Spinanga logo

Privacy Policy

OnlySpins is committed to protecting your personal information and respecting your privacy rights. This privacy policy explains how we collect, use, store, and safeguard your data when you access our online slot gaming platform. We operate in accordance with applicable data protection regulations, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood how we handle your personal information.

Information We Collect and Process

When you register and play at OnlySpins casino, we collect various types of personal information necessary to provide our gaming services. The data we gather includes identification details such as your full name, date of birth, postal address, email address, and telephone number. We also process financial information including payment card details, bank account information, and transaction history. Technical data is automatically collected through cookies and similar technologies, encompassing your IP address, browser type, device information, operating system, and gameplay patterns. For verification purposes and to comply with regulatory requirements, we may request copies of identification documents such as passports, driving licences, or utility bills. All information collected serves specific purposes related to account management, payment processing, fraud prevention, and compliance with legal obligations under UK gambling legislation.

How We Use Your Personal Data

Your personal information is processed for several legitimate purposes essential to operating OnlySpins casino. We use your data to create and maintain your gaming account, verify your identity and age to ensure compliance with UK gambling laws, and process deposits and withdrawals securely. Your information enables us to provide customer support, respond to enquiries, and resolve disputes that may arise during gameplay. We analyse gameplay data to detect and prevent fraudulent activity, money laundering, and problem gambling behaviour as part of our commitment to safe gaming practices. Marketing communications are sent only with your explicit consent, and you retain the right to opt out at any time. We may use aggregated and anonymised data for statistical analysis to improve our services, develop new games, and enhance user experience. OnlySpins casino privacy policy ensures that your data is never sold to third parties for their marketing purposes, and processing activities are limited to what is necessary and proportionate to achieve stated objectives.

Data Sharing and Third-Party Processors

OnlySpins shares your personal information with carefully selected third-party service providers who assist in delivering our gaming platform. These entities process data on our behalf under strict contractual agreements that require them to maintain the same level of data protection we uphold. Payment processors handle your financial transactions securely, whilst identity verification services confirm your age and identity to meet regulatory standards. We work with game providers who supply the slot games available on our platform, and they may receive limited data necessary for game functionality and fairness verification. Cloud hosting providers store data on secure servers, and customer support platforms enable our team to assist you effectively. Regulatory authorities and law enforcement agencies may receive your information when legally required or when necessary to investigate suspected criminal activity, money laundering, or breaches of gambling regulations. We may disclose data to professional advisers including lawyers, auditors, and insurers who provide services to OnlySpins. In the event of a business restructuring, merger, or acquisition, your data may be transferred to the new entity, and you will be notified of any such change in data controllership.

Data Security and Retention

OnlySpins implements robust technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. We employ industry-standard encryption protocols for data transmission and storage, including SSL/TLS technology that secures communications between your device and our servers. Access to personal data is restricted to authorised personnel who require it to perform their job functions, and all staff undergo regular training on data protection principles and safe gaming responsibilities. Our systems are protected by firewalls, intrusion detection software, and regular security audits conducted by independent cybersecurity experts. We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Onlyspins casino privacy policy or as required by law. Account information and transaction records are maintained for a minimum period to comply with UK financial services regulations and anti-money laundering legislation, typically between five and seven years after account closure. Once the retention period expires, your data is securely deleted or anonymised in accordance with data protection best practices.

Your Privacy Rights and Contact Information

Under UK data protection law, you possess several rights regarding your personal information held by OnlySpins. You have the right to access your data and receive a copy of the information we process about you. You may request correction of inaccurate or incomplete data, and in certain circumstances, you can request deletion of your personal information, subject to legal retention requirements. You have the right to restrict or object to processing activities, and where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted before withdrawal. Data portability rights enable you to receive your personal information in a structured, commonly used format for transmission to another service provider. To exercise any of these rights or if you have concerns about how OnlySpins handles your data, contact our Data Protection Officer via email at [email protected] or by post to our registered office address. You also retain the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters, if you believe your privacy rights have been violated. We will respond to all legitimate requests within one month, though complex requests may require additional time, and we will inform you of any such extension.