This policy explains how Spinita collects, uses, stores and protects personal information when you create and use an account, in line with UK data protection law. It applies to every visitor and registered player using this site.
At registration, Spinita collects your name, date of birth, email address, residential address and payment details. During verification, we additionally collect a copy of a government-issued photo ID and a proof-of-address document. While you use the account, we record gameplay activity, deposit and withdrawal history, device and browser information, and support communications, since a licensed operator is required to keep an auditable record of account activity.
Personal data is processed to open and administer your account, to verify your identity and age as required by our gambling licence, to process deposits and withdrawals securely, to detect fraud and problem gambling indicators, and to meet reporting obligations to the Gambling Commission and other UK authorities. Where processing is based on legal obligation rather than consent, it cannot be opted out of while the account remains open.
Personal data is shared only where necessary: with identity verification providers to confirm your ID documents, with payment processors and banks to complete deposits and withdrawals, with fraud prevention and credit reference agencies where a check is required, and with the Gambling Commission or another statutory body where we are legally required to report. Spinita does not sell personal data to third parties for marketing purposes.
Account and transaction records are retained for the period required under UK anti-money-laundering and gambling regulation, typically several years after account closure, even if you ask for your account to be closed sooner. Marketing preferences and non-regulatory data are retained only for as long as they remain relevant, and are deleted or anonymised once that purpose ends.
Data in transit is protected using SSL encryption, and payment information is processed under PCI-DSS-compliant systems. Access to personal data internally is limited to staff who need it to perform verification, support or compliance functions, and account passwords are stored in hashed form rather than in plain text.
Under UK data protection law you can request access to the personal data Spinita holds about you, ask for inaccurate data to be corrected, request erasure of data that is no longer required for a legal purpose, and object to processing carried out for direct marketing at any time. Requests can be made through the contact details in your account, and where a request cannot be met — for example because a record must be retained for a regulatory purpose — you will be told why.
This site uses cookies for essential account functions, security and, where you consent, analytics and marketing. Full detail on the categories used and how to manage them is set out in the separate cookie policy.
Questions about this policy, or a request to exercise any of the rights above, can be sent through the support contact listed in your account. If you remain unsatisfied with how a data request has been handled, you have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
