Privacy & Management of Personal Data

Purpose, scope and data controller

This Privacy Notice explains how Fuckspin collects, stores, uses and discloses personal data in connection with our online gambling services. The data controller responsible for your personal data depends on your location and will be identified in the terms and applicable notices you receive when you register. We update this Privacy Notice to reflect changes in our processing activities or legal obligations.

Categories of personal data we collect

• Identification and contact information: name, date of birth, postal address, email address, phone number, username and account number.
• Account and authentication data: login credentials, security questions and responses, geolocation data used for verification where required.
• Financial information: payment methods, transactional data including deposits and withdrawals, bank account details where relevant to processing payments.
• Identity verification data: copies of identity documents, address verification documents, and information obtained from identity verification checks.
• Gambling activity and service usage: bets placed, games played, time stamps, device identifiers, IP addresses, and log data related to your use of our services.
• Safer gambling and risk indicators: self-exclusion status, deposit limits, time-outs, and activity that informs responsible gambling measures.
• Marketing and communications preferences: consent status and preferences for receiving marketing or promotional materials.
• Support interactions: records of communications with customer support, including chat and call transcripts where applicable.
• Data from third parties: information from identity verification providers, affordability assessments, credit reference agencies where legally permissible, and other trusted partners for compliance and service delivery.

How we collect data

• Directly from you when you register, verify your identity, place bets, or contact support.
• Automatically through your use of our services, including device information, IP address, and usage analytics.
• From third parties for compliance and security, including identity verification, affordability checks, AML/KYC procedures and regulatory reporting.
• From cookies and similar tracking technologies used to optimize service delivery, analysis and marketing with your consent or as otherwise permitted by law.

How we use personal data

• To provide and operate the Fuckspin platform, including topping up funds, placing bets, playing games, and maintaining your account.
• To verify your identity and ensure compliance with Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements.
• To conduct financial risk assessments, including affordability checks and monitoring deposits and spend to prevent financial harm.
• To monitor for and prevent fraud, abuse, and other unlawful activity; to investigate suspected misconduct and enforce our terms and conditions.
• To deliver customer support and resolve account or product issues.
• To manage safer gambling measures, including self-exclusion, deposit limits, time-outs and product blocks, and to share relevant information within our group as needed for harm reduction.
• To personalise services and content, and to conduct product development, testing and analytics.
• For marketing purposes with your consent or where we have a legitimate interest, including communicating about promotions and new features; for advertising and measurement across our platforms.
• To comply with legal, regulatory, tax and reporting obligations in the jurisdictions in which we operate.
• To respond to and support requests from authorities or regulators as required by law.

Legal bases for processing

• Performance of a contract: processing necessary to provide and operate our services and related customer support.
• Legal obligations: compliance with AML/KYC rules, fraud prevention, age verification and regulatory reporting.
• Legitimate interests: protecting our platform, improving services, conducting risk assessment, and conducting analytics for service enhancements and safety.
• Consent: where required for marketing communications and certain tracking technologies.
• Special categories: health-related data processed in connection with responsible gambling, where you have provided explicit consent or where processing is otherwise permitted by law for safety and public health reasons.

Recipients of your data

• Internal groups within our organisation and with authorised group entities as necessary to operate the service, provide support and comply with legal obligations.
• Service providers acting on our behalf (for example payments, identity verification, data hosting, IT services, and fraud prevention).
• Regulators, competent authorities and law enforcement when required by law or regulation.
• Credit reference agencies and financial risk assessment partners in accordance with applicable law.
• Authorities responsible for gambling integrity and other public bodies as required by regulatory regimes.
• Data processors involved in marketing analytics and campaign management, where applicable and with appropriate safeguards.

Transferring your data abroad

We may transfer personal data to recipients located outside your country of residence or outside the European Economic Area to support service delivery. When data is transferred to jurisdictions without an adequacy decision, we implement appropriate safeguards, such as standard contractual clauses, to protect your data in line with applicable data protection laws. You may request information about the safeguards in place for international transfers.

Safeguarding your data

• Technical security: encryption in transit and at rest where appropriate, and robust access controls to information systems.
• Organisational security: defined data handling policies, minimum necessary access, staff training and incident response planning.
• Data protection by design: DPIAs where required, minimisation of data collection, and privacy considerations integrated into new projects and features.

Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Notice, to comply with legal obligations, or for the exercise or defense of legal claims. Where allowed, we may retain anonymised or aggregated data for statistical and research purposes after the identifiable personal data has been removed. Retention periods are determined by applicable laws, the type of data and the purposes for which it was collected.

Your rights

• Access: you may obtain confirmation of whether we process your data and request a copy of your personal data.
• Rectification: you may request correction of inaccurate or incomplete data.
• Erasure: you may request deletion of personal data where there is no legitimate basis for continued processing, subject to regulatory or contractual obligations.
• Restriction: you may request that processing be restricted in certain circumstances.
• Portability: you may request transfer of data to another controller where technically feasible.
• Objection: you may object to processing based on legitimate interests or for direct marketing, on grounds relating to your particular situation.
• Automated decisions: you may request explanation of, or contest, decisions made solely by automated processing where applicable.
• Withdraw consent: you may withdraw consent for processing based on consent, including marketing and cookies.

To exercise these rights, use the in-app privacy controls or contact our privacy team via the in-app help center or designated privacy request channel. We may request verification of identity before satisfying a request and will respond within the timelines required by law. In some circumstances, certain rights may be limited by legal or regulatory obligations.

Marketing and cookies

We may use cookies and similar technologies to personalise content and analyze site usage. You may manage cookie preferences within your device settings and our cookie controls. You may opt out of marketing communications at any time. Requests to stop marketing may take up to 28 days to take full effect, and opting out on one brand does not affect preferences on others within the same group.

• Cookies and similar technologies: used for site performance, analytics and advertising measurement with lawful bases including consent or legitimate interests, depending on the context.
• Marketing communications: you may opt in or out of receiving promotional material via in-app controls or support channels.

KYC, safety and health data considerations

We collect documents for identity verification, assess source of funds, and apply responsible gambling measures. Health-related data, when provided in relation to safer gambling, is processed only with your consent or as otherwise permitted by law for health and safety purposes.

Children’s privacy

Our services are not directed at individuals under the age of consent in their jurisdiction. We perform age verification, and if underage use is detected, we will take steps to suspend or terminate access and retain limited data solely as required by law.

Changes to this privacy notice

We may update this Privacy Notice from time to time. We will provide notice of material changes according to regulatory requirements and post the revised notice in the relevant areas of our platform. The effective date of changes will be reflected at the top of the notice.

How to contact us

If you have questions about this Privacy Notice or wish to exercise your data protection rights, access the in-app privacy portal or contact the Fuckspin privacy team through the in-app help center. We will provide a response in line with applicable data protection law and regulatory requirements.