Fun Begins With Spin.
Hit Win. Feel Zen.
Your sensitive information, such as registration entries and payment credentials, is protected by multiple layers of encryption using 256-bit SSL technology, which is the same technology used by major banks. Personal identifiers are only kept on secure servers that are located in certified data centres that follow European and international laws. Only authorised personnel can access your records, and access rights are closely watched and granted only after strict authentication methods are used. All transactions are watched in real time to find and stop unwanted activities. Updated verification procedures make sure that both identity and responsible participation are checked, which lowers the risk of misuse or loss. The platform has certifications from independent regulatory bodies and goes through external audits to make sure it follows the General Data Protection Regulation (GDPR) and any other laws that apply in each country. User accounts clearly show how long information will be kept, and users can easily change their minds about giving consent at any time through account settings. Two-step verification and customisable alert preferences are available to make things even safer. Users are urged to keep their credentials strong and unique and to follow best practices like changing their passwords often. You can get direct help with questions about stored information or changes to your personal settings through encrypted message channels. This framework makes sure that your participation is private, clear, and in line with both the operator's duties and the users' expectations.
When you sign up for an account, we ask for certain information, such as your full name, address, date of birth, email address, phone number, and payment method. We need this information to confirm the user's identity, make sure they are old enough, and make transactions safe. During login and gameplay sessions, our systems automatically record some technical information, like the type of browser, device model, operating system, IP address, and user activity logs. This monitoring is important for spotting suspicious behaviour and keeping the platform safe.
We get data by:
The only reasons we collect submitted documents, like ID cards or proof of residence, are to follow the law and verify users. Only team members who have been given permission can access these records.
The information that is collected is used for different things:
We keep your information safe for as long as the law requires or until you ask us to delete it, as long as we are allowed to do so by law. When you send information to partners or service providers like payment companies or identity verification agencies, you only share the bare minimum of information needed. There are also contractual protections in place to keep the information private. Users can choose not to receive direct marketing communications at any time through their account settings or unsubscribe links. We suggest that you check your account privacy settings often and keep up with changes to how data is handled.
Before any personal information can be shared, explicit permission must be given. When someone signs up, they are asked to agree or disagree with requests for information use, like marketing outreach, working with third parties, or analytics. You can change your preferences for how often you want to be contacted and how often you want to access your data directly in your user profile.
Users get a dashboard that shows them specific types of information that have been collected, like device IDs, geolocation data, and transaction records. There are separate toggles for each category that let you choose whether or not to share. This gives you full control over who can see what and when.
You can change your mind at any time without any problems. You can choose not to use the opt-out feature through your account settings or through special support channels. According to the law, requests to delete, correct, or limit processing must be acted on within 30 days.
People under the required minimum age cannot give consent. Automated checks find attempts to register people under the age of 18, and any data that is found is deleted right away to make sure that the rules are followed.
Every consent action is recorded with a time stamp and a summary of what permissions were given or denied. Historical records are available upon request, so participants can check their current and past settings at any time.
Suggestions: Check your sharing settings often, especially after new features are added. To keep your account as safe as possible, turn on two-factor authentication and don't let unknown third parties see your information. If you have any questions about changing your settings, please contact the customer support team for personalised help.
Advanced encryption methods like TLS 1.2 and AES-256 are used to keep player records safe while they are being sent and while they are stored on secure servers. All servers are housed in certified European data centres that have monitored access control, 24/7 surveillance, and biometric authentication for only authorised personnel. To limit access, personal account information, such as identification documents and payment information, is stored in separate areas. Only a small number of trusted staff members with specific jobs can look at private records. Each time someone accesses them, it is logged and checked on a regular basis. Layered security software tracks login attempts and transactional activities in real time. It uses intrusion detection systems, two-factor authentication, and rate-limiting tools to stop unauthorised access and brute-force attacks. Third-party cybersecurity companies do regular penetration testing to find and fix security holes. After each official release, software patches and operating system updates are automatically installed to stop people from taking advantage of them. Data retention policies are in line with the General Data Protection Regulation (GDPR), which means that unnecessary information is either anonymised or securely deleted after the specified retention period. To lower the chances of losing data because of hardware failure or malicious activity, regular backups are encrypted, stored offsite, and tested to make sure they can be restored.
External organisations are not allowed to access user information without permission. Only service providers who are directly involved in running the platform, like payment gateways, fraud prevention services, or customer support tools, can get access to the data. Each partner must follow confidentiality agreements and strict rules for handling data that are in line with international standards like the GDPR and local laws. Your information is not shared with marketing agencies or other unrelated groups without your permission. Before being sent, sensitive information like transaction history and unique identifiers is encrypted. Automated monitoring keeps an eye on sharing processes to stop unauthorised access, and detailed access logs are kept for auditing purposes. If legal authorities show valid documents, information may be made public in accordance with national laws. Users can ask for a list of third parties who have gotten their information during a certain time. To make sure your requests are correct, get in touch with the support team through verified channels and be clear about the type of data and time frame you need. Regular checks of agreements with third parties are planned to make sure they follow the rules and lower the risk. If a partner doesn't meet security standards, they can't work together until all of their weaknesses are fixed. Only verified and approved processors can handle personal information, which gives account holders an extra layer of protection.
Players can look at and change their personal information on the account dashboard whenever they want. Email address, phone number, postal address, and ID documents are some of the fields that can be changed. Accurate information makes sure that service is always available and helps with following the rules.
If a user finds wrong or old data that can't be changed directly, they can send a written request to the Data Protection Officer through the support portal. To verify your identity, you may have to answer a security question or show proof of identity. Responses are sent within 30 days of receiving them, in accordance with data protection laws.
Participants have the right to be forgotten, which means they can ask for their records to be removed from the system, but there are some legal and operational limits on this. Users must get in touch with customer support and tell them what kind of data they want to delete in order to start the process. Before deleting something, the operator will make sure that it doesn't need to be kept for tax reasons, anti-money laundering rules, resolving disputes, or regulatory auditing.
If immediate removal isn't possible because of legal requirements, people can ask for their information to be limited. In these situations, the data is not processed any further and is not available for marketing or analysis purposes, but it is still available for regulatory purposes.
We keep a record of every request to change or delete something, and we let users know in writing what we did. If a request is turned down because of required record-keeping, the person who made the request is given a clear explanation, including the legal basis for the decision. All requests should go to the right Data Governance contact. For the sake of openness, the account settings menu has a full explanation of the steps and timelines.
Bonus
for first deposit
1000£ + 250 FS
Switch Language