Casper Spins Privacy Policy

Casper Spins is the data controller for users in the United Kingdom.

• Personal data collected
  • Identification and contact details: name, date of birth, address, email, phone, identity documents for KYC and age verification.
  • Account and service data: username, preferences, self-exclusion and safer gambling settings, communications, support queries.
  • Transaction data: deposits, withdrawals, payment instrument details processed by payment providers, billing records.
  • Technical data: IP address, device identifiers, browser type, operating system, log data, approximate location, cookies.
  • Behavioural data: gameplay, bet history, session information, responsible gambling indicators.
  • Verification and compliance data: results of sanctions/PEP checks, affordability assessments, fraud risk scores.
• Why data is collected
  • To set up and administer accounts, deliver services, and process transactions.
  • To verify identity, confirm age (18+), prevent fraud, and meet legal duties under gambling and AML laws.
  • To provide safer gambling tools, manage self-exclusion (including GAMSTOP integrations), and support user requests.
  • To comply with UK Gambling Commission rules, UK GDPR, the Data Protection Act 2018, PECR, tax, and accounting laws.
  • To maintain and improve websites and apps, conduct analytics, and protect security.
• Security measures
  • TLS encryption in transit and encryption at rest for sensitive information where applicable.
  • Role-based access controls, staff training, monitoring, and audit logging.
  • Segregated environments, firewalls, anti-malware, and vulnerability management.
  • Payment processing through PCI DSS compliant providers and Strong Customer Authentication where required.
• Data retention
  • Account and transaction records: retained for the life of the account and then for at least five years after closure to meet AML and regulatory obligations, and longer where required for tax, accounting, or dispute resolution.
  • Verification records: typically retained for five years after the end of the relationship under UK Money Laundering Regulations.
  • Support records and logs: retained for operational and security purposes in line with legal limitation periods.
• User rights (UK GDPR)
  • Access, rectification, erasure, restriction, objection, and portability, subject to legal limits.
  • Right to withdraw consent at any time, where consent is the basis for processing.
  • Right to complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113.

Compliance

• Casper Spins processes personal data in accordance with UK GDPR, the Data Protection Act 2018, PECR, and the UK Gambling Commission’s Licence Conditions and Codes of Practice, including AML and safer gambling requirements.

Contact

• To exercise rights or raise privacy questions, use the Contact Us details provided on the website or the in-account help centre. Additional verification may be required to protect user information.

Lawful and transparent processing

• Legal bases include performance of a contract, legal obligation (for example AML, tax, and regulatory duties), legitimate interests (fraud prevention, service security, improvement), and consent (for certain marketing or cookie uses).

Service operation

• Create and manage accounts, verify age and identity, enable deposits and withdrawals, and provide customer support.
• Operate casino and sportsbook services, personalise settings, and deliver safer gambling tools.

Compliance and risk management

• Conduct KYC, affordability, sanctions/PEP screening, fraud prevention, chargeback management, and dispute handling.
• Meet duties under UK Gambling Commission rules and Money Laundering Regulations.

Improvement and analytics

• Monitor performance, fix issues, run statistics, and analyse usage to enhance online services.

Marketing and preferences

• Send service notices and, where permitted, marketing communications using consent or soft opt-in under PECR.
• Users can manage preferences or opt out at any time via account settings or the unsubscribe link.

Automated decisions and profiling

• Certain checks (fraud, AML, responsible gambling) use automated decision-making and risk scoring.
• Users may request human review where legally required and can challenge a decision that produces legal or similarly significant effects.

Access and updates

• Users can request a copy of their personal data and ask for corrections if information is inaccurate or incomplete.
• Users can update profile details in the account area or by contacting support.

Deletion and restriction

• Users can request deletion or restriction of processing, subject to statutory retention and regulatory obligations.
• Where erasure is not possible due to legal duties, data will be minimised and retained securely.

Security checks and payments

• By using Casper Spins, users consent to the carrying out of security checks and the processing of payment information by authorised payment providers for deposits, withdrawals, verification, fraud prevention, and compliance.

How to make a request

• Submit a privacy request via the Contact Us page or in-account help centre. Proof of identity may be required. Responses will be provided within one month, or extended where permitted by law for complex requests.

• Services are intended for adults aged 18 or over. Accounts for persons under 18 are not permitted under UK law.
• Automated and manual age verification checks are used. The operator cannot confirm age without appropriate documents when required.
• If a minor’s information is identified, the account will be closed and personal data deleted or restricted, save where retention is required by law.
• Parents or guardians may contact the service to request deletion of a minor’s personal data, subject to verification.

• Personal data may be processed in the UK, the EEA, or other countries where service partners operate cloud hosting, payments, identity verification, support, or analytics.
• Using the site signifies consent to such transfers for the purposes described in this document.
• Where destinations are not covered by an adequacy decision, appropriate safeguards are used, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, along with technical and organisational measures.
• All partners are required to protect confidentiality, use information only for agreed purposes, and implement security controls aligned to UK GDPR standards.

• This disclaimer explains that specific legal or regulatory obligations may modify how these rules apply in practice, including retention periods, disclosure duties, or limits on erasure.
• The disclaimer applies when the user accepts this Privacy Policy, including by signature where applicable, by acceptance during registration, or by accession through continued use of the services.
• If a provision is unlawful or unenforceable in a given context, the remainder of the document continues to apply to the extent permitted by law.

Definition and scope

• Cookies are small text files placed on devices to store settings and identifiers. Similar technologies include pixels, SDKs, and local storage.

How cookies are used

• Statistics and analytics: measure visits, performance, and usage trends.
• Behaviour analysis: understand user interactions to improve navigation and content.
• Personalisation: remember preferences such as language and responsible gambling reminders.
• Service improvement and security: maintain sessions, detect anomalies, and prevent misuse.

Retention

• Non-essential cookies are retained for up to one year unless users delete them sooner or update preferences.

Control

• Users can manage consent in the cookie banner or settings, and control cookies in browser settings. Essential cookies necessary for the service will operate regardless of consent.

• Using Casper Spins constitutes full acceptance of this Privacy Policy and any updates posted on the website.
• The current published version prevails over earlier versions and applies from the stated effective date.
• Continued use of the services after changes indicates acceptance of the revised document.

Sharing circumstances

• Personal data may be shared to comply with law or regulatory requests, to establish or defend legal claims or resolve disputes, or to perform agreements and provide services.

Typical recipients

• Payment service providers and banks for processing and chargeback management.
• Identity verification, KYC/AML, sanctions and PEP screening providers, and credit reference agencies for affordability and risk checks.
• Fraud prevention services, cybersecurity vendors, and content moderation providers.
• Cloud hosting, data storage, communications platforms, analytics, and customer support tools.
• Marketing service providers for communications where permitted by law and user preferences.
• Regulators and authorities, including the UK Gambling Commission and law enforcement, where required.

Transparency

• An up-to-date list or categories of key processors and partners is available on the website or on request. If a new category of third party is introduced, users will be informed of the purpose and scope where required by law.
• Providing information for these services constitutes consent to the sharing necessary for those purposes, in addition to other lawful bases such as legal obligation or legitimate interests.

• The website may include links to external websites and services that operate their own privacy policies.
• Casper Spins is not responsible for how those websites collect or use information. Users should review the privacy notices of any external site visited.
• Caution is advised before submitting personal data on third-party websites.