Privacy Policy

1. Introduction

We at SpinCrush Casino are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data. By using our platform, you agree to the data practices described here.

2. Data We Collect

We collect information you provide directly when registering an account: name, email address, date of birth, and phone number. We also collect financial information for payment processing (UPI IDs, bank account details for withdrawals) — this is transmitted securely and never stored in plain text on our servers. Identity documents submitted for KYC verification are stored securely and used solely for compliance purposes.

We automatically collect usage data including: IP address, device type and OS version, pages visited, game session data (games played, bets placed, session duration), and login timestamps. This data is used for fraud prevention, security monitoring, and improving our service.

3. How We Use Your Data

We use your data to: provide and maintain your account, process deposits and withdrawals, verify your identity for KYC compliance, deliver customer support, send transactional notifications (deposit confirmations, withdrawal updates, security alerts), and improve our gaming platform. With your explicit consent, we may send promotional communications about bonuses and new games.

4. Data Sharing

We do not sell your personal data to third parties. We share data only with: payment processors (for transaction processing), identity verification providers (for KYC), fraud detection services, our gaming software providers (game session data for provably fair verification), and regulatory authorities when required by our Curaçao gaming licence. All third-party processors are contractually bound to protect your data.

5. Data Retention

We retain account data for the duration of your account plus 5 years after closure, as required by anti-money-laundering regulations under our gaming licence. KYC documents are retained for 5 years minimum. You may request account deletion, but we are legally obligated to retain transaction records and KYC documents for the mandatory retention period.

6. Cookies

We use essential cookies for session management, security tokens, and preference storage. Analytics cookies (Google Analytics, anonymous) help us understand how players use our site — you may opt out via your browser settings. Marketing cookies are only set with your explicit consent. You can manage cookie preferences at any time through your browser's cookie settings.

7. Your Rights

You have the right to: access your personal data (we provide a data export on request), correct inaccurate data, request deletion (subject to legal retention requirements), object to processing for marketing purposes, and withdraw consent for optional data processing at any time. To exercise these rights, contact our support team via live chat or email.

8. Security

We protect your data using 256-bit SSL/TLS encryption for all data transmission, AES-256 encryption for stored sensitive data, two-factor authentication options for account access, and regular security audits. Our servers are hosted in ISO 27001-certified data centres. Despite these measures, no online transmission is 100% secure — report any suspected security incidents to support immediately.

9. Children's Privacy

Our services are intended for adults aged 18 and above only. We do not knowingly collect data from minors. If we become aware that a minor has registered, we will immediately close the account and delete all associated data. Age verification is part of our mandatory KYC process.

10. Contact

For privacy-related queries, contact our Data Protection team via the live chat on our platform or by email. We respond to all data requests within 30 days as required by applicable law.