Privacy policy

1. Introduction, Data Controller, and Our Commitment to UK GDPR

At Instaspin Casino, we recognize that your privacy is not just a legal requirement but a fundamental right that underpins the trust you place in us. This Privacy Policy serves as a comprehensive guide to how we collect, store, and utilize your personal information from the moment you initiate a Sign up to every subsequent Login and gaming session. Our operations are strictly governed by the Data Protection Act 2018 and the UK GDPR, overseen by the Information Commissioner’s Office (ICO). As your Data Controller, we are legally responsible for ensuring that your data is processed transparently, securely, and only for the purposes explicitly stated in this document.

Our commitment to privacy goes beyond mere compliance. We implement a «Privacy by Design» approach, meaning that every new feature, from a new Bonus engine to the integration of fresh Games, is built with data protection as a core component. We understand that in the modern digital age, the security of your identity and financial details is paramount. Therefore, we utilize military-grade encryption and siloed data storage to ensure that your information remains shielded from unauthorized access. By using our platform, you are entering into a partnership where your safety is our primary KPI, and this policy outlines the rigorous standards we uphold to maintain that safety.

2. Detailed Data Collection: What We Capture and Why

To provide a world-class gaming experience, we must collect specific data points. This process begins with Identity Information, which includes your legal name, date of birth, and gender. We also require Contact Information, such as your physical UK address, email, and mobile number. These details are not merely for communication; they are essential for the rigorous «Know Your Customer» (KYC) checks mandated by the UK Gambling Commission. Without verifying these details, we cannot allow you to access our Slots or deposit funds, as we must ensure every player is of legal age and residing within a permitted jurisdiction.

Furthermore, we collect Technical Data during every session. This includes your IP address, device type, operating system, and browser version. We use this information for two main reasons: firstly, to optimize our site for your specific device, and secondly, as a security measure to detect and prevent «multi-accounting» or «botting.» We also track your Behavioral Data, such as your favorite Games, session duration, and deposit patterns. This data is fed into our «Safer Gambling» algorithms. If our system detects patterns that suggest a loss of control, we use your contact data to reach out with support tools, deposit limits, or self-exclusion options, fulfilling our duty of care under UK law.

3. Your Rights as a UK Resident and Data Retention Policies

As a citizen of the United Kingdom, you are empowered by some of the strongest data protection laws in the world. Under the UK GDPR, you have the Right of Access, allowing you to request a copy of all personal data we hold about you. You also have the Right to Rectification, enabling you to correct any inaccuracies in your account details. In certain circumstances, you may exercise the Right to Erasure (also known as the «Right to be Forgotten»), though please be aware that legal requirements regarding anti-money laundering often override this right for a specific period after you close your account.

Regarding retention, we do not keep your data longer than necessary. In accordance with the Money Laundering Regulations 2017, we are generally required to retain your financial and identity data for a period of five years following the termination of our business relationship (i.e., after your account is closed). After this period, your data is securely purged from our active servers. Any data kept beyond this for analytical purposes is strictly anonymized, ensuring that it can no longer be linked back to you as an individual.

4. Strategic Data Sharing and International Safeguards

Instaspin Casino does not, and will never, sell your personal information to third-party marketing companies. However, to provide a functional and legal service, we must share your data with specific, trusted partners. These include Payment Processors (to facilitate your withdrawals), Identity Verification Services (to confirm your age and address), and Game Providers (to ensure your progress in specific Games is saved). We also share data with independent auditors like eCOGRA to ensure our Slots remain fair and transparent.

If we are required to transfer your data outside of the United Kingdom—for example, to a specialized security server in Europe—we ensure that «Standard Contractual Clauses» (SCCs) are in place. This guarantees that your data receives the same high level of protection as it would within the UK. We also collaborate with national safety networks like GamStop. If you choose to self-exclude via their national portal, we receive a minimized data packet to ensure we can instantly block your Login and protect your well-being.

5. Cookies, Marketing, and Final Security Protocols

Our platform utilizes cookies to enhance your journey. These are small files that help us recognize your device and remember your preferences, such as your language or favorite Games. You have the right to decline non-essential cookies via our cookie banner, though some «Strictly Necessary» cookies must remain active for the site to function and for you to successfully perform a Login.

Regarding marketing, we operate on an «Opt-In» basis only. We will never send you promotional emails or SMS messages about a new Bonus unless you have explicitly given us permission to do so. You can revoke this permission at any time through your account settings or by clicking «unsubscribe» in any email. In the event of a data breach, our policy is to inform the ICO and affected users within 72 hours, ensuring full transparency in accordance with the Data Protection Act 2018.

6. Contacting the Data Protection Officer (DPO) and Exercising Your Rights

At Instaspin Casino, we understand that navigating data protection laws can be complex. To ensure total transparency and provide you with a direct line of communication, we have appointed a dedicated Data Protection Officer (DPO) and a specialized compliance team. This team is specifically trained in UK GDPR and the Data Protection Act 2018 to ensure that every inquiry regarding your personal information is handled with legal precision and professional care.

Whether you wish to request a formal Subject Access Request (SAR), withdraw your consent for a specific Bonus marketing channel, or inquire about the technical encryption of our Games, our officers are here to assist. We prioritize security at every touchpoint; therefore, when contacting us regarding sensitive data matters, we may require a brief identity verification process. This ensures that your private information is only ever discussed with you, the verified account holder, preventing unauthorized access and maintaining the integrity of our security protocols.

You can reach our official UK data protection and administrative department through the following authorized channels:

Official Phone Support: +44 20 7946 0958 (Available for UK residents; standard local rates apply).

Direct Email Correspondence: [email protected] (Our team aims to provide a comprehensive response to all privacy-related inquiries within 24 to 48 hours).

By maintaining these open lines of communication, we reinforce our commitment to being the most transparent and player-centric casino in the British market. From your initial Sign up to your latest Login, you can play our Slots with the absolute certainty that your privacy is managed by experts who value your security as much as you do.