Your data under UK GDPR
Spinchester Casino operates this website and processes personal data of players who register, deposit and gamble on the platform. The way we collect, store and share your information affects your account, your payments and your rights under UK data protection law. Read it carefully before you register.
Who controls your data
Spinchester Casino acts as the data controller for all personal information gathered through this website. That means we decide why your data is processed and how, and we carry the legal responsibility for it under the UK General Data Protection Regulation and the Data Protection Act 2018. Complaints about how we handle your information can be raised directly with us, and, if unresolved, escalated to the Information Commissioner’s Office.
“Personal data” here means anything that identifies you as an individual player: your name, your date of birth, your address, your device, your betting history. Anonymous statistics about traffic on the site fall outside this scope.
What we collect
Registration requires your full name, date of birth, residential address, email address and mobile number. Deposit and withdrawal flows require payment details, which vary by method and may include card numbers, e-wallet identifiers or cryptocurrency wallet addresses. During verification we ask for scans of identity documents, proof of address and, where relevant, source-of-funds evidence.
Beyond what you type in yourself, the platform records technical data automatically. This covers your IP address, browser type, device identifier, session logs, pages viewed and the games you play. Communications with customer support, including chat transcripts and emails, are stored as part of your account file.
Betting activity is logged in full. Every stake, spin, win, loss, bonus claim and wagering event is retained against your account. Regulatory reporting and dispute resolution both depend on it.
Why we process it
We process your data to open and run your account, to accept deposits and process withdrawals, to deliver the games and bonuses you claim, and to provide customer support when you contact us. That covers the ordinary operation of the service.
Legal obligations take a separate track. Anti-money-laundering rules under the Proceeds of Crime Act 2002 and the Money Laundering Regulations require us to verify your identity, monitor unusual patterns and, in some cases, report to the National Crime Agency. Age verification is mandatory before you can gamble. Tax authorities and gambling regulators can compel disclosure of specific records, and we comply.
Marketing communications are sent only where you have opted in. You can withdraw that consent at any time through your account settings or by emailing us. Withdrawing marketing consent does not close your account or affect your ability to play.
Legal basis
For contract performance, we rely on the necessity of processing your data to give you the service you signed up for. For AML checks, age verification and regulatory disclosures, the lawful basis is legal obligation. For fraud prevention, security monitoring and product improvement, we rely on legitimate interest, balanced against your rights. For marketing and non-essential cookies, we rely on your consent.
Who sees your data
Access inside the company is restricted. Payments and anti-fraud analysts, the money laundering reporting officer, customer support agents, retention staff and VIP account managers all have defined access rights to defined categories of data. Everyone with access has signed confidentiality obligations.
Outside the company, your data goes to payment processors handling your transactions, identity verification providers running KYC checks, game software suppliers required to credit your bets and wins, cloud infrastructure providers hosting the platform, and marketing partners where you have consented. Regulators, courts and law-enforcement agencies receive information when they ask for it under legal powers.
We do not sell your personal data. We do not rent it. We do not trade it as an asset. Sharing with commercial partners is limited to what is needed to deliver the service or to comply with the law.
International transfers
Some of our processors and group entities operate outside the United Kingdom. Where your data leaves the UK, transfers rely on adequacy decisions, standard contractual clauses or other safeguards recognised under UK GDPR. You can request details of the safeguards applying to a specific transfer by writing to us.
How long we keep it
Active account data is retained for as long as your account is open. After closure, anti-money-laundering law requires us to keep transaction records and identity documents for a minimum of five years from the date of the last transaction or from account closure, whichever is later. Marketing consent records are kept for as long as consent remains valid and for a reasonable period afterwards to prove the lawful basis of past communications.
That five-year floor is not our choice. It is set by statute, and it applies whether or not you continue to gamble with us.
Your rights
Under UK GDPR you have the right to access the personal data we hold on you, to request correction of anything inaccurate, to request erasure in defined circumstances, to restrict processing, to object to processing based on legitimate interest, to withdraw consent, and to receive your data in a portable format. You also have the right to lodge a complaint with the Information Commissioner’s Office.
Erasure is not absolute. Where AML law requires retention, we will refuse to delete the specific records covered by that obligation and will explain why. The rest of your file can be removed on request.
Requests are handled within one calendar month of receipt. Complex or high-volume requests may take longer, and we will tell you if that applies.
Security
Traffic between your browser and the platform is encrypted in transit. Payment forms and account areas run over TLS. Passwords are stored as one-way hashes. Two-factor authentication is available and, for accounts with significant balances, recommended. Access to production data inside the company is limited by role and logged.
No system is fully immune to compromise. If a personal data breach affects your rights, we will notify you and the Information Commissioner’s Office within the timeframes set by UK GDPR.
Cookies and tracking
Cookie use is described in a separate Cookie Policy on this site. In short, essential cookies keep the platform working, functional cookies remember your preferences, and advertising cookies are set only where you consent through the cookie banner.
Changes
This policy can be updated to reflect changes in law, in the platform or in our processing activities. Material changes are notified to registered players by email or through account notifications before they take effect. Continued use of the platform after the effective date of an updated policy indicates acceptance.
Contact
Data protection questions, subject access requests and complaints should be sent to [email protected]. Include your account username and the specific right you wish to exercise. If you are unhappy with our response, you can complain to the Information Commissioner’s Office at ico.org.uk.
https://www.spinchester.com | [email protected]