Data Protection
This policy sets out the personal data SpinEmpire processes, the purposes behind it, and the rights every player holds under the General Data Protection Regulation. It applies to all use of the platform by players in Ireland.
The platform collects what its functions require, nothing broader. At registration: email, password, name, date of birth. At verification: identity documents and supporting proofs. During play: transaction history, gameplay records, and technical data such as IP address, device and browser type. Marketing preferences, where you set them, are stored as part of your account settings.
Every use of data pairs with a legal basis:
Processing outside these purposes does not happen.
Cookies keep sessions alive, store preferences and help the operator understand site usage. Essential cookies cannot be disabled without breaking login and play. Everything else is optional and controllable through your browser. Refusing optional cookies has no effect on your ability to gamble on the platform.
Data leaves the platform only for defined functions. Payment providers receive what a transaction needs to clear. Verification partners process documents during KYC. Regulatory authorities receive data where the licence obliges disclosure. That is the complete list — personal data is not sold, and no recipient gets more than its function requires.
Data is kept while your account exists, then for the statutory periods that gambling, anti-money-laundering and accounting law impose. After those periods lapse, records are deleted or anonymised. The same schedule applies to verification documents.
Under GDPR you may: request a copy of your data (access); correct inaccuracies (rectification); request deletion where no legal retention duty applies (erasure); receive your data in machine-readable form (portability); and object to processing grounded in legitimate interest. Requests cost nothing and receive a response within the statutory deadline. Complaints can additionally be raised with a data protection supervisory authority.
Transport encryption via SSL covers every connection to the platform. Internally, access to player data is role-restricted, and verification documents sit under tighter controls than general account records. Security is a risk-reduction exercise rather than a guarantee, and these measures target the risks that actually occur: interception and unauthorised access.
Exercise any right above through live chat or by writing to [email protected] with "data protection request" in the subject. Identity confirmation may be required before data is released — a safeguard, not an obstacle.
