Privacy Policy
CasualSpin Casino is committed to protecting the privacy and personal information of all users who access our online slot gaming platform. This privacy policy outlines how we collect, use, store, and safeguard your data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood the practices described in this document regarding the handling of your personal information.
We recognise the importance of maintaining the confidentiality of your data and have implemented appropriate technical and organisational measures to ensure safe gaming and protect against unauthorised access, loss, or misuse. This CasualSpin Casino privacy policy applies to all personal data collected through our website, mobile applications, and any associated services we provide. We encourage you to review this policy regularly as we may update it periodically to reflect changes in our practices or legal requirements.
Information We Collect
We collect various types of personal information necessary to provide you with access to our gaming services and to fulfil our legal obligations. The data we collect includes information you provide directly to us during account registration, such as your full name, date of birth, residential address, email address, telephone number, and payment details. We also collect identification documents required for age verification and compliance with anti-money laundering regulations, including copies of passports, driving licences, or utility bills.
In addition to information you provide voluntarily, we automatically collect technical data when you use our platform. This includes your IP address, browser type and version, device information, operating system, time zone settings, and general location data. We utilise cookies and similar tracking technologies to gather information about your browsing patterns, gaming preferences, transaction history, and interaction with our website features. This data helps us improve our services and enhance your gaming experience.
We may also collect information from third-party sources to verify your identity and prevent fraud. This includes data from credit reference agencies, fraud prevention databases, and payment processors. All information collected is processed lawfully and transparently, with clear purposes outlined at the point of collection. We collect only the minimum amount of data necessary to provide our services and comply with our regulatory obligations in the United Kingdom.
How We Use Your Information
Your personal information is used for several specific purposes that enable us to operate our gaming platform effectively and responsibly. Primarily, we process your data to create and manage your gaming account, verify your identity and age, process deposits and withdrawals, and provide customer support services. We use your contact information to communicate important updates about your account, respond to your enquiries, and send transactional notifications regarding your gaming activity.
Compliance with legal and regulatory requirements constitutes another essential use of your data. We are obligated to maintain records for responsible gambling purposes, conduct due diligence checks to prevent money laundering and fraud, and report suspicious activities to relevant authorities. Your information may be shared with regulatory bodies, law enforcement agencies, or other third parties when required by law or to protect the integrity of our platform and ensure safe gaming for all users.
| Purpose | Legal Basis | Data Retention Period |
|---|---|---|
| Account management | Contract performance | Duration of account plus 7 years |
| Identity verification | Legal obligation | 7 years from account closure |
| Payment processing | Contract performance | 7 years from last transaction |
| Marketing communications | Consent | Until consent withdrawn |
| Fraud prevention | Legitimate interests | 7 years from detection |
We also use your information to improve our services through data analysis and research. This includes analysing gaming patterns to enhance user experience, developing new features, and ensuring our platform operates efficiently. Where we use your data for marketing purposes, including sending promotional offers or information about new games, we will only do so with your explicit consent, which you may withdraw at any time through your account settings or by contacting our support team.
Data Security and Protection
CasualSpin Casino employs robust security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. We implement industry-standard encryption protocols, including SSL (Secure Socket Layer) technology, to secure data transmission between your device and our servers. All sensitive payment information is encrypted and processed through PCI-DSS compliant payment gateways, ensuring that your financial data remains protected throughout every transaction.
Our technical infrastructure includes firewalls, intrusion detection systems, and regular security audits conducted by independent third-party experts. Access to personal data within our organisation is restricted on a need-to-know basis, with strict authentication protocols and role-based permissions ensuring that only authorised personnel can access specific information. All staff members with access to personal data undergo regular training on data protection principles and are bound by confidentiality agreements.
We maintain secure backup systems to prevent data loss and have established incident response procedures to address any potential security breaches promptly. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours as required by UK GDPR. While we implement comprehensive security measures, we also encourage users to maintain the confidentiality of their login credentials and to notify us immediately if they suspect any unauthorised access to their account.
Your Rights and Choices
Under UK data protection legislation, you possess several rights regarding your personal information. You have the right to access the personal data we hold about you and receive a copy of this information in a structured, commonly used format. You may request that we correct any inaccurate or incomplete data, and in certain circumstances, you have the right to request deletion of your personal information, subject to our legal retention obligations and legitimate business interests.
You can object to the processing of your data for direct marketing purposes at any time, and we will cease such processing immediately upon receiving your request. Where we process your data based on consent, you have the right to withdraw that consent at any point, though this will not affect the lawfulness of processing carried out before withdrawal. You also have the right to request restriction of processing in specific situations, such as when you contest the accuracy of your data or object to processing based on legitimate interests.
| Right | Description | How to Exercise |
|---|---|---|
| Access | Obtain confirmation of data processing and access to your data | Submit request via email or account settings |
| Rectification | Correct inaccurate or incomplete personal data | Contact customer support or update account details |
| Erasure | Request deletion of personal data | Email data protection officer with specific request |
| Portability | Receive data in machine-readable format | Request through customer support team |
| Objection | Object to processing based on legitimate interests | Notify us in writing with specific grounds |
To exercise any of these rights, you may contact our Data Protection Officer using the contact details provided on our website. We will respond to your request within one month, though this period may be extended by two additional months for complex requests. You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe we have not handled your personal data appropriately or if you are dissatisfied with our response to your requests.
Third-Party Sharing and International Transfers
We may share your personal information with carefully selected third-party service providers who assist us in operating our platform and delivering our services. These parties include payment processors, identity verification services, cloud hosting providers, customer support platforms, and marketing service providers. All third parties are contractually obligated to process your data only for specified purposes, maintain appropriate security measures, and comply with applicable data protection legislation.
We do not sell, rent, or trade your personal information to third parties for their independent marketing purposes. However, we may disclose your data to regulatory authorities, law enforcement agencies, or other governmental bodies when required by law or necessary to protect our legal rights. In cases where we are involved in a merger, acquisition, or asset sale, your personal information may be transferred to the acquiring entity, and we will notify you of any such change in ownership or control of your data.
Some of our service providers may be located outside the United Kingdom or process data on servers in other jurisdictions. Where we transfer personal data internationally, we ensure appropriate safeguards are in place through standard contractual clauses approved by the UK authorities, adequacy decisions, or other legally recognised transfer mechanisms. We conduct due diligence on all third-party processors to verify their data protection standards align with UK requirements and provide equivalent levels of protection for your information. You may request further information about international transfers and the safeguards we employ by contacting our Data Protection Officer.