How We Handle Your Data
This Privacy Policy sets out what personal data we at Spinfinity Casino collect when you use spinfinity.uk.com, why we process it, who we share it with and the controls you have. We operate under licence ALSI-192407055-FI3 issued by the Anjouan authority.
Data We Collect
We collect only the data needed to run your account, verify your identity and meet our regulatory duties. Registration asks for your name, date of birth, email address, phone number and residential address. Before your first withdrawal we also collect verification documents: a government ID, proof of address and payment method verification, with review completed within 48 hours.
- Identity data: name, date of birth, address, email, phone number
- Verification documents: passport or ID card, utility bill, card or wallet confirmation
- Transaction data: deposits, withdrawals, wagering, bonuses and winnings
- Technical data: IP address, device type, browser, operating system and session logs
- Gameplay data: games played, stakes, outcomes, session duration and login times
- Marketing preferences: which offers you opt in to and how you want to hear from us
How We Use Your Data
Your data drives the core functions of your account. We create and manage your player account, process deposits and withdrawals in GBP or BTC, and run age and identity checks required before any payout. The same data feeds our fraud prevention systems, which flag unusual betting patterns, chargeback risk and duplicate accounts.
- Opening, maintaining and closing your player account
- KYC and AML checks before your first withdrawal and at intervals afterwards
- Processing deposits, withdrawals and bonus settlements
- Fraud prevention and dispute resolution
- Responsible gambling monitoring, including checks against self-exclusion registers and deposit limit breaches
- Marketing messages, only where you have given consent
- Compliance with gambling regulation, tax law and law enforcement requests
Our Legal Bases
Contract
We process your identity, transaction and account data to perform the contract you enter when you register. Without this processing we cannot provide gameplay, payments or account features, so refusal means we cannot open your account.
Legal obligation
Gambling law obliges us to verify your age and identity, keep transaction records for at least 5 years and report suspicious activity to the authorities. We process your verification documents and financial records on this basis, and we cannot switch this processing off while the obligation stands.
Legitimate interest
Fraud prevention, security logging and aggregate analytics on game performance rest on our legitimate interest in operating a safe, financially sound casino. We keep this interest balanced against your rights and restrict the data to what each purpose strictly needs.
Consent
Marketing emails, SMS and personalised offers run on consent only. You can withdraw consent at any time through your account settings or the unsubscribe link in any message, without affecting your ability to play or withdraw.
How Long We Keep It
Retention follows the strictest of legal requirement, account function or your consent. Once the retention period ends we delete or anonymise the data, with the only exception being records we must keep for an ongoing investigation.
| Data category | Retention period |
|---|---|
| Identity data | For the life of your account, then 5 years after closure |
| Verification documents | 5 years after account closure |
| Transaction and wagering records | 5 years, per gambling regulation |
| Device, IP and security logs | 12 months |
| Gameplay behaviour data | 24 months in identifiable form |
| Marketing preferences | Until you withdraw consent or ask us to delete them |
Who We Share Data With
We never sell your personal data. Sharing is limited to processors and authorities that make our service and licence possible, each bound by a data processing agreement covering security and confidentiality.
- Payment processors handling your Visa Debit, Mastercard, Trustly, Skrill, Neteller, Paysafecard and Bitcoin transactions
- KYC and AML verification providers that check your documents and screen against sanctions lists
- The Anjouan licensing authority and other regulators with lawful jurisdiction over our operations
- Analytics providers that measure site performance in aggregate form
- IT and cloud service providers hosting our platform under contractual safeguards
- Legal advisers, auditors and law enforcement where disclosure is legally required
Your Rights Over Data
You control your data, and we act on every valid request within one month, extendable by two months for complex cases with notice. Requests cost nothing and go to our data protection officer at the contact details below.
- Access: get a copy of the personal data we hold about you
- Rectification: correct inaccurate or incomplete records
- Erasure: delete data we no longer have a lawful reason to keep
- Portability: receive your data in a structured, machine readable format
- Objection: object to processing based on legitimate interest
- Withdrawal of consent: stop marketing at any time
- Complaint: escalate to the relevant data protection authority
Cookies and Tracking
We use cookies to keep you logged in, remember your preferences and measure site traffic. Session cookies are essential; analytics and marketing cookies load only after you accept them in the cookie banner. Full details of each category, the providers involved and how to change your settings are on our separate Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers travels over TLS encryption, and payment and verification documents sit encrypted at rest. Access to personal data follows a strict need to know model with role based permissions, audit logging and periodic access reviews.
- TLS encryption for all data in transit and AES encryption at rest
- Two factor authentication and restricted access for staff handling personal data
- Continuous monitoring and audit trails for every access to player records
- Documented incident response with breach notification to you and the regulator within 72 hours where required
Contact Our DPO
Our Data Protection Officer answers privacy questions, data subject requests and complaints. Email [email protected] and we will respond within one month, or sooner where the request is straightforward. If you believe we have mishandled your data, you also have the right to complain to your local data protection authority.
Frequently Asked Questions
Can I play at Spinfinity Casino without giving my ID?
You can register with basic identity data, but we must verify your government ID, proof of address and payment method before your first withdrawal. This is a legal requirement under our Anjouan licence.
How do I stop marketing messages?
Withdraw consent any time via account settings or the unsubscribe link in any message. Marketing data is then deleted without affecting your account, gameplay or withdrawals.
Do you keep my transaction history forever?
No. Wagering and payment records are kept for 5 years after account closure to satisfy gambling regulation, then deleted or anonymised.
Is my Bitcoin payment data shared?
Crypto transactions run through payment processors under data processing agreements, so only the data needed to complete and reconcile your BTC deposit or withdrawal is shared.