This privacy policy explains how HighSpin Casino handles personal data. It applies to anyone who visits the website, registers an account, deposits funds, places bets, contacts support or otherwise interacts with our services. We aim to keep this document readable. If something is unclear, contact support and we will walk you through it.
What personal data do you collect?
When you register an account we collect your full name, date of birth, residential address, email address, phone number and a username of your choosing. We collect payment information when you deposit or withdraw, including card numbers in encrypted form, wallet addresses and bank account details. We collect identity verification documents when these are required by our licensing authority, typically a photo of a government-issued ID and a recent proof of address such as a utility bill or bank statement.
When you use the site we collect your IP address, device type, browser, operating system, language preference, pages visited, time spent on each page, games played, bets placed, deposits and withdrawals made, and customer service interactions. Cookies and similar technologies record session details and preferences. The full list of cookies in use is published on the cookie policy page.
Why do you collect this data?
Personal and identity data is collected to verify your age, your identity and your residential address. This is required by our licensing authority as part of anti money laundering rules and responsible gambling rules. We cannot offer you an account without it. Payment data is collected to process deposits and withdrawals and to comply with financial regulations. Transaction history is held to support disputes, fraud investigation and tax reporting where applicable.
Usage data is collected to operate the platform, detect fraud or bonus abuse, improve the product, personalise content and analyse aggregate trends. With your consent we may use email and phone contact details to send marketing material about new games, promotions and updates. Marketing consent is optional and can be withdrawn at any time from the account settings or by clicking unsubscribe in any marketing email.
How long do you keep my data?
Account and transaction data is retained for a minimum of five years after the closure of your account, as required by anti money laundering rules. Identity verification documents are retained for the same period. Marketing data is retained until you withdraw consent, after which it is deleted within thirty days. Support correspondence is kept for two years for service quality and training purposes. Aggregate analytics data with personal identifiers stripped may be kept indefinitely.
You have the right to request that we erase your personal data, but where retention is required by law or by our regulator we will keep what we are legally required to keep and erase the rest. Account data cannot generally be erased while the account is still open; you would need to close the account first and then make the erasure request.
What rights do I have over my data?
You have the right to access a copy of the personal data we hold about you. Requests are processed within thirty days and the response is sent in a portable digital format. You have the right to correct inaccurate data; minor changes can be made through account settings, and other changes require a request to support. You have the right to restrict processing, to object to processing for marketing purposes, to request erasure subject to retention rules above, and to lodge a complaint with the data protection authority in your country of residence.
To exercise any of these rights, contact privacy@highspinglobal example with the request and we will confirm receipt within seventy two hours. We may need to verify your identity before processing the request, which protects against fraudulent requests made in your name. There is no fee for standard requests. Repetitive or excessive requests may attract a reasonable fee or be refused, with reasons provided.
Personal data may be shared with our payment processors, identity verification providers, fraud prevention partners, licensing authority, legal advisers and government agencies where required by law. We do not sell personal data to third parties for their own marketing. Some of our service providers are based outside the United Kingdom and the European Economic Area; transfers to those countries are made under standard contractual clauses or other appropriate safeguards.
Data security is maintained through encryption in transit and at rest, restricted internal access on a need-to-know basis, regular security testing and the technical and organisational measures expected of a modern online platform. No system is invulnerable, but we treat protection of player data as a primary responsibility. In the unlikely event of a personal data breach affecting your account we will notify you and the relevant authority within seventy two hours in line with statutory requirements.
How do you handle children and protected groups?
HighSpin is strictly an adult platform and accounts are not available to anyone under twenty four. Age is verified during onboarding through identity documents and cross-referenced against electoral and credit registers where these are available in the player's country of residence. If we have reason to believe an account has been opened by a minor, the account is suspended immediately, any balance is held pending verification and the registered guardian is contacted where appropriate. We do not knowingly collect personal data from minors and any such data discovered on our systems is deleted on identification.
For players who have entered into formal self exclusion arrangements, additional safeguards apply. Data is retained as required by the exclusion programme rather than the standard retention windows above and may be shared with the relevant exclusion register to give the protection real effect. The full account closure and exclusion options sit on the close account page and the wider support framework is set out on the responsible gambling page.
How can I get in touch about data?
Data protection enquiries should be sent to the privacy team rather than general support so they reach the right specialists straight away. The address is privacy@highspinglobal example and we aim to acknowledge within seventy two hours and respond substantively within thirty days. For urgent matters such as suspected account compromise, live chat through the help page is the fastest route and the agent will escalate to the privacy team where required. This policy is reviewed annually and whenever a material change is made to our data handling practices; the version date at the top of the page records the last review.