Privacy Policy

SpinBet Online Casino — Privacy Policy for New Zealand Players

Effective Date and Scope

This Privacy Policy governs the collection, use, storage, sharing, and protection of personal data by SpinBet, an online casino brand operating under a gaming licence issued by the Government of Curaçao. This policy applies to all individuals who access, register with, or use the services provided through the SpinBet platform, including but not limited to residents and citizens of New Zealand. By accessing or using the SpinBet platform, you acknowledge that you have read, understood, and agreed to the terms set out in this Privacy Policy. SpinBet is committed to handling your personal information in a manner consistent with the New Zealand Privacy Act 2020, the Information Privacy Principles established thereunder, and applicable international standards for data protection in the iGaming sector.

1. About SpinBet and This Policy

SpinBet is a licensed online casino operator providing digital gambling entertainment services, including but not limited to online slots, live casino games, table games, and sports-related wagering products. The platform operates under a licence granted by the Curaçao Gaming Control Board, which establishes regulatory obligations relating to player protection, anti-money laundering compliance, and responsible gambling standards. This Privacy Policy has been prepared to ensure full transparency regarding the personal data we collect from players, the lawful basis upon which such data is processed, the parties with whom data may be shared, and the rights available to individuals in relation to their personal information. SpinBet takes its obligations as a data controller seriously and has implemented appropriate technical and organisational measures to safeguard all personal data processed through its systems.

2. Information We Collect

SpinBet collects personal data through a variety of means during the course of providing its services. The categories of personal data we collect include the following:

• Full legal name and date of birth, collected during account registration to verify player identity and confirm that the individual meets the minimum age requirement for gambling participation in New Zealand.
• Residential address, nationality, and country of residence, collected for regulatory compliance purposes including Know Your Customer procedures and anti-money laundering obligations.
• Email address, telephone number, and other contact details, collected to facilitate account communications, customer support interactions, and marketing correspondence where consent has been provided.
• Payment information, including bank account details, credit or debit card numbers, e-wallet account identifiers, and transaction histories, collected to process deposits, withdrawals, and to conduct financial risk assessments in accordance with AML obligations.
• Government-issued identification documents such as passports, national identity cards, or driver’s licences, collected during the KYC verification process to authenticate the identity of registered players.
• Source of funds and source of wealth documentation, which may be requested in cases where regulatory obligations require enhanced due diligence procedures.
• Technical data including IP addresses, device identifiers, browser type and version, operating system information, session duration, login timestamps, and geolocation data, collected automatically when you interact with the SpinBet platform.
• Behavioural data relating to gaming activity, including game selection, wagering patterns, deposit and withdrawal frequency, and session behaviour, which is used for fraud detection, responsible gambling monitoring, and platform personalisation.
• Communication records, including support tickets, chat logs, and email correspondence, retained for quality assurance, dispute resolution, and regulatory audit purposes.

3. Purpose and Legal Basis for Data Processing

SpinBet processes personal data for a range of specific, legitimate, and lawful purposes. Each purpose is supported by an appropriate legal basis under applicable data protection law, including the New Zealand Privacy Act 2020 and internationally recognised data protection principles.

• Account registration and management: Personal data is processed to create and maintain your SpinBet player account, authenticate your identity upon login, manage account settings, and facilitate access to the full range of gaming services available on the platform.
• Know Your Customer and identity verification: SpinBet is required under its Curaçao gaming licence and applicable AML regulations to verify the identity of all registered players. This involves processing identification documents and personal details to confirm that players are who they claim to be, that they are of legal gambling age, and that their use of the platform does not present a regulatory risk.
• Anti-money laundering and counter-terrorism financing compliance: SpinBet is obligated to monitor financial transactions conducted through its platform for indicators of money laundering, fraud, or other illicit financial activity. Personal and financial data is processed for this purpose in accordance with applicable AML legislation and the requirements of the Curaçao Gaming Control Board.
• Payment processing: Financial data is processed to facilitate secure deposits and withdrawals, to verify the ownership of payment instruments, and to investigate and resolve payment-related disputes.
• Fraud prevention and security: Technical data, behavioural data, and account information are processed to detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, and other forms of platform misuse.
• Marketing and promotional communications: Where you have provided your explicit consent, SpinBet may use your contact details and behavioural data to send you personalised promotional offers, bonus notifications, and other marketing materials. You retain the right to withdraw your consent to marketing communications at any time.
• Responsible gambling obligations: SpinBet processes gaming behaviour data to identify players who may be exhibiting signs of problem gambling and to implement responsible gambling measures such as deposit limits, self-exclusion, and cooling-off periods.
• Legal compliance and regulatory reporting: SpinBet may process personal data as necessary to comply with legal obligations, respond to regulatory inquiries, and fulfil reporting requirements imposed by licensing authorities and law enforcement agencies.

