Privacy Policy
This Privacy Policy explains how SpinBoss collects, uses, stores and protects personal information belonging to individuals who visit this website, register an account, or otherwise interact with the platform. It sets out what categories of data are gathered, the purposes for which that data is processed, the circumstances in which information may be shared with third parties, and the rights available to data subjects under applicable data protection law. This document also covers the use of cookies and similar technologies across the site. Anyone who accesses the platform or creates an account is asked to read this policy carefully, as it forms part of the overall relationship between the user and SpinBoss alongside the site Terms and Conditions.
Scope and Application
This policy applies to all visitors and registered account holders who use the SpinBoss platform, including the casino and sportsbook sections, the mobile experience, and any associated communication channels such as live chat or email support. It covers information collected at the point of registration, during ongoing account activity, and through payment processing, as well as data gathered automatically through cookies and similar tools when browsing the site. The policy does not extend to third-party websites that may be linked from within the platform, and users are encouraged to review the privacy practices of any external service they access separately. Only individuals who meet the applicable minimum age requirement for gambling in the United Kingdom, which is 18 years, are permitted to register and submit personal data through this platform.
Information We Collect
SpinBoss collects a range of personal information necessary to operate the platform responsibly, verify identity, process transactions, and comply with legal obligations. The specific categories of data collected depend on how a person interacts with the site, whether as a casual visitor or a registered account holder engaging in real-money play.
| Data Category | Examples | Purpose |
|---|---|---|
| Identity data | Full name, date of birth, government-issued ID | Age verification, identity checks, fraud prevention |
| Contact data | Email address, postal address, phone number | Account communication, support, regulatory correspondence |
| Financial data | Payment method details, transaction history, deposit and withdrawal records | Processing payments, anti-money laundering checks |
| Account data | Username, password (encrypted), login history, account preferences | Account security, service delivery |
| Technical data | IP address, device type, browser information | Site functionality, security, fraud prevention |
| Usage data | Pages visited, games played, session duration | Service improvement, responsible gambling monitoring |
| Marketing preferences | Communication opt-ins and opt-outs | Managing consent for promotional contact |
Where identity or proof-of-address documents are requested as part of routine verification checks, these are collected in line with the account holder verification process referenced in the site Terms and Conditions, typically prior to a first withdrawal being processed.
How Personal Data Is Used
Personal data collected by SpinBoss is used for a defined set of purposes connected to operating the platform lawfully and safely. These purposes include verifying the identity and age of account holders, processing deposits and withdrawals, detecting and preventing fraud or money laundering, maintaining the security of accounts, and delivering customer support when a query is raised. Data may also be used to monitor patterns of play consistent with responsible gambling obligations, including identifying signs that a player may benefit from deposit limits, session controls, or other protective tools. Where a user has provided consent, data may additionally be used to send communications about account activity, service updates, or information relating to bonus terms and promotional mechanics, though such communications are always subject to opt-out. SpinBoss does not use personal data for purposes incompatible with those described in this policy, and any new use of data would only proceed with an appropriate legal basis.
Legal Basis for Processing
Personal data is processed on one or more recognised legal grounds, depending on the nature of the activity. Processing necessary to perform the contract between the user and SpinBoss, such as managing an account or handling a payment, is carried out on a contractual basis. Processing required to meet legal and regulatory obligations, including age verification and anti-money laundering checks aligned with the 5th AML Amendment, is carried out on the basis of legal obligation. Where processing relates to fraud prevention, account security, or service improvement, this is generally carried out on the basis of legitimate interest, balanced against the rights of the individual. Marketing communications, where sent, rely on the consent of the recipient, and that consent can be withdrawn at any time through account settings or by contacting customer support.
Cookies and Similar Technologies
SpinBoss uses cookies and similar tracking technologies to support core website functionality, remember user preferences, and gather aggregated information about how the site is used. Some cookies are strictly necessary for the platform to operate correctly, such as those maintaining a secure logged-in session, while others are used for analytical or performance purposes to help identify how the site can be improved. Cookies may also be used to support fraud detection and to recognise returning visitors for security purposes. Users are generally able to manage cookie preferences through their browser settings, including blocking or deleting cookies, although doing so may affect certain features of the site, such as remaining logged in or having preferences remembered between visits. Where cookie consent mechanisms are presented on the site, choices made through those tools are respected and can typically be adjusted at any time.
Sharing of Personal Data
Personal data is shared only where necessary and with appropriate safeguards in place. Recipients may include payment service providers and financial institutions involved in processing deposits and withdrawals, identity verification providers engaged to confirm age and identity, and regulatory or law enforcement bodies where disclosure is required by law. Data may also be shared with service providers who support the technical operation of the platform, such as hosting providers or customer support tools, under contractual obligations to protect the confidentiality and security of the information. SpinBoss does not sell personal data to third parties for their own independent marketing purposes. Any transfer of data outside of the user’s home jurisdiction is carried out with appropriate contractual or legal safeguards intended to maintain an equivalent standard of protection.
Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, accounting, or regulatory retention requirements. Account and transaction records are typically kept for a period after account closure to satisfy anti-money laundering obligations and to respond to any regulatory enquiries that may arise. Once the applicable retention period has passed and there is no ongoing legal requirement to retain the data, records are securely deleted or anonymised. Where a user requests deletion of their data prior to the expiry of a mandatory retention period, SpinBoss will explain which elements of the request can be fulfilled immediately and which must be retained temporarily to meet a legal obligation.
Data Security
SpinBoss applies technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, or alteration. This includes the use of SSL encryption across transactions carried out on the platform, restricted internal access to personal data on a need-to-know basis, and ongoing monitoring for suspicious account activity. Payment information is handled in coordination with regulated payment providers, and sensitive documents submitted for identity verification are stored securely and accessed only for the purpose of completing the relevant check. While reasonable steps are taken to protect personal data, no system can guarantee absolute security, and users are encouraged to use strong, unique passwords and to keep their login credentials confidential.
User Rights
Individuals whose personal data is processed by SpinBoss have a number of rights in relation to that data, subject to applicable law and any exemptions that may apply. These rights typically include the right to request access to the personal data held, the right to request correction of inaccurate information, the right to request deletion of data where there is no overriding legal reason to retain it, and the right to object to certain types of processing, such as direct marketing. Individuals may also have the right to request a copy of their data in a portable format and the right to withdraw consent where processing is based on consent. Requests relating to these rights can be submitted through the account holder’s registered contact details or by reaching out to customer support, and SpinBoss will respond within the timeframe required under applicable data protection law, having first verified the identity of the requester to protect against unauthorised disclosure.
Marketing Communications
Where a user has opted in to receive marketing communications, these may include information about account-related updates, changes to services, or the terms governing available bonus mechanics and promotional structures, described strictly as rules rather than as inducements. Communications of this nature are sent only with appropriate consent, and every marketing message includes a straightforward way to unsubscribe or adjust communication preferences. Opting out of marketing communications does not affect the ability to use the core services of the platform, including account management, deposits, and withdrawals. Preferences relating to marketing consent can be reviewed and updated at any time through account settings.
Children and Age Restriction
SpinBoss does not knowingly collect personal data from individuals under the age of 18, which is the legal minimum age for gambling in the United Kingdom. Age verification checks are built into the registration and account verification process precisely to prevent underage individuals from creating an account or engaging in real-money play. Where it comes to the attention of SpinBoss that an account has been created by, or data collected from, someone below the minimum age, the account will be suspended and the relevant data handled in accordance with applicable law, including deletion where appropriate. Parents or guardians who believe a minor has attempted to register an account are encouraged to contact customer support so that appropriate action can be taken.
Responsible Gambling and Data
Data collected through ordinary account activity, including deposit patterns, session length, and gameplay behaviour, may be used to support responsible gambling monitoring. This can include identifying indicators that a player may benefit from tools such as deposit limits, session time controls, or self-exclusion options, all of which are described in more detail on the dedicated responsible gaming information provided by the platform. The use of data for this purpose is intended to support player welfare rather than for commercial gain, and any resulting outreach to a player is handled sensitively and confidentially. Players concerned about their gambling behaviour are encouraged to make use of the account controls available and to reach out to customer support for guidance on the protective tools on offer.
International Data Transfers
Where personal data is transferred to service providers or infrastructure located outside of the user’s home country, SpinBoss takes steps intended to ensure that an appropriate level of protection is maintained, consistent with applicable data protection law. This may involve reliance on standard contractual clauses, adequacy decisions, or other recognised transfer mechanisms, depending on the destination and the nature of the transfer. Any such transfer is limited to what is necessary to deliver the service, such as processing a payment or hosting account data securely, and is not used as a basis to apply a lower standard of protection than that described in this policy.
Changes to This Policy
SpinBoss may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, or the way the platform operates. Where a change is considered material, reasonable efforts will be made to bring it to the attention of registered account holders, such as through an account notification or a notice on the site. Continued use of the platform after any such update constitutes acknowledgement of the revised policy, though users are always encouraged to review this page periodically to stay informed of how their data is handled.
Contacting SpinBoss About Privacy
Questions, concerns, or requests relating to this Privacy Policy or the handling of personal data can be directed to customer support, which is available through live chat and email as part of the general support channels offered by the platform. When submitting a request relating to personal data, users may be asked to verify their identity before the request is processed, in order to protect against unauthorised access to account information. Where a concern cannot be resolved directly with customer support, users retain the right to raise the matter with the relevant supervisory authority responsible for data protection in their jurisdiction. Further general information about the platform, including its games and services, is available on the SpinBoss homepage, and details of promotional mechanics referenced in this policy are described as rules within the site’s bonus terms rather than as standalone offers.