Privacy Policy

1. Who Processes Your Data

HellSpin is operated by TechSolutions Group N.V., registered in Curaçao and licensed there to run online gaming. For the purposes of data protection law the operator is the data controller: it decides what is collected and why, and it carries the legal responsibility for it.

Processing player data is not optional for a licensed operator. Gambling regulation obliges us to identify our customers, to check their age, to monitor transactions for money laundering and to keep records for a set period. Much of what follows exists because the licence requires it, not because we chose to collect it.

This policy sits alongside the Terms and Conditions. Registering an account confirms that you accept both. We may revise this policy when the law or our systems change; where a change is significant we will make an effort to notify you, but the current version on this page always governs, so it is worth revisiting.

2. What We Collect

The data we hold falls into five groups.

• Registration details. Everything entered on the sign-up form and afterwards in your profile: first and last name, date of birth, email address, phone number, country, chosen currency and password.
• Verification documents. Copies of an identity document, proof of your current address, and a photo or screenshot of the payment method you use. In some cases we also request proof of source of funds, or a selfie holding your ID.
• Transaction records. Every deposit, withdrawal, bet and bonus on the account, whether made on the website or through the app, including method, amount and timestamp. Full card numbers are never stored on our side - they stay with the payment processor.
• Technical data. IP address and GeoIP location, browser and device type, session logs, activity logs and the pages you open.
• Correspondence and feedback. Live chat transcripts, emails, and any survey responses you choose to give.

Providing this data is a condition of using the service. If you decline to supply what verification requires, we cannot process a withdrawal, and the account may be restricted.

3. Why We Process It

The lawful bases are the contract between us for running your account and payments, our legal obligations for verification and record keeping, our legitimate interest in preventing fraud, and your consent for marketing.

4. Marketing and How to Stop It

Promotional messages about bonuses, tournaments and new games are sent only to players who have opted in. They may include offers from partners such as game studios. Every message carries an unsubscribe link that works with a single click, and you can also switch marketing off in your account settings or by writing to [email protected].

Two things are worth being clear about. Withdrawing marketing consent does not close your account or affect your balance - service messages about payments, verification and security still reach you, because those are part of operating the account rather than advertising. And if you accept a prize from a tournament or promotion, we may publish your username and general location in the winners list; no contact details are ever published.

5. Where the Data Comes From

Most of it comes directly from you - the registration form, your profile, the documents you upload and your messages to support. Some is generated automatically as you use the site, such as session logs and IP data. A smaller amount comes from third parties: payment providers confirming a transaction, identity verification services returning the result of a document check, and analytics or affiliate partners reporting how a visit reached us. We do not buy personal data from data brokers.

6. Who We Share It With

Your data is disclosed only in the situations listed below.

• Payment providers. What a specific transaction needs in order to complete.
• Identity verification services. Documents reviewed during KYC checks.
• Game providers. Where a wager or a jackpot needs to be validated against the studio’s own records.
• The licensing regulator and other competent authorities. Where inspection is a condition of the licence, or where the law compels disclosure - in which case we release the minimum required.
• Service providers acting on our behalf. Hosting, email delivery, analytics and marketing suppliers, each bound by contract to the same protection obligations we carry and permitted to process data only on our instructions.
• Anyone else you have specifically consented to.

We do not sell, rent or trade personal data to advertisers or brokers. If the business is ever restructured, merged or partly acquired, player data would likely form part of that transfer, and we would inform affected players by email beforehand.

Two related points. Pages on this site may carry social media features such as share buttons; where those collect data, the platform’s own privacy policy governs it, not ours. And where our content links to an external website, we are not responsible for how that site handles your data.

7. Security

All traffic between your browser and the site runs over SSL/TLS encryption, so data in transit cannot be read if intercepted. Verification documents and transaction records are held on access-controlled systems, available only to the staff whose role requires them. Payment card details are handled by PCI-DSS compliant processors and never stored on our servers.

An automated anti-fraud system monitors registrations, deposits, withdrawals and play patterns for signs of multi-accounting, stolen payment instruments and bonus abuse. It exists to protect honest players as much as the casino, and flagged activity is reviewed by a person before any action is taken.

Your account is reachable only with your own login and password. Keeping those confidential is your responsibility: sessions, deposits and losses made through a shared or compromised login remain attached to the account. Use a password you do not use anywhere else, and never let a browser on a shared device remember it.

No system is absolutely secure, and we do not claim otherwise. What we do commit to is taking all reasonable technical and organisational precautions, and acting promptly if something goes wrong.

8. How Long We Keep It

You or the casino may close your account at any time. Closure does not erase the record, because anti-money-laundering rules in licensed gaming jurisdictions require player data submitted at registration, along with the transaction history of the account, to be retained for a minimum of five years from the last transaction or from closure, whichever is later.

This is the one place where the law overrides a deletion request: an erasure request made before that period has elapsed cannot be granted. Retained data is not used for marketing or analysis - it is held solely so it can be produced if a competent authority asks about financial records, fraud, money laundering or another investigation. Once the retention period ends, the data is deleted or anonymised.

9. Your Rights

Write to [email protected] to exercise any of the following. We may ask you to confirm your identity first, so that a request cannot be used to extract someone else’s data.

• Access. A copy of the personal data we hold about you.
• Rectification. Correction of anything inaccurate or out of date. You may be asked for evidence supporting the change - and note that giving us false information about yourself is itself a breach of the terms, so keeping your details current is your obligation as well as your right.
• Erasure. Deletion of data we are no longer required to keep, subject to the retention period in section 8.
• Restriction and objection. Asking us to pause processing, or to stop processing based on legitimate interests.
• Portability. Receiving the data you gave us in a machine-readable format.
• Withdrawing consent. Ending marketing at any time, with no effect on the account itself.
• Complaint to a regulator. You may lodge a complaint with the supervisory authority for data protection where you live, where you work, or where you believe an infringement occurred - in addition to, not instead of, raising it with us.

10. Cookies and Tracking

Visiting the site automatically records technical information about the visit - browser, IP address and the referring page - collected partly through cookies. Cookies are small text files stored on your device. We use three kinds:

Automatically collected data is not used to identify you personally without further consent. Most browsers accept cookies by default and every browser lets you block or delete them; the site still opens with cookies refused, but logged-in play needs at least the session cookie to function.

11. Third-Party Game Providers

Games run on the providers’ own servers, which means that when you open a title, limited data passes to that studio so the round can be played and settled. Several providers publish their own privacy notices covering this - NetEnt is one example - and those notices apply in addition to this policy for the games concerned. Their handling of that data is governed by their terms, not ours.

12. Contact

For anything in this policy - a copy of your data, a correction, an objection, a question about cookies, or a complaint - write to [email protected], or open live chat, which is staffed 24 hours a day. Requests involving documents are better sent by email so they can be attached and recorded.