Logo

Privacy Policy

This privacy policy outlines how Spin Rio Casino collects, uses, stores, and protects personal information provided by users of our online gaming platform. We are committed to safeguarding your privacy and ensuring that your personal data is handled in accordance with applicable data protection legislation in the United Kingdom, including the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). By accessing or using Spin Rio Casino services, you acknowledge that you have read and understood this privacy policy.

Information We Collect

Spin Rio Casino collects various types of information to provide and improve our services, ensure regulatory compliance, and maintain a secure gaming environment. Personal data collected includes information you provide during account registration, such as your full name, date of birth, residential address, email address, and telephone number. We also collect financial information necessary for processing deposits and withdrawals, including payment card details, bank account information, and transaction history. Additionally, we gather technical data automatically when you use our platform, including IP addresses, device identifiers, browser type, operating system, and gameplay statistics. Identity verification documents, such as passport copies, driving licences, or utility bills, are collected to comply with Know Your Customer (KYC) requirements and anti-money laundering regulations. Communication records, including correspondence with customer support, chat logs, and survey responses, are also retained for quality assurance and dispute resolution purposes.

Data CategoryExamplesPurpose
Personal IdentificationName, address, date of birthAccount creation and verification
Financial InformationPayment details, transaction historyProcessing deposits and withdrawals
Technical DataIP address, device type, cookiesPlatform functionality and security
Verification DocumentsPassport, utility bills, bank statementsRegulatory compliance and age verification
Communication RecordsSupport tickets, email correspondenceCustomer service and dispute resolution

How We Use Your Information

The information collected by Spin Rio Casino is used for specific legitimate purposes essential to operating our online gaming services. We process your personal data to create and manage your player account, verify your identity and age to ensure compliance with gambling regulations, and prevent underage gambling. Financial information is used to process your deposits, withdrawals, and other monetary transactions securely. Your data enables us to provide customer support, respond to enquiries, and resolve any disputes that may arise during your use of our services. We analyse gameplay data and user behaviour to detect and prevent fraudulent activity, money laundering, and other illicit practices. Marketing communications, including promotional offers and game updates, may be sent to you based on your preferences, though you retain the right to opt out at any time. Technical data helps us improve platform performance, enhance user experience, and develop new features. We also use your information to comply with legal obligations, including reporting requirements to the UK Gambling Commission and other regulatory authorities.

Data Sharing and Disclosure

Spin Rio Casino maintains strict controls over the sharing of your personal information and only discloses data to third parties when necessary and lawful. We share information with payment service providers and financial institutions to process transactions and verify payment methods. Identity verification services and credit reference agencies receive relevant data to fulfil KYC requirements and assess financial risk. Third-party technology providers who supply gaming software, hosting services, and analytics tools may access certain data under strict confidentiality agreements. We are obligated to disclose information to regulatory bodies, including the UK Gambling Commission, when required for licensing compliance and investigations. Law enforcement agencies and government authorities may receive data when legally required through court orders, subpoenas, or statutory obligations. In the event of a business transfer, merger, or acquisition, your information may be shared with prospective buyers or successors, subject to continued privacy protections. Marketing partners may receive limited data if you have provided explicit consent for third-party promotional communications. All third parties with access to your information are contractually bound to maintain confidentiality and use data only for specified purposes.

Recipient TypeInformation SharedLegal Basis
Payment ProcessorsFinancial details, transaction dataContract performance
Verification ServicesIdentity documents, personal detailsLegal obligation
Gaming Software ProvidersGameplay data, technical informationLegitimate interest
Regulatory AuthoritiesAccount activity, financial recordsLegal obligation
Law EnforcementRelevant information upon valid requestLegal obligation

Your Rights and Data Protection

Under UK data protection law, you possess several rights regarding your personal information held by Spin Rio Casino. You have the right to access your personal data and obtain confirmation of what information we process about you, which can be requested by contacting our data protection officer. The right to rectification allows you to request correction of inaccurate or incomplete personal data in our records. You may exercise the right to erasure, also known as the right to be forgotten, under certain circumstances, though this may be limited by our legal obligations to retain records for regulatory purposes. The right to restrict processing enables you to limit how we use your data in specific situations, such as when you contest the accuracy of information. You have the right to data portability, allowing you to receive your personal data in a structured, commonly used format and transmit it to another service provider. The right to object permits you to oppose processing based on legitimate interests, including direct marketing communications. You also have the right to withdraw consent at any time for processing activities that rely on your consent, without affecting the lawfulness of processing conducted prior to withdrawal. To exercise any of these rights, you may contact our support team or data protection officer through the channels provided on our website. If you are dissatisfied with how we handle your rights, you may lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.

Data Security and Retention

Spin Rio Casino implements comprehensive technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. We employ industry-standard encryption protocols, including SSL/TLS technology, to secure data transmission between your device and our servers. All sensitive information, particularly financial and identity verification data, is stored in encrypted databases with restricted access limited to authorised personnel. Our systems undergo regular security audits and vulnerability assessments to identify and address potential risks. Access controls, including multi-factor authentication and role-based permissions, ensure that only designated staff members can view personal data necessary for their duties. We maintain data retention policies that balance our operational needs with your privacy rights and regulatory requirements. Account information and transaction records are retained for a minimum of six years following account closure to comply with UK Gambling Commission regulations and financial record-keeping obligations. Verification documents are kept for the duration required by anti-money laundering legislation. Marketing preference data is retained until you withdraw consent or request deletion. Inactive accounts may be archived after extended periods of non-use, with personal data deleted in accordance with our retention schedule. Upon the expiry of retention periods, personal data is securely deleted or anonymised to prevent identification.