Spinjo Casino Privacy Policy

Who Controls Your Data

Hollycorn N.V., the operator of Spinjo Casino registered in Curaçao at Scharlooweg 39, Willemstad under company number 144359, is the controller responsible for the personal data processed through your account. Hollycorn N.V. holds Curaçao Gaming Control Board Licence OGL/2023/176/0095 and processes your data in that capacity for as long as your account remains open, and for a defined period afterward as set out below.

Your data is shared with the parties needed to run your account, deposits and game sessions. Payment processors handling your transactions include those supporting Visa, Mastercard, POLi, Neosurf, Skrill, Neteller, MiFinity, MuchBetter, ecoPayz, bank transfer and cryptocurrency payments, each of which receives the transaction data required to process a deposit or withdrawal. Game studios, including Pragmatic Play, Evolution Gaming, Play’n GO, NetEnt, Nolimit City and the other providers listed in the game catalogue, receive an anonymised player identifier and bet data needed to run the RNG or live session, but do not receive your name, email or payment details directly. Internal compliance staff review identity documents submitted for KYC purposes; this is handled in-house rather than through a named external verification vendor.

Cookies fall into three categories on the site: strictly necessary cookies that keep you logged in and your cashier session secure, functional cookies that remember display preferences such as sound settings, and analytics cookies that measure how the site is used in aggregate. Strictly necessary cookies cannot be disabled without breaking core functionality. Functional and analytics cookies can be declined through the cookie banner shown on first visit, or adjusted later through your browser’s cookie settings.

What Happens to Your Data After Closure

Account data, including transaction history and identity verification records, is retained for as long as required under anti-money-laundering and licensing obligations tied to Curaçao Gaming Control Board Licence OGL/2023/176/0095, typically for a period of years after account closure rather than being deleted immediately. Closing your account stops further marketing communications and removes the account from active play, but the underlying records are kept in archive form for the retention period before deletion, in line with the operator’s regulatory record-keeping duties.

Lodging a Complaint

If you believe your data has been mishandled, you can first raise the matter directly with Spinjo through the contact channels on this site. If the response is unsatisfactory, a complaint can be escalated to the Curaçao Gaming Control Board, the authority responsible for supervising Hollycorn N.V. under Licence OGL/2023/176/0095.

Where Your Data Is Processed

Because Hollycorn N.V. is registered and operates from Curaçao, account and transaction data is processed on servers located outside Australia. By registering and using the platform from Australia, you accept that your data will be transferred to and processed in a jurisdiction with different data protection standards from your own, subject to the safeguards Hollycorn N.V. applies as licence holder.

What We Collect

Registration data covers your name, date of birth, email address and country. Payment data covers the method used, transaction amounts and confirmation references from the processors listed above. KYC data covers the identity and address documents submitted for verification, such as an Australian driver’s licence, passport or Medicare card together with a utility bill or bank statement. Technical data covers your IP address, device type, browser and session logs generated as you use the site, and cookie data covers the categories described above.

Your Rights Over This Data

You can request access to the personal data held on your account, ask for inaccurate details to be corrected, and request deletion of data that is no longer required for a legal or regulatory purpose. You can also request that processing be restricted in specific circumstances, object to certain uses of your data such as marketing, and request a copy of your data in a portable format where technically feasible. Requests are actioned through the contact route below and may require identity confirmation before they are processed.

Why We Process Your Data

Data is processed to open and administer your account, to process deposits and withdrawals, to meet anti-money-laundering and know-your-customer obligations under Curaçao Gaming Control Board Licence OGL/2023/176/0095, and to communicate with you about your account and, where you have not opted out, about promotions. Processing for account administration and regulatory compliance is carried out on the basis of the contract formed when you register and the legal obligations attached to the operator’s licence, while marketing communications rely on your consent, which can be withdrawn at any time.

Contact for Data Requests

Requests relating to your personal data, including access, correction or deletion requests, can be sent to [email protected]. Include your registered email address so the request can be matched to your account, and expect a response within the standard support timeframes published on the contact page.