Your Privacy at Spinoloco Casino
Spinoloco Casino launched in 2023 under Goblinix N.V. and holds a Curaçao licence. This policy explains what personal data we collect when you play with us, why we process it, how long we keep it and the choices you can make about it. It applies to every page on spinoloco-aud.com and to all services we run.
Data We Collect From You
We collect only the data we need to run your account, meet our legal obligations and keep the site safe. Some of it you give us directly, some of it we record automatically when you use the site.
- Identity data: full name, date of birth, email address, phone number, residential address and country of residence.
- Verification documents: government-issued photo ID, proof of address and payment method verification you submit for KYC checks.
- Transaction data: deposits, withdrawals, bonuses claimed, wagering history and payment method details.
- Technical data: IP address, device type, operating system, browser type, language settings and session timestamps.
- Gameplay behaviour: games played, bet sizes, wins and losses, session duration and tournament entries.
- Marketing preferences: which promotions you opt in to receive and how you prefer to hear from us.
How We Use Your Data
Every processing activity we carry out serves a specific purpose. We never sell your data, and we never use it for purposes beyond the ones listed here without telling you first.
- Creating and managing your player account, including login, profile settings and account closure.
- Verifying your identity before your first withdrawal, as required by our KYC obligations.
- Processing deposits and withdrawals through your chosen payment method, including PayID, cards, e-wallets and crypto.
- Preventing fraud, bonus abuse, money laundering and multiple-account creation.
- Monitoring play for responsible-gambling indicators and enforcing deposit limits, cooling-off periods and self-exclusion requests.
- Sending you marketing messages when you have consented, including bonus offers and tournament news.
- Meeting legal and regulatory obligations, including tax reporting and responses to lawful authority requests.
Our Legal Bases
Contract
We process identity, transaction and gameplay data to perform the player contract with you. Without this data we cannot open your account, take your deposits or pay out your winnings.
Legal obligation
Our Curaçao licence requires us to verify your identity, keep transaction records for at least 5 years and report suspicious activity. We process your verification documents and transaction history to comply with these duties.
Legitimate interest
We rely on legitimate interest to prevent fraud, detect bonus abuse, secure our platform and analyse anonymised play patterns to improve our games and site performance. We weigh our interest against your rights and process no more than the task requires.
Consent
Where the law demands a free choice, we ask first. Marketing emails, SMS promotions and non-essential cookies run only on your consent. You can withdraw that consent at any time, and withdrawal never affects the lawfulness of earlier processing.
How Long We Keep Data
We keep each category of data only as long as the purpose requires. Where regulation sets a minimum, we follow it exactly; once a period expires, we delete or anonymise the data.
| Data category | Retention period |
|---|---|
| Identity and account data | For the life of your account, then 5 years after closure |
| KYC verification documents | 5 years after account closure, per regulatory requirement |
| Transaction and wagering records | Minimum 5 years, per our AML obligations |
| Fraud and dispute records | Up to 7 years where an investigation requires it |
| Technical and device logs | 12 months |
| Marketing preferences | Until you withdraw consent or ask us to delete them |
Who We Share Data With
We share your data only with partners who need it to deliver a service to you or to us, and always under written data-processing agreements that restrict how they may use it.
- Payment processors and e-wallet providers, to move your deposits and withdrawals.
- KYC and AML verification providers, to check your ID documents and screen against sanctions lists.
- Game and platform providers, who receive your player ID and bet data to record outcomes on their servers.
- Analytics and site-performance services, working with aggregated or pseudonymised data.
- The Curaçao regulator and other competent authorities, where a lawful request or reporting duty applies.
- Professional advisers such as auditors and lawyers, strictly on a need-to-know basis.
Your Rights Over Your Data
You control your personal data. Email [email protected] or contact our Data Protection Officer at [email protected] and we will respond within 30 days. Verification of your request may be required before we act on it.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is inaccurate or incomplete.
- Erasure: ask us to delete your data where no legal retention duty applies.
- Portability: receive your account and transaction data in a machine-readable format.
- Objection: object to processing based on legitimate interest, including profiling.
- Withdraw consent: stop marketing and non-essential cookies at any time.
- Complain: raise a complaint with your local data protection authority.
Cookies and Tracking Tools
We use essential cookies to keep you logged in and secure your session, and optional cookies for analytics and marketing. On your first visit you choose which optional categories to accept, and you can change that choice any time from the cookie banner or your browser settings. Full details, including the complete cookie list and how to block or delete them, sit on our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers runs over TLS encryption. We store passwords in hashed form, restrict access to personal data to trained staff on a need-to-know basis and log every internal access for audit. Our payment pages never hold your full card details; card data is tokenised by the processor.
If a breach affects your personal data and creates a risk to you, we will notify the relevant supervisory authority and, where required, inform you directly without undue delay, together with the steps we have taken to contain it.
Frequently Asked Questions
Do you need my ID before I can play?
You can register and deposit without submitting documents, but we must complete KYC verification before your first withdrawal. Expect a review of your government ID, proof of address and payment method within 1-3 business days.
Can I stop marketing emails from you?
Yes. Click the unsubscribe link in any email or email [email protected]. We stop marketing messages immediately, though account and transactional notices still reach you where the law requires.
How do I delete my account and my data?
Contact support via 24/7 live chat or [email protected] and request account closure with data deletion. We erase what no retention duty covers; transaction and KYC records stay for the minimum 5 years our licence demands.
Do you sell my data to advertisers?
No. We never sell personal data. We share it only with the partner categories listed above, under agreements that limit use to the service they deliver.