Privacy and personal data
This notice explains how SpinCrypto collects, uses, stores, discloses and protects personal data when you use the website, the crypto services and the games.
How SpinCrypto handles your data
Version 1.0, effective from July 2026. Fifteen sections, roughly 8 minutes to read. Read this notice together with the terms and conditions, the cookie policy and the responsible gaming policy.
SpinCrypto operates exclusively with supported crypto-assets and blockchain networks. No traditional payment card details or bank account credentials are processed or stored. To provide the service, we process cryptocurrency wallet addresses, blockchain network information, transaction identifiers and related compliance information in line with this notice and applicable law.
1. Introduction and scope
The notice applies to the online gaming and related services provided by SpinCrypto. It explains what is collected when you access the website, register an account, use the crypto services, take part in games or otherwise interact with the casino, and it describes the choices and rights you have.
Privacy and confidentiality are treated as part of the service. Where a question is not covered here, contact the Data Protection Officer using the details in section 2.
2. Data controller and contact details
The entity responsible for your personal data, the licence behind the service and the teams you can contact are listed below.
| Role | Details |
|---|---|
| Data controller | GLOBONET B.V., incorporated in Curacao, registration number 146296, registered address Kaya Richard J. Beaujon Z/N, Curacao |
| Licence | Curacao Gaming Authority B2C licence OGL/2024/367/0690, granted on 17 April 2025 under the National Ordinance on Games of Chance |
| Operational support | NETGLOBE SERVICES LTD, company number HE 313864, 79 Spyrou Kyprianou Avenue, Protopapas Building, 2nd Floor, Office 201, 3076 Limassol, Cyprus |
| Data Protection Officer | [email protected] |
| Customer support | [email protected], live chat in the cashier and the Telegram channel |
3. Categories of personal data we process
Data is grouped by the purpose it serves. Not every category applies to every player: verification documents, for example, are requested only when a check is required.
| Category | Examples |
|---|---|
| Account and identity data | Nickname, email address, encrypted password, date of birth, gender, country of residence, city, phone number and identity documents such as a passport, national ID or utility bill |
| Crypto and financial data | Public wallet addresses (hosted or unhosted), network identifiers, deposit and withdrawal transaction hashes, wallet ownership signatures and source-of-funds documentation |
| Technical and blockchain data | IP address, device parameters, operating system, browser type and language, timezone, login and logout timestamps, and risk scores from blockchain analytics |
| Usage and gaming data | Wagering history, win and loss statistics, bonus usage, session duration and responsible gaming or AML classifications |
| Marketing and communication data | Communication preferences for email, SMS and Telegram, live chat logs, support tickets and tournament records |
4. Purposes and legal bases of processing
Personal data is processed in accordance with applicable data protection legislation, including the GDPR where it applies based on your location and the services provided. The legal bases are the performance of a contract, compliance with legal and regulatory obligations, legitimate interests, and consent where it is required.
Practically, that means the data is used to open and secure your account, to run the games and process transactions, to meet licensing and anti-money-laundering duties, to prevent fraud and bonus abuse, to run promotions you have opted into, and to answer your questions.
5. Crypto services and blockchain processing
As a crypto-only operator, blockchain-related information is processed to provide the service, including wallet addresses, network information, transaction identifiers, smart contract interactions, wallet risk classifications and analytics results.
- Transactions conducted on public blockchains are immutable and publicly accessible.
- Ownership or control of a wallet address may be verified through signed messages, test transactions or other cryptographic methods.
- Third-party blockchain analytics providers are used to assess addresses for links to sanctioned entities, darknet marketplaces, mixers and tumblers, ransomware and fraudulent activity.
6. Responsible gaming processing
Data is processed to promote responsible gambling and to meet regulatory requirements, including managing self-exclusion requests, applying limits, monitoring gambling behaviour, performing affordability assessments and providing responsible gaming support.
7. Automated decision-making
Automated systems help identify fraud, money laundering, bonus abuse, account compromise and breaches of the terms. The signals they use include:
- Wallet risk scores and blockchain analytics results.
- Deposit and wagering patterns, and device fingerprinting.
- Geolocation data and VPN or proxy usage.
- Previous account associations and sanctions screening.
Where an automated check flags an account, the outcome is a review or a protective measure rather than a final decision taken without human oversight.
8. Data sharing and third-party processors
Personal data may be shared with identity verification providers, AML and sanctions screening providers, blockchain analytics providers, fraud prevention providers, customer support providers, cloud hosting providers, CRM providers, marketing and analytics providers, gaming platform and aggregation providers, payment and VASP providers, corporate group entities, regulatory authorities and law enforcement agencies. Each provider receives only what its task requires.
9. International data transfers
Personal data may be transferred between Curacao, Cyprus, the European Economic Area and other jurisdictions where service providers operate. Appropriate safeguards are implemented where required by law.
10. Data retention
Active account data is retained for the duration of the customer relationship. Compliance, transaction, identity verification and gaming records may be kept for up to five years after account closure, or longer where the law requires it.
11. Security of personal data
Security measures include encryption in transit and at rest, role-based access controls, multi-factor authentication, security monitoring and logging, penetration testing, vulnerability assessments, incident response procedures, employee training and regular security reviews.
12. Your privacy rights
Depending on your country of residence and applicable law, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to port it to another provider, and to withdraw consent where processing is based on consent. Requests go to [email protected], and identity may need to be verified before a request is completed.
13. Cookies and tracking technologies
Cookies, pixels, web beacons and similar technologies are used to keep the website working, to strengthen security, to analyse performance, to personalise the experience and to deliver marketing communications. Browser settings can limit cookies, although some functions may then stop working.
14. Restricted jurisdictions
Geolocation and residency information is processed to determine whether you are accessing the services from a jurisdiction where online gaming is prohibited or restricted, and to block access where required. See the responsible gaming page for the eligibility rules that apply to players.
15. Changes to this notice
This notice may be amended from time to time. The latest version is always available on the website, and material changes are communicated through the account or by email.
Related documents: Responsible Gaming Policy and the operator's terms and conditions at spincrypto.com/policy.