Casper Spins Privacy Policy

The operator acts as data controller for information processed on this website in the United Kingdom. Processing complies with UK GDPR, the Data Protection Act 2018, the UK Gambling Commission requirements, and PECR.

Personal data collected:

• Identity and verification: name, date of birth, address, nationality, documents for KYC/age checks.
• Contact details: email, phone, correspondence preferences.
• Account and usage: login details, settings, responsible gambling interactions, play history.
• Transactions: deposits, withdrawals, payment method identifiers.
• Technical data: device identifiers, IP address, browser type, app version, log data, approximate location for licensing compliance.
• Communications: customer support messages, recorded calls/chats where permitted by law.

Why this information is collected:

• To create and manage accounts and provide online services.
• To verify identity and age, prevent fraud, and meet AML and responsible gambling obligations.
• To process payments and handle support queries.
• To improve the website and user experience through analytics.

Protection measures:

• Encryption in transit (TLS) and at rest for sensitive data.
• Strict access controls, role-based permissions, and staff training.
• Activity logging, monitoring, and regular security testing.
• Data minimisation, pseudonymisation where appropriate, and secure deletion.
• Payments handled by PCI DSS compliant processors.

User rights under UK GDPR:

• Access a copy of personal information.
• Rectify inaccurate or incomplete data.
• Erase data, restrict processing, or object where applicable.
• Port data to another provider where feasible.
• Withdraw consent for marketing at any time.
• Lodge a complaint with the Information Commissioner’s Office (ico.org.uk).

Requests may require identity verification. The usual response time is one month.

Personal data is used lawfully, fairly, and transparently for the following purposes:

• Account services: registration, authentication, account settings, and support.
• Transactions: deposits, withdrawals, refunds, chargeback handling.
• Risk, security, and compliance: KYC/AML checks, affordability assessments, fraud detection, sanctions/PEP screening, responsible gambling monitoring, regulatory reporting.
• Service improvement: troubleshooting, analytics, testing, and research to improve the website and apps.
• Personalisation: tailoring content and limits based on user preferences and responsible gambling tools.
• Marketing: sending updates where the user has given consent or where permitted by law, including preference management and opt-outs.

Processing relies on one or more legal bases: consent, performance of a contract, legal obligations, or legitimate interests that do not override the user’s rights.

Users can access, update, or delete personal information through account settings or by submitting a privacy request using the contact options provided on the website.

How to make a request:

• Submit a request for access, correction, deletion, restriction, or portability.
• Provide information needed to verify identity and secure the account.
• A response will be provided within one month, or longer for complex requests, in line with UK GDPR.

Correction and deletion:

• Incorrect details can be corrected via account tools or by contacting support.
• Deletion requests will be honoured where permitted by law and regulator guidance. Certain records must be retained for legal, accounting, gambling regulation, and anti-money laundering requirements.

By using Casper Spins, users consent to necessary security checks, including identity and payment verification. Payment data is processed by authorised providers to complete transactions and prevent fraud.

The services are intended for adults aged 18 or over. Account holders must not permit minors to access the website.

The operator cannot verify age without documents supplied during KYC checks.

If an account is found to belong to a minor:

• The account will be closed.
• Personal information will be deleted where the law allows, retaining only what is required for investigation and regulatory reporting.

A parent or guardian may request deletion of a minor’s information using the contact options on the website. Identity and authority may need to be verified.

Personal data may be processed in other countries where group companies and service partners operate, including the EEA and jurisdictions outside the UK.

Safeguards:

• Transfers rely on adequacy regulations, the UK International Data Transfer Agreement, or approved standard contractual clauses.
• Partners are required to keep information confidential, apply strong security, and process only on documented instructions.

By using the website, the user consents to such transfers where consent is the appropriate basis. Additional safeguards are applied to protect information in line with UK GDPR.

This disclaimer explains that some statements may limit or qualify the scope of rules set out in this document to the extent permitted by law. Regulatory obligations may require different or additional processing that takes precedence over any conflicting term here.

The disclaimer applies once the user accepts the Privacy Policy by creating an account, signalling acceptance online, or otherwise acceding to the terms. Nothing in this policy limits statutory rights under UK law.

Cookies are small files stored on a device to remember settings and improve the user experience. Similar technologies such as SDKs, pixels, and local storage may also be used.

How cookies are used:

• Statistics and analytics to understand website performance and behaviour.
• Personalisation to remember preferences and responsible gambling settings.
• Site improvement through error logging and load balancing.

Retention: cookies are retained for up to 1 year unless removed earlier by the user. Manage preferences through the cookie banner and browser settings. Essential cookies are required for security and core functionality and cannot be switched off.

By accessing or using the services, the user accepts this Privacy Policy in full. The current version published on the website prevails over any earlier version. Continued use after updates constitutes acceptance of the revised policy.

Personal information may be shared with third parties where necessary:

• Payment processors, banks, and card schemes to handle transactions and prevent fraud.
• Identity, KYC/AML, sanctions, and affordability providers for compliance checks.
• Service vendors for hosting, support, analytics, and communications.
• Professional advisers, dispute resolution bodies, and insurers.
• Regulators, law enforcement, and courts when required by law or to defend legal claims.

A list or description of key partners and categories is provided on the website. If a specific third party is not listed, the purpose and scope of sharing will be explained before processing where required. Providing data may constitute consent to such sharing where consent is the appropriate legal basis; other legal bases may also apply.

The website may contain links to external websites and services that operate their own privacy policies. The operator is not responsible for how those websites collect or use information. Users should review the privacy notices of any external site before providing personal details.