Privacy Policy

Last Updated: May 5, 2026

1. Introduction and General Scope

At spinsup.casino (referred to as the “Casino,” “website,” “we,” “us,” or “our”), the security of your personal data is a foundational priority. This Privacy Policy (the “Policy”) details how we and our partner subsidiaries collect, manage, disclose, and protect your information. Our operations are conducted in strict alignment with international data protection standards, including the General Data Protection Regulation (GDPR) and the Personal Information Protection and Electronic Documents Act (PIPEDA).

This Policy governs your use of the spinsup.casino platform, our various services, and any digital communication or interaction you have with us.

Age Requirement: Access to this website is strictly limited to individuals aged 18 and older. We do not intentionally collect data from minors. If we discover that personal information from a person under 18 has been collected particularly through unauthorized use of our platform we will take immediate measures to process and delete such information as required by law.

2. Corporate Details

The website spinsup.casino is owned and operated by Novatrix SRL (the “Company”), a business entity incorporated under the laws of Costa Rica with registration number 3-102-893958. Our registered headquarters are located at Province 03 of Cartago, County 07 of Oreamuno, Potrero Cerrado, North Side of Manuel Ávila Camacho School, Costa Rica.

As the operator of this platform, we act as the Data Controller, meaning we determine the purposes and methods for processing your data. To uphold our legal commitments, we have appointed a Data Protection Officer (DPO). For questions regarding your data, to exercise your legal rights, or to file a formal complaint, please contact our DPO at [email protected].

3. Types of Personal Information Collected

We process your data to provide our services, maintain regulatory compliance, and ensure a protected gaming environment.

The categories of data we process include:

Identity Data: Full legal name, username, date of birth, gender, nationality, and official identification numbers (ID/Passport).
Contact Information: Residential address, verified proof of residency documents, email address, and telephone numbers.
Financial Information: Banking details, payment card data, and verification of your source of funds or wealth (bank statements/income proof).
Transaction Logs: History of deposits, withdrawals, and other financial activities on the platform.
Gaming Records: Details of games played, session timestamps, wagering history, bonus activity, and responsible gaming interactions.
Technical Data: IP address, geolocation, browser specifications, operating system, and the hardware used to access the site.
Marketing Data: Your stated communication preferences and records of your interactions with our support teams.

4. Purposes and Legal Justification

Service Delivery: Managing player accounts and financial transactions. Legal Basis: Performance of a contract.
Regulatory Duties: Fulfilling Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements. Legal Basis: Legal obligation.
Risk Mitigation: Detecting and preventing bonus abuse and platform fraud. Legal Basis: Legitimate interests.
Personalized Marketing: Providing promotional updates and tailored advertisements based on your interests. Legal Basis: Consent and/or legitimate interest.
Operational Improvement: Analyzing site traffic and optimizing the user experience. Legal Basis: Legitimate interest.
Platform Security: Monitoring for safety and system integrity. Legal Basis: Legitimate interest and legal obligation.

5. Data Sources

We gather information directly from your inputs during registration and gameplay. Additionally, we utilize third-party identity verification services, financial institutions, AML/PEP screening databases, and marketing business partners (such as analytics and affiliate providers).

6. Disclosure to Third Parties

We may share relevant data with trusted entities, including:

Corporate Group Members: For consolidated fraud prevention and responsible gaming oversight.
Game Developers: To ensure the functionality of specific gaming titles.
Payment Processors: To execute and verify your financial transactions.
Compliance Services: Third-party tools for verifying age, identity, and fraud risk.
Legal Authorities: Law enforcement or regulatory bodies when legally mandated.

7. International Transfers and Retention

International Transfers: For data moved outside the European Economic Area (EEA), we utilize Standard Contractual Clauses (SCCs) to ensure your information receives an equivalent level of protection.

Data Retention: We store your information only for the period required to fulfill our service goals. However, due to global AML regulations, we are legally compelled to maintain your data for a minimum of five years after your account is closed. We cannot honor deletion requests until this mandatory period has concluded.

8. Your Rights and Safety

User Rights: Under GDPR and PIPEDA, you have the right to access, update, or correct your data, restrict or object to processing, and request data portability. You may also withdraw your consent for marketing at any time.

Security: We utilize high-level technical and administrative safeguards to protect your information. Your account is secured by your unique credentials. We strongly recommend the use of Two-Factor Authentication (2FA) for maximum account protection.

9. Contacting Us

For inquiries regarding this Policy or your personal information, please reach our DPO at [email protected]. For general assistance, our support team is available via [email protected] or our live chat service.