Your Privacy at Spinbara

This Privacy Policy sets out what personal information we collect when you play at Spinbara Casino, how we use it, and the controls you have over it. It applies to every page on spinbara-pokies.com and to every account holder registered with us. Last updated 2026.

What We Collect From You

We collect personal data directly from you when you register, deposit, play, or contact our support team, and we generate additional data automatically as you use the site. The categories below cover everything we hold.

• Identity data: your full name, date of birth, email address, phone number, and residential address.
• Verification documents: copies of your ID document, proof of address, and proof of payment method, collected as part of Know Your Customer (KYC) checks before your first withdrawal.
• Transaction data: deposits and withdrawals, payment method details, wallet addresses for crypto, amounts, dates, and wagering history.
• Technical data: IP address, device type, operating system, browser, and approximate location derived from your IP.
• Gameplay behaviour: games played, bets placed, wins and losses, session times, and bonus usage.
• Marketing preferences: whether you opted in to promotional emails or SMS, which offers you engaged with, and when you withdrew consent.
• Communications: records of your live chat sessions and email exchanges with our 24/7 support team.

Why We Process Your Data

Purposes of processing

Every piece of data we collect serves a specific purpose tied to running your account and meeting our legal obligations as a licensed operator. We do not process your data for purposes that are incompatible with the ones listed below.

• Creating and managing your player account, including authentication and account settings.
• Completing KYC verification and anti-money laundering (AML) screening before withdrawals.
• Processing deposits and withdrawals through methods such as PayID, cards, e-wallets, and crypto.
• Detecting and preventing fraud, bonus abuse, multi-accounting, and underage gambling.
• Monitoring play for responsible gambling signals and enforcing the deposit limits, loss limits, and self-exclusion tools you set.
• Sending marketing communications, but only where you have given consent.
• Meeting legal and regulatory obligations owed to the Curaçao Gaming Control Board and other authorities.

The Legal Bases We Rely On

Contract. Processing your identity, transaction, and gameplay data is necessary to perform our contract with you. Without it we cannot open an account, process payments, or pay out winnings up to the 16,000 AUD weekly limit.

Legal obligation. We must verify your identity, screen transactions against AML requirements, and retain gambling records for at least five years because our licence and gaming law demand it. You cannot opt out of processing required by law.

Legitimate interest. We rely on legitimate interest to secure the platform, detect fraud, keep records of disputes, and analyse aggregated play patterns to improve the site. This interest never overrides your rights, and we weigh it against your expectations each time we apply it.

Consent. Marketing emails, SMS offers, and non-essential cookies run only on your consent. You may withdraw consent at any time by changing your communication preferences in your account or by emailing [email protected], and withdrawal takes effect without penalty to your account.

How Long We Keep Records

Retention schedule

We keep each category of data only as long as the purpose requires, then delete or anonymise it. Regulatory rules fix minimum periods for gambling and transaction records, so those cannot be shortened on request while your account is open or within the statutory window after closure.

Who We Share Data With

We never sell your personal data. We share it only with processors and authorities who need it to deliver a service you use or to satisfy a legal duty. Every processor works under a written data processing agreement that limits what they may do with your information.

• Payment processors and e-wallet providers, to move your deposits and withdrawals.
• KYC and AML verification providers, to confirm your identity and screen transactions.
• Game and platform suppliers who host sessions, receiving only the technical data needed to run a game round.
• The Curaçao Gaming Control Board and other regulators, law enforcement, or courts where disclosure is legally required.
• Analytics and email delivery services, working only on our instructions.
• Professional advisers such as auditors and lawyers, under confidentiality obligations.

Your Rights at Spinbara

Exercising your rights

You control your personal data. Send any request to [email protected] or to our data protection officer at [email protected], and we will respond within 30 days. We may ask you to verify your identity before acting, which protects your account from unauthorised requests. If you are unhappy with our answer, you can complain to your local data protection authority.

• Access: get a copy of the personal data we hold about you.
• Rectification: correct data that is inaccurate or incomplete.
• Erasure: ask us to delete data where no legal retention duty applies.
• Portability: receive your account and transaction data in a machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: stop marketing at any time through your account settings or a direct request.
• Complain: raise the matter with the relevant supervisory authority.

Cookies and Tracking

We use cookies to keep you logged in, remember your preferences, secure sessions, and measure site performance. Essential cookies run without consent because the site cannot function without them; analytics and marketing cookies load only after you accept them in the cookie banner. Read the full breakdown of each cookie, its purpose, and its lifespan on our dedicated Cookies Policy page, where you can also change your choices at any time.

Keeping Your Data Safe

All traffic between your device and our servers travels over TLS encryption, and stored verification documents sit in encrypted storage with strict access controls. Staff access to personal data follows least-privilege rules, is logged, and is limited to teams that need it, such as KYC and payments. We run regular security reviews and penetration tests, and we back up data so a hardware failure cannot wipe your account records.

If a breach ever compromises your personal data, we will notify the relevant supervisory authority within 72 hours of confirming it, and we will tell you directly without undue delay where the breach carries a risk to your rights. For anything related to this policy, contact [email protected] or reach our 24/7 live chat team, who can escalate privacy matters straight to us. If gambling stops being fun, call Gambling Help Online on 1800 858 858 for free, confidential support.

Frequently asked questions

How do I request a copy of my data?

Email [email protected] or [email protected] with a data access request. We verify your identity, then send your personal data in a machine-readable format within 30 days.

Can I delete my KYC documents early?

No. AML rules require us to keep verification documents for 5 years after account closure, so we cannot delete them on request during that window. Everything else not covered by a retention duty can be erased.

How do I stop marketing emails?

Open your account settings and switch off communications, or click the unsubscribe link in any email. Withdrawal takes effect immediately and costs you nothing.

Do you sell my data to advertisers?

Never. We share data only with processors that deliver payments, KYC checks, hosting, and analytics under strict contracts, and with authorities where the law requires disclosure.