Privacy Policy
SpinRise is owned and operated by Hollycorn N.V. (registration 144359) and licensed by the Curaçao Gaming Control Board under OGL/2023/176/0095. In Canada, we follow applicable Canadian laws and work to protect personal data through practical controls, clear choices, and limited sharing.
Navigation
By using our services, you accept this Privacy Policy. It applies alongside our Terms and Conditions and Cookie Policy. We may update it when our practices change or when legal requirements require an update.
Who can use SpinRise
Our services are intended for adults only. The minimum age is 18+, and some areas require a higher legal age (such as 19). We do not knowingly collect personal data from minors. If an underage account is identified, it may be blocked or removed.
What we collect and why
We collect information needed to run accounts, support gameplay, process transactions, and meet KYC/AML requirements. We also collect technical and usage information to help keep sessions secure, stable, and reliable.
| Category | Examples | Main purposes |
|---|---|---|
| Identity and contact |
|
Account setup, eligibility, and identity checks; may be requested to verify rights requests |
| KYC / AML documents |
|
Compliance duties, risk checks, audit trails; retained at least 5 years after last transaction or account closure |
| Payments and transactions |
|
Payment processing, fraud prevention, closed-loop payment controls, regulatory reporting when required |
| Gameplay and analytics |
|
Service delivery, troubleshooting, testing, and improvement; fraud and bonus-abuse monitoring |
| Technical data |
|
Security, abuse prevention, performance analysis, personalization and certain cookies with consent |
| Communications |
|
Customer support, service messaging, dispute handling, and training or quality review |
| Responsible gaming and risk |
|
Human-reviewed monitoring for fraud, bonus abuse, and responsible gaming risks |
| Special categories (when provided) |
|
Handled with extra care; used only where needed for compliance or the service |
Legal grounds we rely on
- Contract: to provide requested services, manage accounts, and deliver gameplay.
- Legal obligation: KYC/AML, gambling rules, record-keeping, and payments.
- Legitimate interests: security, fraud control, analytics, and service improvement.
- Consent: certain cookies, personalization, and email/SMS/direct mail marketing preferences.
How data is shared
We share personal data only when needed to provide the service or meet a legal duty. Access is limited to vetted staff and partners, supported by confidentiality obligations and role-based controls.
- Group companies and authorized employees under confidentiality terms.
- Payment processors, IT services, and customer support providers acting on our behalf.
- Game studios and gameplay delivery partners, where needed for game operation.
- KYC/AML tools, age and ID verification services, and professional advisors under agreements.
- Regulators or law enforcement when disclosure is required by law.
If a merger, acquisition, or business transfer occurs, personal data may transfer with the business. We will provide advance notice where appropriate.
International transfers and retention
Your data may be processed or stored outside of Canada, including locations with different data protection laws. We use safeguards such as Standard Contractual Clauses and similar measures, and we take reasonable steps to protect data wherever it is handled.
We keep personal data only as long as needed for service delivery, legal obligations, dispute resolution, and policy enforcement. Core AML records are retained for at least 5 years after the last transaction or account closure, and some data may be anonymized for insights.
Your rights and choices
You can request access, correction, deletion (where legally permitted), restriction or objection (in legitimate-interest cases), and data portability (when feasible). You can also withdraw consent for future marketing at any time, including through account settings or by contacting support.
We aim to respond to privacy requests within one month. If you do not receive a reply within 10 days, please contact us again through another channel, such as live chat.
Security and account hygiene
We use industry-standard measures such as encryption, secure server infrastructure, access control, authentication protocols, and ongoing monitoring. No system can guarantee complete security, so please keep passwords strong and devices protected. Optional 2FA may be available.
Contact our privacy team
For privacy questions, data rights requests, or DPO-related matters, contact us at [email protected]. If you prefer, you can also reach out through live chat.