfulness of earlier processing.

How Long We Keep It

Retention schedule

We keep each category only as long as its purpose requires, then delete or anonymise it. Regulatory minimums override shorter periods.

  • Transaction and KYC records: at least 5 years after account closure, as required by gambling and AML regulations.
  • Account data: for the life of your account, then up to 5 years in archive.
  • Device, IP and security logs: up to 12 months.
  • Responsible-gambling records, including self-exclusion: for the duration of the exclusion plus 5 years.
  • Marketing preferences: until you withdraw consent or delete your account.

Who We Share Data With

Categories of recipients

We never sell your personal data. We share it only with providers who need it to deliver a service you use, and each one is bound by a data-processing agreement.

  • Payment processors handling your deposits and withdrawals, including card schemes, e-wallets and crypto gateways.
  • KYC and AML verification providers that check your documents and screen transactions.
  • Our regulator, where reporting is required under licence OGL/2023/174/0082.
  • Analytics and hosting providers that keep the site running and help us improve it.
  • Professional advisers, such as auditors and lawyers, under confidentiality obligations.
  • Live casino and game providers, limited to a player ID and gameplay data required to run the games.

Your Rights Over Your Data

How to exercise each right

Whatever your location, you can act on your data through [email protected] or via the 24/7 live chat. We respond within 30 days and verify your identity first so no one else can access your account.

  • Access: get a copy of the personal data we hold about you.
  • Rectification: correct anything inaccurate or incomplete.
  • Erasure: ask us to delete data we have no legal duty to keep.
  • Portability: receive your account and gameplay data in a machine-readable format.
  • Objection: object to processing based on legitimate interest.
  • Withdraw consent: stop marketing at any time from account settings or any email's unsubscribe link.
  • Complain: raise a complaint with your local data protection authority; in Australia that is the OAIC, and in the EU your national DPA.

Cookies and Tracking

We use strictly necessary cookies for login, session security and payment integrity, plus optional analytics and marketing cookies that load only after you consent in the cookie banner. You can change or withdraw your cookie choices at any time from the banner or your browser settings.

Full details, including the list of cookies and their lifespans, are in our separate Cookies Policy on this site.

How We Protect Your Data

Security and breach response

All traffic between your device and our servers runs over TLS encryption. We store verification documents in encrypted form, restrict access with role-based controls, and log every access to sensitive records. Our payment pages never store full card details.

If a data breach affects your personal data, we will notify you and the relevant regulator without undue delay, tell you what happened, what data was involved and what we are doing about it. Questions for our data protection officer go to the address above, marked 'DPO' in the subject line.

Frequently Asked Questions

How do I close my account and delete my data?

Contact [email protected] or use live chat to request account closure. We delete marketing preferences right away, while transaction and KYC records must be kept for at least 5 years under gambling regulations.

Do you share my data with game providers?

Game and live casino providers receive only a player ID and the gameplay data needed to run the games, never your identity documents or payment details.

Why do you need my ID before my first withdrawal?

Licence conditions require identity verification. We check a government-issued ID, proof of address and proof of payment method, and processing takes up to 3 business days.