4. Data Sharing and Third-Party Disclosure

SpinBet does not sell personal data to third parties. However, in the course of providing its services and meeting its regulatory obligations, SpinBet may share personal data with the following categories of third parties:

• Payment service providers and financial institutions, including banks, card processors, and e-wallet operators, who require access to financial and identity data to process transactions securely and in compliance with financial regulations.
• Identity verification and KYC service providers, who assist SpinBet in authenticating player identities, verifying documentation, and conducting enhanced due diligence where required.
• Fraud detection and cybersecurity partners, who process technical and behavioural data to identify and mitigate risks associated with fraudulent activity on the platform.
• Regulatory and licensing authorities, including the Curaçao Gaming Control Board and any other competent regulatory body, to whom SpinBet may be required to disclose player data in the course of regulatory audits, compliance reviews, or investigations.
• Law enforcement agencies and governmental bodies, where SpinBet is legally compelled to disclose personal data in response to a court order, subpoena, or other lawful request.
• Technology and infrastructure service providers, including cloud hosting providers, software developers, and data analytics platforms, who process data on behalf of SpinBet under strict contractual data processing agreements that ensure appropriate levels of data protection.

5. Data Retention

SpinBet retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. In accordance with AML and gaming regulatory requirements, player account data and transaction records are typically retained for a minimum period of five years following the closure of an account or the conclusion of a business relationship. Technical logs and session data may be retained for shorter periods in accordance with operational necessity. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with established data disposal procedures.

6. Your Rights as a Data Subject

As an individual whose personal data is processed by SpinBet, you are entitled to the following rights under the New Zealand Privacy Act 2020 and applicable data protection standards:

• The right to access the personal data that SpinBet holds about you, including information about the purposes for which it is processed and the parties to whom it has been disclosed.
• The right to request the correction of any inaccurate or incomplete personal data held by SpinBet.
• The right to request the deletion of your personal data, subject to any overriding legal or regulatory obligations that require SpinBet to retain such data.
• The right to restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• The right to withdraw your consent to the processing of personal data where consent is the lawful basis upon which processing is conducted, including the right to opt out of marketing communications at any time.
• The right to lodge a complaint with the New Zealand Office of the Privacy Commissioner if you believe that SpinBet has failed to handle your personal data in accordance with applicable privacy law.

To exercise any of the above rights, please contact SpinBet through the official support channels available on the platform. SpinBet will respond to all verifiable data subject requests within the timeframes prescribed by applicable law.

7. Cookie Policy

SpinBet uses cookies and similar tracking technologies on its platform to enhance user experience, maintain platform functionality, and gather analytical data for performance optimisation. The following categories of cookies are used:

• Essential cookies, which are strictly necessary for the operation of the SpinBet platform. These cookies enable core functions such as user authentication, session management, security features, and the delivery of gaming services. Essential cookies cannot be disabled without impairing the functionality of the platform.
• Analytical cookies, which collect aggregated and anonymised data about how users interact with the SpinBet platform, including page views, session durations, navigation paths, and error reports. This data is used to improve platform performance, identify technical issues, and optimise the user experience.
• Marketing and preference cookies, which may be used to track user behaviour across sessions and deliver personalised promotional content where consent has been obtained.

Users may manage their cookie preferences through the cookie consent tool available on the SpinBet platform. Please note that disabling certain categories of cookies may affect the availability or performance of specific platform features.

8. International Data Transfers

As SpinBet operates under a Curaçao gaming licence and utilises service providers located in various jurisdictions, personal data may be transferred to and processed in countries outside of New Zealand. SpinBet ensures that any such international transfers are conducted in accordance with applicable data protection law and that adequate safeguards are in place to protect the security and integrity of personal data during transfer and processing.

9. Security Measures

SpinBet employs a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include data encryption in transit and at rest, access controls and authentication protocols, regular security audits and vulnerability assessments, and staff training on data protection obligations. In the event of a personal data breach that poses a risk to the rights and freedoms of affected individuals, SpinBet will notify the relevant regulatory authorities and affected players in accordance with applicable legal requirements.

10. Amendments to This Policy

SpinBet reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or business practices. Any material changes to this policy will be communicated to registered players through the platform or via direct notification. Continued use of the SpinBet platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. Players are encouraged to review this policy periodically to remain informed of how their personal data is being processed.