Our Privacy Policy in Plain English
This policy explains what personal data we collect when you play at Spingreen Casino, why we collect it, how long we keep it and what rights you hold over it. It applies to every account registered on spingreen-aud.com.
What Data We Collect
To open and run your account we collect several categories of personal data. Each category serves a purpose set out in the next section, and we never gather more than the purpose requires.
- Identity data: full name, date of birth, email address, phone number, residential address
- Verification documents: government-issued ID, proof of address up to 3 months old, proof of payment method
- Transaction data: deposits, withdrawals, wagering records, bonus and loyalty point history
- Technical data: IP address, device type, browser and operating system, approximate location derived from IP
- Gameplay behaviour: games played, session length, bet sizes, win and loss patterns
- Marketing preferences: which offers you consented to receive and how you opted in
How We Use Your Data
We use your data for seven concrete purposes: creating and maintaining your account, completing KYC verification before your first withdrawal, processing deposits and withdrawals across AUD and supported cryptocurrencies, preventing fraud and bonus abuse, monitoring for responsible-gambling signals, sending you marketing with your consent, and meeting legal obligations under our Curaçao licence (OGL/2024/452/0687) and applicable anti-money-laundering law.
The Legal Bases We Rely On
Contract
We process identity, transaction and gameplay data to perform the contract you enter when you register with us. Without this data we cannot open an account, settle bets or pay winnings.
Legal obligation
KYC verification, AML record keeping and retention of transaction records rest on our legal obligations. We must verify your identity before releasing funds and hold gambling records for at least 5 years.
Legitimate interest
Fraud prevention, security monitoring, aggregated analytics and keeping our service functioning depend on our legitimate interest in running a safe casino. This basis never covers direct marketing.
Consent
Marketing emails, SMS offers and non-essential cookies run on your consent alone. You may withdraw consent at any time and we will stop that processing without affecting your account.
How Long We Keep It
Retention depends on the category of data and the reason we hold it. Nothing is kept longer than the stated period except where law demands it.
| Data category | Retention period |
|---|---|
| Identity and account data | Life of the account plus 5 years after closure |
| Transaction and wagering records | Minimum 5 years under regulatory and AML rules |
| KYC verification documents | 5 years after the last transaction, then securely deleted |
| Technical and device data | Up to 12 months for security and analytics |
| Marketing preferences | Until you withdraw consent or ask for deletion |
| Self-exclusion records | Duration of the exclusion plus 12 months |