Privacy Policy

Last Updated: May 5, 2026

1. Overview

At spinsupcasino.org (also referred to as the “Casino,” “website,” “we,” “us,” or “our”), we place the highest priority on the protection of your personal information. This Privacy Policy (the “Policy”) details how we and our affiliated subsidiaries collect, handle, share, and protect your personal data in strict adherence to international laws, including the General Data Protection Regulation (GDPR) and the Personal Information Protection and Electronic Documents Act (PIPEDA).

This Policy applies to all services provided via spinsupcasino.org and any direct interaction you have with our platform.

Age Restriction: Our services are strictly reserved for individuals aged 18 and over. We do not knowingly gather data from anyone below this age. Should we discover that data from a minor has been collected—specifically through platform misuse—we will take immediate corrective actions in accordance with legal mandates.

2. Corporate Identity

The digital platform spinsupcasino.org is owned and managed by Novatrix SRL (the “Company”), a corporation established under the legal framework of Costa Rica, holding registration number 3-102-893958. Our official headquarters are located at Province 03 of Cartago, County 07 of Oreamuno, Potrero Cerrado, North Side of Manuel Ávila Camacho School, Costa Rica.

In our professional relationship with you, we act as the Data Controller, as we define the methods and reasons for processing your information. To ensure absolute compliance with data laws, we have appointed a Data Protection Officer (DPO). For legal inquiries, rights exercise, or formal complaints, you may reach the DPO directly at [email protected].

3. Personal Data Categories and Collection

We process data to provide our services, satisfy legal duties, and maintain a secure gaming environment.

Categories of information we handle:

Identity Data: Legal name, username, date of birth, gender, nationality, and government-issued identification numbers.
Contact Details: Residential address, verified proof of residency, email address, and telephone contact information.
Financial Data: Details of bank accounts, payment cards, and verified documentation regarding your source of funds or wealth (such as bank statements).
Transaction Data: Comprehensive logs of your deposits, withdrawals, and financial history.
Gaming Data: Information regarding your gameplay, login/logout timestamps, wagering patterns, bonus usage, and responsible gaming history.
Technical Data: IP addresses, geolocation data, browser specifications, operating systems, and device platforms used to access the site.
Marketing Data: Your stated communication preferences and records of your interactions with us.

4. Why We Process Your Data

Service Operations: Account management and transaction processing. Basis: Contractual performance.
Legal Compliance: AML (Anti-Money Laundering) and KYC (Know Your Customer) obligations. Basis: Legal obligation.
Risk Management: Identifying fraud and preventing bonus abuse. Basis: Legitimate interests.
Customization: Delivering tailored marketing and promotional offers. Basis: Consent and/or legitimate interest.
Platform Optimization: Improving user experience through traffic analysis. Basis: Legitimate interest.
Security: Safeguarding the platform and its users. Basis: Legitimate interest and legal obligation.

5. Data Sourcing

Information is gathered directly from you during registration and site usage. Additionally, we obtain data from identity verification services, financial institutions, AML/PEP screening databases, and authorized business partners such as affiliate networks.

6. Information Sharing

We may disclose your data to trusted third parties, including:

Corporate Group Members: For unified AML and fraud prevention.
Game Providers: To enable access to specific gaming content.
Payment Gateways: To facilitate your financial transactions.
Compliance Tools: Third-party software for age and identity verification.
Authorities: Law enforcement or regulatory bodies when legally compelled.

7. Global Data Transfers

For data moved outside the European Economic Area (EEA), we implement rigorous safeguards, specifically Standard Contractual Clauses (SCCs) as approved by the European Commission, to ensure your data remains protected.

8. Retention Period

We store your data only for the duration necessary to fulfill our stated purposes. However, due to international AML regulations, we are legally required to maintain your data for a minimum of five years following the closure of your account. Requests for data deletion cannot be fulfilled during this mandatory period.

9. Your Legal Rights

Under GDPR and PIPEDA, you possess the right to access, correct, or request the deletion of your data (subject to legal retention laws). You may also withdraw consent, object to processing, request data portability, and opt-out of marketing. Complaints can be filed with a relevant data protection authority.

10. Security Protocols

We utilize technical and administrative barriers to prevent data loss or unauthorized access. Your account is secured via unique login credentials, and we provide Two-Factor Authentication (2FA) for enhanced security. You are responsible for keeping your login details private.

11. Contact Details

For matters regarding this Policy, reach our DPO at [email protected]. General support is available via [email protected] or our live chat feature.