Spinsy Casino Privacy Policy

Who Controls Your Data

Northlight Interactive N.V., registered at Zuikertuintjeweg Z/N, Zuikertuin Tower, Willemstad, Curacao, is the operator of Spinsy and the controller responsible for personal data collected through this site. Any request or question about how your data is handled should be directed to the contact channel listed at the end of this policy.

Why We Collect Your Information and How Consent Works

Data is collected under the Personal Information Protection and Electronic Documents Act (PIPEDA), which requires meaningful consent before personal information is collected, used or disclosed. Express consent is obtained before collecting sensitive information such as identity documents submitted for verification, while implied consent covers routine account administration such as processing a deposit you initiate. Some data, including transaction records connected to anti-money laundering obligations, is retained and reported regardless of consent because Spinsy is subject to legal reporting requirements tied to its gaming licence.

What Information We Collect

Registration collects your name, date of birth, email address and password. Cashier activity generates records of deposit and withdrawal amounts, the payment method used, and transaction timestamps. Identity verification (KYC) requires a government-issued photo ID and a proof-of-address document such as a utility bill or bank statement. Technical data, including IP address, device type and browser logs, is recorded automatically for security and fraud prevention. Cookies are used to keep you signed in between pages and to measure how the site is used.

Who We Share Data With

Payment details are shared with the processors handling the method you choose, including Interac, Instadebit, MuchBetter, and card networks for Visa and Mastercard transactions, solely to complete the transaction you request. Identity documents submitted for KYC review are shared with the verification service engaged for that purpose. Gameplay data such as bets placed and outcomes is shared with the relevant game studio, for example Pragmatic Play, Evolution Gaming, NetEnt, Play’n GO, Big Time Gaming, Red Tiger Gaming, Microgaming or Hacksaw Gaming, only to the extent needed to run the specific game session. None of this data is sold to third parties for their own marketing use.

Cookies, Marketing Consent, Complaints and How Long We Keep Data

Cookies fall into two categories: essential cookies that keep your session active and remember your login state, and analytics cookies that measure page usage to improve the site. Analytics cookies can be disabled through your browser settings without affecting your ability to play. Marketing emails, including promotional offers, are sent only with your consent under Canada’s Anti-Spam Legislation (CASL), and every marketing message includes an unsubscribe link that takes effect immediately. If you believe your data has been mishandled, you can complain to the Office of the Privacy Commissioner of Canada, and Quebec residents may also complain to the Commission d’acces a l’information du Quebec. Account and transaction records are retained for as long as required by anti-money laundering and licensing obligations, generally for a minimum of five years after account closure, after which data still on file is deleted or anonymized where no further legal retention duty applies.

Your Rights and Data Sent Outside Canada

You have the right to request access to the personal data held about you, to request correction of inaccurate information, and to withdraw consent for optional processing such as marketing at any time. Quebec residents additionally have the right, under the Act respecting the protection of personal information in the private sector (Law 25), to request de-indexation of certain personal information and to receive their data in a portable format where technically feasible. Where a payment processor, KYC verification provider or hosting service used by Spinsy is located outside Canada, your data may be transferred and processed there under contractual safeguards requiring a comparable standard of protection to that required under Canadian law.

Where to Send a Data Request

Requests to access, correct or delete personal data, or to withdraw consent for marketing communications, can be sent to [email protected]. Include your registered email address so the request can be matched to your account, and expect an acknowledgement within a reasonable timeframe consistent with PIPEDA requirements.