Privacy Policy

Effective date: 1 January 2026

Welcome to HighSpin Casino. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our website, mobile access, progressive web app and any related services (together called the “Services”). By registering an account or using the Services, you agree to the practices described in this Privacy Policy.

HighSpin Casino is operated by HighSpin Casino under a gaming licence issued by the Curaçao Gaming Authority (licence number 8048/JAZ). We are committed to high standards of data protection, fair play, and responsible gambling for all players using our Services from the United Kingdom and other accepted countries.

1. Data Controller and Contact Details

The data controller responsible for your personal data in connection with the Services is:

HighSpin Casino
Email (general privacy enquiries and support): [email protected]

If you have any questions about this Privacy Policy, your rights, or our handling of personal data, you can contact us via email. We will reply as soon as reasonably possible and in any case within the time limits set by applicable data protection laws.

2. Scope of this Privacy Policy

This Privacy Policy applies to:

Use of our website and progressive web app
Creation and management of your HighSpin Casino account
Participation in casino, live dealer, instant win and other games
All payment activity, including deposits, withdrawals and refunds
Marketing communications, promotions and loyalty or VIP programmes
Customer support via live chat or email

This Privacy Policy does not apply to third‑party websites, apps or services that may be linked on our website. Those services are managed by their own privacy policies and we advise you to read them before providing any personal data.

3. Legal Basis for Processing

We process your personal data on several legal bases, depending on the type of information and the context in which we collect it. These bases include:

Contract: To set up and manage your account, process payments, provide bonuses, and deliver the Services you request.
Legal obligation: To comply with anti‑money laundering (AML) rules, fraud prevention rules, age verification, tax and accounting duties and other rules that apply to licensed gaming operators.
Legitimate interests: To keep the Services secure, prevent abuse, improve products, handle disputes, and present relevant offers. Where we rely on this basis, we balance our interests with your rights and freedoms.
Consent: For optional activities such as certain marketing communications, the placing of non‑essential cookies, and some analytics activity. You can withdraw your consent at any time as explained below.

4. Categories of Personal Data We Collect

4.1 Data You Provide Directly

We collect the following types of personal data when you create an account, make a deposit, request a withdrawal, contact support, or use promotions:

Identity details: full name, date of birth, gender (if provided), nationality, and proof of age.
Contact details: email address, postal address, country of residence, mobile or landline number.
Account information: username, encrypted password, security questions, language preference, currency preference (EUR), account status, limits and exclusions.
KYC and verification data: copies of your identity card, passport, driving licence, residence permit, proof of address (such as utility bill or bank statement), payment method ownership documents and any other verification material that may be requested under rules or internal controls.
Payment data: deposit and withdrawal records, selected payment method type (for example card, wallet, crypto), partially masked card numbers, account IBAN or wallet details where needed, transaction identifiers, transaction timestamps, amounts and currencies.
Communication data: records of emails, chat transcripts, complaint tickets, support requests and our responses.
Marketing preferences: subscription choices, consent logs, and your response to particular offers.
Responsible gambling settings: deposit limits, loss limits, wagering limits, session limits, self‑exclusion requests and cooling‑off requests.

4.2 Data Collected Automatically

When you access the Services, we automatically collect certain technical and usage data, including:

Device data: device type, operating system and version, browser type and version, screen resolution, device language.
Connection data: IP address, approximate location based on IP, time zone, referring URL.
Usage data: pages visited, time spent on pages, click paths, game sessions, game selections, gameplay events and interactions with promotions.
Log data: login timestamps, logout timestamps, failed login attempts, changes to account settings, bonus activation, and account closure events.

4.3 Cookies and Similar Technologies

We use cookies, pixels and similar tools on the website and progressive web app. Cookies are small text files placed on your device that help us remember your settings, understand how you use the Services and improve security and performance.

