Spinpolo Casino online privacy
This Spinpolo Casino online Privacy Policy explains how personal information may be handled when someone visits the website, creates an account, makes a payment, completes verification or contacts support. The legal data controller is Win Top Ltd, the same entity identified as the licence holder for spinpolo.com under Anjouan B2C licence ALSI-202509029-FI1. Privacy contact: privacy@spinpolo.com; registered address: P.O. Box 987, Mutsamudu, Anjouan, Union of the Comoros. These details identify the controller for this policy.
Information connected with an account
The Spinpolo online casino service may collect information entered during registration or later account use, such as name, date of birth, address, email, telephone number, country and account preferences where those fields exist in the live form. Login and security records can also include timestamps, IP addresses, device information and account activity. Only data needed for a defined purpose should be collected. Players are responsible for keeping account information accurate, while the controller is responsible for explaining why each category is processed and how long it is retained under the applicable privacy framework.
Main data categories
Spinpolo United Kingdom processing can involve different information depending on how the website is used. The table below separates the main categories without assuming that every field is collected from every visitor.
These categories are processed for the purposes and legal bases described in this policy.
Verification and KYC information
Spinpolo Casino online may process verification information where age, identity, address, payment ownership, fraud prevention or other account checks require it. Depending on the live process, verification data can include:
- Identity documents.
- Proof of address.
- Payment-ownership evidence.
- Photographs or related verification material.
The verification provider is Sumsub (Sum and Substance Ltd), unless a different provider is confirmed in the operator’s current privacy documentation. Additional information may be requested when an earlier submission is incomplete or a transaction requires further review. Verification data should not be reused for unrelated purposes without an appropriate legal basis.
Payments and transaction records
The Spinpolo online casino account may generate records connected with deposits, withdrawals, payment methods, transaction status, currency and financial history. External payment providers can process part of this information directly. Full card or wallet details are handled by the payment provider and tokenised where applicable rather than stored by the casino. Payment processors include Skrill, Neteller, MiFinity, Visa/Mastercard acquiring banks and bank-transfer intermediaries. They act as independent controllers for payment authentication and processing; Win Top Ltd receives a token, transaction reference, amount and status.
Device data, cookies and similar technologies
Spinpolo United Kingdom visitors may generate technical information when they load or interact with a page. This can include IP address, browser type, device identifiers, operating system, language, referral source, session information and security events. Cookies or similar technologies may be used for:
- Essential website and login functions.
- Analytics and performance measurement.
- Functional preferences.
- Marketing or advertising where permitted.
Optional tracking should be used only where the relevant consent or other lawful basis applies. The current Cookie Policy should identify categories, purposes, durations and available controls rather than relying on a generic statement that all cookies are necessary.
Why personal information is used
Spinpolo Casino online processing may support account administration, payments, identity checks, security, fraud prevention, customer support, responsible-gambling controls, legal compliance, service analytics and marketing where permitted. The purpose-to-basis mapping is: performance of contract for account management, payment processing and game provision; legal obligation for identity verification, AML checks and record-keeping; legitimate interests for fraud prevention, security, service improvement and direct marketing where soft opt-in applies; and consent for non-essential cookies and marketing communications where required. Withdrawing consent does not affect processing based on another valid basis.
Sharing with service providers
The Spinpolo online casino operation may share personal information with service providers needed to deliver, secure or administer the platform. Current recipients include Sumsub for verification; Skrill, Neteller, MiFinity and acquiring banks for payments; AWS Frankfurt for hosting; SEON for fraud prevention; SendGrid for email; tawk.to for live chat; Google Analytics and Hotjar for consent-based analytics; and NetEnt, Pragmatic Play and Evolution Gaming for game-session data. Professional advisers, regulators and law enforcement may also receive data where required. Roles vary between processors and independent controllers according to the service and legal arrangement.
International transfers
Spinpolo United Kingdom processing may involve companies, infrastructure or service providers outside the player’s country. Primary hosting is in the EEA through AWS Frankfurt, Germany, while data may be transferred to the Union of the Comoros for regulatory and administrative purposes. Other third-country transfers use European Commission Standard Contractual Clauses supplemented by encryption and pseudonymisation. Where UK GDPR applies, transfers to adequate countries rely on adequacy regulations; other transfers use the UK International Data Transfer Agreement or UK Addendum to the SCCs as appropriate. The location of a gaming licence does not by itself determine where player information is stored.
Retention and deletion
Spinpolo Casino online keeps personal information only while a valid purpose or legal requirement applies. Account and profile data are retained for 5 years after account closure; transaction records for 5 years from the transaction date; KYC records for 5 years after closure; support communications for 2 years after ticket resolution; server and access logs for 12 months; and cookie data for up to 12 months, while session cookies expire when the browser closes. Marketing-consent records remain while consent is valid and for a reasonable period after withdrawal. A valid legal obligation, fraud-prevention need or unresolved claim may require longer retention before deletion or anonymisation.
Security and account protection
The Spinpolo online casino controller uses organisational and technical measures appropriate to the personal information and risks involved. Confirmed controls include TLS 1.3 encryption in transit, AES-256 encryption at rest, role-based access with multi-factor authentication for staff, AWS hosting with ISO 27001 and SOC 1/2/3 certifications, Cloudflare for DDoS mitigation, SEON for fraud prevention, and annual penetration testing and vulnerability scans. Users can also reduce account risk by keeping credentials private and reporting suspicious access through an official contact route. Personal-data breaches are assessed and notified under the law that applies.
Privacy rights
Spinpolo United Kingdom users have the privacy rights granted by the law that applies to them. Where UK GDPR applies, these can include:
- Access to personal data.
- Correction of inaccurate information.
- Erasure or restriction where the legal conditions are met.
- Objection to certain processing.
- Data portability where applicable.
- Withdrawal of consent for processing based on consent.
Identity confirmation may be required before data is disclosed or changed. Privacy requests: privacy@spinpolo.com. Response time is 30 calendar days, extendable to 90 days for complex cases with notice. UK residents may complain to the Information Commissioner’s Office (ICO); other users to their local authority. Gaming complaints may go to the Anjouan Gaming Commission at complaints@anjouangaming.com.
Updates and contact
This Spinpolo Casino online policy may be updated when processing activities, suppliers, product features or legal requirements change. The effective date should identify the current version, and material changes should be communicated where applicable law or the user relationship requires notice. Questions and rights requests must go to the verified controller contact.
- Data controller: Win Top Ltd
- Registered address: P.O. Box 987, Mutsamudu, Anjouan, Union of the Comoros
- Privacy email or request form: privacy@spinpolo.com
- Representative or data-protection contact, if required: Data Protection Officer, Win Top Ltd, privacy@spinpolo.com
- Effective date: 1 October 2025