Privacy Policy

Privacy matters at SpinRise in Canada. This notice explains how we collect, use, share, and protect personal information when you use our services.

By accessing or using our website, you agree to the terms described here. This Privacy Policy works alongside our Terms and Conditions and Cookie Policy.

Who we are and licensing

We operate under Hollycorn N.V., registered in Curaçao with registration number 144359. We hold a Curaçao Gaming Control Board licence OGL/2023/176/0095 and act as the data controller.

Our Data Protection Officer can be reached at [email protected]. For general support, contact [email protected] or use live chat.

Who can use our services

SpinRise is intended for adults only. The minimum age is 18+ and may be 19+ depending on your jurisdiction in Canada.

We do not knowingly collect personal data from minors. If we become aware that an account belongs to a minor, we delete the information promptly and block the account.

Information we collect

We collect information to create and manage accounts, deliver gameplay, process transactions, and keep the platform secure.

• Identity and contact details: name, date of birth, address, email, phone, username, and identification details.
• Verification documents: ID, proof of address, and (where required) source of funds or source of wealth.
• Financial and transaction data: deposit and withdrawal methods, records, and related payment details.
• Gameplay and usage data: games played, session durations, bonuses, limits, hit rate, and account-level RTP.
• Technical and communication data: IP address, device and browser details, cookies, page actions, and chat or call records.

Some information may fall into special categories if you provide it, such as responsible gaming notes or details included in documents.

How we use personal data

• Open and manage accounts, deliver gaming services, and process payments where applicable.
• Meet KYC/AML obligations, run verification, and maintain audit trails for compliance.
• Prevent fraud, bonus abuse, and misuse, including risk checks that may involve human review.
• Operate, test, and improve site performance, communications, and customer support.
• Personalize content and promotions, and send marketing where you have opted in.

Calls may be recorded for service and security purposes. You can opt out of marketing in account settings or by contacting support.

Legal bases we rely on

We process personal data based on contract performance, legal obligations, legitimate interests, and consent.

• Contract: provide requested services and manage your account.
• Legal obligation: AML, responsible gaming, record-keeping, and payment requirements.
• Legitimate interest: platform security, fraud control, analytics, and service improvement.
• Consent: certain cookies, personalization, and marketing communications.

Sharing and international transfers

We share information only where necessary to provide services or meet legal requirements.

• Group companies and vetted staff under confidentiality and on a need-to-know basis.
• Service providers such as payment processors, game studios, and vendors supporting IT and customer support.
• KYC/AML providers for age and identity checks, risk screening, and verification.
• Marketing vendors, but only where you have agreed to marketing communications.
• Regulators, law enforcement, and corporate transactions where required, including during mergers or acquisitions.

Your information may be transferred or stored outside Canada, including outside the EU/EEA for certain tools and partners. We use safeguards such as Standard Contractual Clauses and similar measures.

Retention, security, and your rights

We keep personal data only as long as needed for operational purposes and legal requirements, and then delete or anonymize it. For AML requirements, certain core records are retained for at least 5 years after your last transaction or account closure.

We use industry-standard security measures, including encryption, secure infrastructure, and role-based access controls. Please protect your login details and consider enabling 2FA where available.

You can request access, correction, deletion (where permitted), restriction, objection, and portability. You can also withdraw consent for future processing. We may request ID to verify your request.

We typically respond within one month. If you have not received a reply within 10 days, you can follow up using another contact option.

Quick overview

Updates and contact

We may update this Privacy Policy to reflect legal changes or service improvements. Updated versions will be posted with a revised effective date.

If you have questions about privacy, reach our DPO at [email protected]. You can also contact support at [email protected] or via live chat when it suits you.