We use the following main categories of cookies:

Strictly necessary cookies: needed for core functions such as login, security and page navigation. These cookies are essential to use the Services.
Preference cookies: store choices such as language, region, game settings and other preferences.
Performance and analytics cookies: gather anonymous statistics on how visitors use the Services, which helps us improve layout, content and usability.
Marketing cookies: used, subject to consent where required, to show offers that match your interests and measure the success of campaigns.

In many cases you can manage cookies through your browser settings or through consent banners on our site. Note that blocking some cookies may affect the performance of the Services.

5. How We Use Your Personal Data

We use your personal data for the following purposes:

5.1 Account Setup and Management

To register your player account and confirm that you are at least 18 years old.
To verify your identity, address and payment method ownership in line with AML and KYC rules.
To allow you to log in, manage passwords, update your profile and close your account.
To handle account‑related notifications, such as changes to terms, security alerts, and service notices.

To provide access to casino games, live casino, instant wins, lootboxes, Wheel of Fortune, quests, achievements, the shop and VIP club.
To run game sessions, calculate stakes, process bets, settle winnings and losses, and maintain scoring and statistics.
To enforce game rules, bonus rules, cashout limits, and responsible gambling measures set by you or by us.

5.3 Payments and Financial Activity

To process deposits and withdrawals using the payment methods available in your region.
To meet banking, accounting and reporting duties, including prevention and detection of fraud, money laundering and other offences.
To perform checks required by regulators, financial partners or card schemes.

5.4 Bonuses, Promotions and Loyalty

To credit welcome bonuses, reload offers, cashback, rakeback, lootboxes and other promotional rewards.
To track your participation in promotions, tournaments, quests and achievements.
To invite you to VIP levels and manage VIP benefits, including personal bonuses and priority services.

5.5 Customer Support and Dispute Resolution

To respond to your requests via live chat or email.
To investigate and resolve complaints or disputes about games, payments, bonuses or account status.
To keep evidence of communications to protect both you and us against misuse and legal claims.

5.6 Security, Fraud Prevention and Compliance

To check registrations, logins, and transactions for possible signs of fraud, abuse, multi‑accounting or bonus misuse.
To apply geo‑blocking and other measures for restricted countries or regions.
To meet our licence terms, AML programme, sanctions screening and other duties imposed by law or regulators.

5.7 Analytics and Service Improvement

To compile statistics on how players use the Services, including game popularity and device information.
To keep the website and progressive web app stable, safe and efficient.
To test new features, improve the layout and adjust the content we present.

5.8 Marketing and Personalised Content

To send email promotions, in‑site messages and push notices (where supported) about new games, bonuses and events, subject to your preferences and local law.
To personalise certain offers based on your activity, VIP level and previous use of the Services, where this is allowed in your jurisdiction.
To measure how successful our marketing campaigns are and improve future communications.

You may change your marketing preferences at any time using the account settings or by clicking the unsubscribe link in our emails.

6. Retention of Personal Data

We retain personal data only for as long as required for the purposes explained in this Privacy Policy, or for as long as required by law. Retention periods may vary depending on the type of information. For example:

Account data: kept for the duration of your active account and for a follow‑up period after closure, to deal with claims, legal duties and rules on record‑keeping.
Payment and transaction data: often stored for a set number of years under tax, accounting and AML rules, even after account closure.
KYC records: stored for the period set by AML or gaming regulations and then blocked or deleted safely.
Marketing data: stored while you have not opted out, subject to legal limits, and removed or anonymised after that point.
Technical logs: kept for shorter periods unless required for security reviews, fraud checks or legal cases.

Once data is no longer required, we will delete it or convert it into anonymous form so it can no longer identify you.

We do not sell your personal data. We may share your data with the following categories of recipients, strictly for the purposes described in this Privacy Policy:

7.1 Group Companies and Business Partners

Group companies or related entities that help operate the Services, payment processes or customer support.
Game providers and platform partners who supply casino games, live casino tables and instant win games, and who may need limited data to run game sessions or resolve game‑related issues.

