Who we are
This policy applies to Spinbob Casino and all of its websites and the installable web app. The data controller responsible for your personal information is the Spinbob Casino operator (“we”, “us”, “our”). We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What we collect
When you open and use a Spinbob account, we may collect:
- Identity data — your name, date of birth, gender and copies of identity documents.
- Contact data — your email address, home address and mobile number.
- Financial data — details of your payment methods, deposits, withdrawals and, where required, information about the source of your funds.
- Gaming data — the games you play, stakes, wins, losses, bonus activity and session lengths.
- Technical data — your IP address, device type, browser, operating system and login times.
- Communications — records of live chat conversations, Help Centre messages and your marketing preferences.
- Safer gambling data — limits, time-outs, self-exclusion choices and, where relevant, indicators of gambling-related harm.
Why we use your data
We use your information to:
- create and manage your account and let you sign in securely through our login process;
- verify your age and identity and carry out anti-money laundering and fraud checks;
- process deposits and withdrawals;
- provide games, promotions and every Spinbob bonus you choose to claim;
- monitor play to protect you and others from gambling-related harm;
- answer your questions and resolve complaints;
- send marketing, but only where you have agreed to receive it;
- improve our website, app and services.
Legal bases under UK GDPR
We rely on the following legal bases:
- Contract — to provide the services you signed up for, such as running your account and processing payments.
- Legal obligation — to meet our duties under gambling, anti-money laundering and tax law, including age verification and safer gambling checks.
- Legitimate interests — to prevent fraud, keep our systems secure and improve our services, always balanced against your rights.
- Consent — for marketing communications and non-essential cookies. You can withdraw consent at any time from your account settings.
Sharing your data
We share data only where necessary: with identity verification and payment providers, game studios that host the games you play, regulators and law enforcement where the law requires it, and service providers acting on our instructions. We never sell your personal data. Where data is transferred outside the UK, we use approved safeguards such as standard contractual clauses.
Cookies
We use essential cookies to keep you signed in and keep our site secure. With your permission, we also use analytics and preference cookies to understand how the site is used and to remember your settings. You can change your choices at any time using the cookie settings link in the footer or your browser settings. Blocking essential cookies may stop parts of the site from working.
How long we keep data
We keep your data only as long as necessary. Because of our legal duties, most account, transaction and verification records are kept for at least five years after your account closes. Self-exclusion records are kept for as long as needed to honour your choice. Marketing data is deleted when you withdraw consent.
Keeping your data safe
All connections are protected by 256-bit TLS encryption, access to personal data is restricted to authorised staff, and you can add two-factor authentication to your account.
Your rights
Under UK GDPR you have the right to:
- access a copy of your personal data;
- ask us to correct inaccurate data;
- ask us to delete data, where we are not legally required to keep it;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent at any time;
- not be subject to solely automated decisions with significant effects, without safeguards.
To exercise any of these rights, contact us via the Help Centre form or our support team. We will respond within one month.
Complaints to the ICO
If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk.
Changes to this policy
We may update this policy from time to time. Significant changes will be communicated to you by email or when you next sign in. Our terms and conditions explain the wider rules of using Spinbob Casino.