Privacy Policy

Information we gather

When you open an account we record identifying details: full legal name, date of birth, residential address, email address, telephone number and chosen currency. These fields are mandatory because anti-money-laundering rules attached to our Tobique and Anjouan authorisations require a verified identity behind every wallet.

Verification documents form a second category. Passports, national identity cards, driving licences, utility bills, bank statements and, where a payment dispute arises, card images with the middle digits obscured are examined by our compliance department and stored in encrypted form separate from the main account database.

Transactional and gameplay records are generated automatically as you use the service: deposits, withdrawals, wagers, bonus redemptions, balance movements and the identity of the studio supplying each title. Technical information is logged alongside them — internet protocol address, device model, operating system, browser build, display resolution, preferred language and approximate location derived from network data.

Finally, we retain the substance of your communications with us, including chat transcripts, email threads, complaint files and any recordings made during telephone contact where local law permits recording and you have been notified beforehand.

Purposes and lawful bases

Contractual necessity covers the core of what we do with your information: creating and maintaining the account, crediting deposits, settling wagers, paying withdrawals and answering support requests. Without these details the agreement between you and Spin Samurai Casino cannot be performed.

Legal obligation governs identity verification, source-of-funds enquiries, sanctions and politically-exposed-person screening, tax reporting and the retention of records for regulatory inspection. We have no discretion to waive these steps at a member's request.

Legitimate interests support fraud prevention, bonus-abuse detection, network security, debugging, aggregate product analytics and the player-protection monitoring described in our responsible gaming policy. We weigh those interests against your rights and freedoms, and we record the assessment.

Consent is used for optional purposes only: marketing email, push notification, SMS campaigns and non-essential analytics or advertising cookies. Consent may be withdrawn at any moment through your communication preferences or the unsubscribe link, and withdrawal never affects your ability to play, deposit or withdraw.

Disclosure to third parties

Game studios receive the minimum data needed to run a round and settle it — typically a pseudonymous session token, stake amount and currency — rather than your identity. Payment institutions, card acquirers and cryptocurrency processors receive the details required to move funds and to satisfy their own regulatory duties.

Specialist suppliers act for us under written processing agreements: identity verification bureaux, anti-fraud scoring services, cloud hosting providers, email delivery platforms and customer-service software vendors. They may process your information only on our documented instructions and must delete or return it when the engagement ends.

We disclose information to the Tobique Gaming Commission, to Anjouan Gaming, to law enforcement, to tax authorities and to courts where a valid legal instrument compels us. In a merger, acquisition or transfer of the business, member records would pass to the acquiring entity subject to the protections set out in this notice.

Spin Samurai Casino does not sell personal information, and we do not rent or trade member lists to advertisers or data brokers.

Security, transfers and retention

Traffic between your device and our servers is protected by current TLS encryption. Sensitive records are encrypted at rest, access is granted on a strict need-to-know basis with individual credentials and mandatory two-factor authentication, and administrative actions are written to an immutable audit log.

Some of our suppliers operate outside your home jurisdiction. Where information leaves the United Kingdom or the European Economic Area we rely on adequacy decisions, the UK International Data Transfer Agreement, or standard contractual clauses supplemented by a transfer risk assessment.

Regulatory rules oblige us to keep account, transaction and verification records for a minimum of five years after the relationship ends, and longer where an investigation, dispute or statutory hold applies. Marketing preferences and optional analytics data are held for shorter periods and purged on a rolling schedule.

Self-exclusion records are a deliberate exception. They are preserved for the full exclusion term and beyond, because deleting them would defeat the protection you asked us to apply.

Your rights and how to exercise them

Subject to local law, you may request a copy of the information we hold, ask us to correct inaccuracies, request erasure where no legal duty requires retention, object to or restrict certain processing, and receive a portable copy of the data you supplied to us in a machine-readable format.

Requests should be sent from the email address registered to your account. We reply within one calendar month, extending by a further two months only for genuinely complex cases and telling you if we do. Identity confirmation is required before we release anything, since an unverified request is itself a security risk.

Members in Great Britain may complain to the Information Commissioner's Office at ico.org.uk if they are dissatisfied with our handling of a request. We would always prefer the chance to resolve the matter directly first.

We review this notice at least annually and whenever our processing changes materially. Substantive revisions are announced on this page and, where the change affects your rights, communicated by email before it takes effect.

Where to get help

• Data Protection Officer, Spin Samurai Casino — write through the Contact page selecting the 'Privacy request' category
• Member support — live chat and email, available around the clock for account and access questions
• Information Commissioner's Office (GB supervisory authority) — ico.org.uk, 0303 123 1113