7.2 Payment Providers and Financial Institutions

Banks, card schemes, crypto payment processors, open banking services and payment gateways to process deposits, withdrawals and refunds.
Fraud prevention and AML service providers that carry out identity checks, card checks or transaction checks to meet legal and scheme requirements.

7.3 Service Providers

IT service companies, hosting providers, cloud platforms and security providers.
Customer support platforms, email delivery services and communication tools.
Analytics and performance monitoring providers, which receive limited technical data and usage data.
Marketing and customer engagement tools, subject to your marketing preferences and legal rules.

7.4 Authorities and Regulators

Gaming regulators, financial intelligence units, police, tax authorities or other public bodies when required by law, by a court order, or to defend our legitimate rights.
Other companies, financial institutions and card schemes where required to investigate fraud, AML concerns or payment disputes.

7.5 Business Transfers

Potential or actual buyers, investors, or advisers in case of a merger, acquisition, corporate restructuring or sale of assets, subject to solid confidentiality rules and applicable data protection law.

8. International Data Transfers

HighSpin Casino operates under a licence issued in Curaçao, and many of our technical and payment partners may be located outside the United Kingdom or the European Economic Area. When your personal data is transferred to countries that may have different data protection standards, we put in place suitable safeguards, such as contractual clauses that meet recognised data protection requirements or similar measures where legally accepted.

Where we rely on such safeguards, we apply internal controls and due diligence to help ensure that recipients handle your data responsibly and lawfully.

9. Data Security

We take data security seriously and implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, or alteration. These measures include:

Use of SSL encryption for data in transit between your browser or device and our servers.
Strict access controls, allowing only authorised staff to access personal data where needed for their role.
Regular security reviews and monitoring for suspicious activity or fraud.
Secure password storage and multi‑factor authentication options where available.
Internal policies on data handling, staff training and confidentiality duties.

Despite strong safeguards, no system can guarantee absolute security. You are also responsible for keeping your login details secret, using unique passwords, securing your devices and informing us promptly if you suspect unauthorised access to your account.

10. Your Rights Over Your Personal Data

Depending on your country of residence and the terms of applicable law, you may have some or all of the following rights:

Right of access: to ask whether we hold personal data about you and to receive a copy of that data.
Right to rectification: to correct inaccurate or incomplete personal data.
Right to erasure: to ask for your personal data to be deleted, subject to legal obligations that may require us to keep some records.
Right to restriction: to ask us to limit processing of your data in certain cases.
Right to data portability: to receive some personal data in a structured, commonly used format and to transfer it to another service where technically feasible.
Right to object: to object to some forms of processing carried out on the basis of legitimate interests or for direct marketing purposes.
Right to withdraw consent: where we rely on consent (for example for some marketing or cookies), you may withdraw it at any time. This will not affect the lawfulness of processing based on consent before withdrawal.
Right to lodge a complaint: to raise concerns with a data protection authority if you believe your rights are not being respected.

To use your rights, you may contact us at [email protected]. We may need to confirm your identity before acting on your request. Some rights may be limited where we must keep data for legal, regulatory or anti‑fraud reasons.

11. Marketing Communications

During registration or later in your account settings, you can select whether you wish to receive marketing messages from HighSpin Casino. These may include:

Information about new games, features and casino content.
Welcome offers, reload bonuses, free spins and other promotions.
Updates about VIP tiers, loyalty rewards, tournaments and special events.

You have control over these options and may:

Change your preferences within your account where such settings are available.
Click the unsubscribe link included in promotional emails.
Contact our support team and ask to be removed from specific mailing lists or marketing types.

We may still send you service-related messages, such as account notices, changes to terms, responsible gambling information and important policy updates, even if you opt out of direct marketing.

