This policy sets out how personal data is collected, used and protected when you register and play at Spinita, in accordance with UK data protection law. It covers every visitor and account holder on this site.
At sign-up, Spinita collects your name, date of birth, address, email and payment details. Verification adds a copy of a government-issued photo ID and a proof-of-address document. Ongoing use of the account generates further records: gameplay and betting history, deposit and withdrawal activity, device and browser information, and any support conversations you have with the team.
This data supports account administration, identity and age verification required under our gambling licence, secure processing of deposits and withdrawals, detection of fraud or problem-gambling indicators, and reporting obligations to the Gambling Commission and other UK bodies. Processing carried out to satisfy a legal obligation continues for as long as the account remains open, regardless of marketing preferences.
Personal data is disclosed only where necessary to run the service: identity verification providers confirming your documents, payment processors and banks completing transactions, fraud prevention services where a check is triggered, and regulators such as the Gambling Commission where reporting is legally required. Spinita does not sell personal data to third parties for their own marketing use.
Account and transaction records are retained for the period set by UK anti-money-laundering and gambling regulation, which typically extends several years beyond account closure. Non-regulatory data, such as marketing preferences, is kept only as long as it remains relevant and is deleted or anonymised afterwards.
Data in transit is encrypted using SSL, and payment details are handled under PCI-DSS-compliant systems. Internal access is restricted to staff who need it for verification, support or compliance duties, and passwords are stored in hashed form rather than as plain text.
You can ask to see the personal data Spinita holds about you, request correction of inaccurate details, ask for erasure of data no longer needed for a legal purpose, and object to direct marketing at any time. Requests can be made through your account's support contact; where a request cannot be fully met, for example because a record must be kept for regulatory reasons, you will be told why.
Cookies used for essential functions, security, and, with your consent, analytics and marketing are covered in detail in the separate cookie policy for this site.
If you are unhappy with how a data request has been handled, you can raise the matter with the Information Commissioner's Office (ICO), the UK's independent authority for data protection.
Some of the providers Spinita works with, such as payment processors, may handle data outside the UK. Where this happens, appropriate safeguards required under UK data protection law, such as standard contractual clauses, are put in place before any transfer occurs.
Spinita is not intended for anyone under 18, and personal data belonging to a minor is not knowingly collected. Age is checked as part of identity verification, and any account found to belong to someone under 18 is closed and reported as required.
