Spinwinera Privacy Policy
Spinwinera (referred to in its Terms and Conditions as the Company) operates spinwinera.com and processes personal data in connection with the provision of casino, live casino, sports betting, esports betting and racing services. This page sets out what personal data we collect, the purposes for which we use it, who we share it with, how long we keep it, and what rights you have in relation to it. Spinwinera is governed by the laws of Costa Rica, and this policy reflects the operator’s own data-handling commitments under that framework.
What information we collect
We collect personal data across several categories depending on how you interact with the site. Account registration data includes your name, date of birth, residential address, email address and phone number. KYC verification documents include government-issued photo ID (passport, national identity card or driver’s licence), proof of address such as a utility bill, copies of payment cards or other instruments used to deposit, and where required, evidence of source of funds or wealth. Gameplay data covers deposits, withdrawals, bets placed, session times and game choices. We also collect device and network data, including IP address, browser type, operating system and device identifiers, as well as cookies and similar technologies used for site functionality and analytics.
How we use your information
We use personal data to provide the service: creating and maintaining your account, processing deposits and withdrawals, and enabling gameplay across all verticals on the platform. We process data to meet our anti-money laundering and know-your-customer obligations, including age verification, identity checks before the first withdrawal, and ongoing transaction monitoring. Personal data is also used for fraud prevention, security monitoring and the enforcement of the one-account-per-person rule. Where you’ve opted in, we may use your contact details to send marketing communications, which you can withdraw at any time.
Who we share data with
We share personal data with licensed payment processors to handle deposits and withdrawals, and with identity verification services and credit reference agencies engaged to carry out KYC and fraud checks. Game studios supplying content to the platform, including Pragmatic Play, Play’n GO, NetEnt, Microgaming, Playtech and Evolution, may receive session and gameplay data necessary to operate their titles. We may disclose data to law enforcement agencies, regulators, industry associations, banks and identity verification providers where we suspect fraudulent or illegal activity, or where disclosure is required by applicable law.
Data retention
We retain account and transaction records for a minimum of five years following account closure, in line with anti-money laundering requirements applicable to our operations. KYC documents and financial transaction history are kept for the same period or longer where an ongoing legal obligation or dispute requires it. Data that’s no longer required for any regulatory or operational purpose is deleted or anonymised.
Your rights
You have the right to request a copy of the personal data we hold about you. You may ask us to correct inaccurate or incomplete data. You can request erasure of your data where no legal retention obligation applies. You have the right to restrict or object to certain processing activities. Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. You also have the right to receive your data in a portable format where technically feasible. Because Spinwinera operates under Costa Rica governing law rather than a UK or EU licence, the supervisory authority for UK GDPR purposes does not have direct jurisdiction; however, you may raise concerns with the relevant data protection authority in your country of residence.
Contact us
Privacy queries, data access requests and requests to exercise any of the rights listed above can be sent to [email protected] . No Data Protection Officer is named on the site; all privacy-related correspondence should be directed to the same address. We’ll respond to requests within a reasonable period and may ask you to verify your identity before processing a request.
