Privacy Policy

1. Data We Collect

We collect personal information you provide when you register an account: name, email address, phone number, date of birth, and address. We also collect payment information (UPI VPA, bank account details) for processing deposits and withdrawals — this data is handled by our certified payment processors under PCI-DSS compliance and is not stored on SpinWinner Casino servers.

Usage data is collected automatically: IP address, device type, operating system, browser version, session duration, games played, and transaction history. This data is used for fraud prevention, responsible gaming monitoring, and service improvement.

2. How We Use Your Data

Personal data is used to: operate and maintain your account, process deposits and withdrawals, verify your identity (KYC), send transaction confirmations and account notifications, comply with our Curaçao gaming licence obligations, and prevent fraud and money laundering. We do not sell personal data to third parties for marketing purposes.

We may share data with: our payment processors (PCI-DSS compliant), identity verification services (for KYC), our gaming licence authority (Antillephone N.V.), and law enforcement when legally required.

3. Cookies

We use essential cookies for session management and security. Analytics cookies (Google Analytics) collect anonymised usage data to improve our platform. You can disable non-essential cookies in your browser settings. Disabling essential cookies will prevent you from logging in to your account.

4. Data Retention

Account data is retained for the duration of your account plus 5 years after closure, as required by our gaming licence and anti-money-laundering obligations. If you request account deletion, we retain the minimum legally required data and delete everything else within 30 days.

5. Your Rights

You have the right to: access your personal data (downloadable from your account settings), correct inaccurate data, request deletion (subject to legal retention requirements), withdraw consent for optional data processing, and lodge a complaint with your data protection authority.

6. Security

All data transmissions use TLS 1.3 encryption. Passwords are stored using bcrypt hashing. Payment data is handled by certified processors, not stored on our servers. We conduct regular security audits and penetration testing.

7. Contact

For privacy queries, contact our Data Protection Officer at: [email protected]. Response within 72 hours on business days.