12. Responsible Gambling and Data Use

HighSpin Casino supports responsible gambling. We use some of your data to:

Apply deposit, loss, wagering and session limits that you set on your account.
Implement cooling‑off periods and self‑exclusion requests.
Observe playing patterns that may indicate risky behaviour and provide information on support tools.
Meet any guidance or obligations from regulators on player protection.

Information linked to responsible gambling measures may be shared with relevant support teams and, when required, with authorities or support organisations operating in this area, always within the limits of applicable law.

13. Children and Underage Use

The Services are strictly for adults aged 18 years and over. We do not knowingly collect or process personal data from anyone under 18. We perform age checks using identity documents and other tools as part of our KYC and AML procedures.

If we become aware that we have received data from a person under 18, we will take reasonable steps to close the account, delete the data where possible, and block further access. If you believe that an underage person has registered an account with us, please contact us immediately.

14. Automated Decision‑Making and Profiling

We may use automated systems and limited profiling for the following purposes:

Fraud detection, AML monitoring and verification checks.
Application of bonus rules, eligibility criteria and wagering checks.
Segmentation for promotions, VIP evaluation and rewards, subject to your marketing preferences and legal limits in your region.

Where automated decisions significantly affect you and are based solely on automated processing, you may have the right to ask for human review, to express your point of view and to contest the decision, as provided by applicable law.

15. Third‑Party Links and Services

The website may contain links to external websites, content or services that are operated by third parties. We are not responsible for the privacy practices or content of such third‑party sites. If you follow a link to a third‑party service, you do so at your own discretion and we recommend that you check their privacy policy before sharing any personal data.

16. Data Accuracy and Your Responsibilities

You are responsible for ensuring that the information you provide to us is accurate and up to date. You should update your account details without delay if any changes occur, such as a new email address, change of residence or replacement of primary payment method.

We may carry out regular checks and may ask for documents to confirm that your data is still correct, especially where required under our licence or AML rules.

17. Complaints and Dispute Handling

We aim to resolve privacy‑related complaints and data requests in a fair and timely way. If you have any concern about our handling of your personal data, you can contact us at [email protected] and include the following information:

Your full name and registered email address.
A description of the issue, including dates and any relevant account activity.
Any supporting documents or screenshots that may help clarify the concern.

We will review your complaint as quickly as possible and respond within the time limits set by law. In addition, you may have the right to bring the matter to a data protection authority in your home country or in the country where you use the Services.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in law, requirements from regulators, technical developments, or changes in our Services. When we make significant changes, we will take reasonable steps to inform you, such as:

Posting a clear notice on the website.
Sending an email notice to registered players.
Presenting a prompt or banner when you next log in.

Any updated version of this Privacy Policy will be effective from the date stated at the top of the page. We encourage you to review the Privacy Policy regularly to stay informed about how we handle your personal data.

19. Summary of Key Points

Purpose	Description
Account and identity	We collect identity, contact and KYC data to set up and manage your account and confirm you are over 18.
Payments	We use payment and transaction data to process deposits and withdrawals, meet AML duties and prevent fraud.
Gaming services	We use usage and gameplay data to provide games, settle bets and manage bonuses, lootboxes, cashback and VIP benefits.
Security	We log technical and account events to protect your account, detect unlawful activity and comply with our licence.
Marketing	With your consent or where allowed, we send promotions and personalised offers, which you can opt out of at any time.
Data sharing	We share data with payment providers, game suppliers, IT and support providers and authorities where required by law.
Your rights	You can request access, correction, deletion, restriction, portability and can object to certain processing or withdraw consent.

20. Contact Information

If you have any questions, concerns or requests about this Privacy Policy or about your personal data, please contact us using the following details:

HighSpin Casino – Privacy and Data Protection
Email: [email protected]

You should always include your registered account email and, where safe to do so, your username so that we can identify your account and respond properly.

For more information about our Services and current offers, you can visit highspin-casino.co.uk.

By using our Services you acknowledge that you have read this Privacy Policy and understand how HighSpin Casino collects, uses and protects your personal data.