Privacy Policy – Spin Casino

Version: 1.0  |  Last updated: November 13, 2026

This Privacy Policy (the "Policy") transparently describes how Spin Casino, available at spinjeux.ca, collects, uses, stores and protects the personal data of users who access our online gaming services. It is written in accordance with the data protection principles applicable in Canada, notably the Personal Information Protection and Electronic Documents Act (PIPEDA) and the applicable provincial legislation in Quebec, notably Law 25 (An Act to modernize legislative provisions as regards the protection of personal information).

By registering on our platform or using our services, you acknowledge that you have read this Policy and consent to the processing of your personal data as described below. This Policy should be read together with our Terms and Conditions and our Responsible Gaming page, which together form the contractual framework governing your relationship with Spin Casino.

2. Data We Collect

2.1. Identification and account data

When you create your account and throughout your use of our services, we collect the following categories of data:

• Identity: full name, date of birth, gender (optional), nationality.
• Contact details: postal address, email address, phone number.
• Login credentials: username and hashed password.
• Identity documents: a copy of an official ID, proof of address, and any other document required as part of identity verification (KYC) procedures.

2.2. Financial and transaction data

To process your deposits and withdrawals, we collect information related to your transactions. The payment methods accepted on our platform include:

• Interac e-Transfer
• Visa et Mastercard
• PayPal
• Skrill
• Neteller
• Paysafecard
• Apple Pay
• Google Pay
• MuchBetter
• iDebit
• Bitcoin and other accepted cryptocurrencies

For each of these methods, we record the transaction amount, the currency used (primarily the Canadian dollar, CAD), the date and time, and the reference ID provided by the payment provider. We never store your full banking details or card numbers in clear text on our servers.

2.3. Browsing and behavioural data

When you interact with our site, we automatically collect:

• IP address and approximate geographic location.
• Browser type and version, operating system, screen resolution.
• Pages visited, session duration, actions taken (clicks, bets, wagers).
• Server log data.

2.4. Communication data

We keep records of exchanges made through our support service (emails, live chats, contact forms), as well as responses to satisfaction surveys and reports submitted by players.

2.5. Responsible gaming data

In line with our commitments described on our Responsible Gaming page, we record self-exclusion settings, deposit and session limits set by the user, as well as any history of problem gambling incidents reported or detected.

3. How We Use Your Data

3.1. Providing and managing the services

Your personal data is used first and foremost to give you access to our services, create and manage your account, process your financial transactions and provide appropriate customer support. Without this processing, we would not be able to offer you a functional and secure gaming experience.

3.2. Regulatory compliance and fraud prevention

We use your data for identity verification (KYC), anti-money laundering (AML), detection of fraudulent activity and prevention of misuse of the platform. This processing is mandatory and you cannot object to it, as it is required by legal obligations.

3.3. Responsible gaming and protection of vulnerable players

We analyze gaming behaviour to identify any signs of excessive or problematic play and to offer you appropriate protection tools. These analyses are carried out in your interest and in that of the player community. See our Responsible Gaming page to learn more about the resources available in Canada, including:

• Gambling: Help and Referral (Loto-Québec): 1-800-461-0140
• AideJeu: aidejeu.ca
• Responsible Gambling Council (RGC): responsiblegambling.org
• Gamblers Anonymous: gamblersanonymous.org
• ConnexOntario: 1-866-531-2600

3.4. Personalization and marketing communications

With your consent, we use your data to send you promotional offers, notifications about tournaments or bonuses, and to personalize your experience on the platform. You can withdraw your consent at any time by changing your preferences in your account settings or by contacting our team.

3.5. Improving the platform

Browsing and behavioural data is used in aggregate form to analyze the technical performance of our site, fix errors and improve the usability and quality of the games we offer.

4. Legal Bases for Processing

In accordance with the requirements of PIPEDA and Quebec's Law 25, each processing of personal data relies on a valid legal basis. The table below summarizes the main legal bases applied:

Where processing is based on your consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal. Withdrawing consent to marketing communications does not result in the closure of your account.

5. Data Sharing and Third Parties

5.1. Categories of recipients

Spin Casino never sells your personal data to third parties for commercial purposes. However, your information may be shared with the following categories of recipients, within the strict limits necessary for the purpose concerned:

• Payment providers: the operators of the payment methods listed in section 2.2 receive the information needed to carry out your transactions.
• Game providers: the publishers of the gaming software integrated into our platform may receive an anonymized identifier for the purpose of verifying game results.
• Technical service providers: hosting, IT security, customer support, data analysis — these subcontractors act solely on our instructions and are bound by contractual confidentiality clauses.
• Identity verification bodies: agencies specializing in KYC and anti-money laundering.
• Competent authorities: in the event of a legal obligation, a court order or a request from a regulatory authority or law enforcement.

5.2. Contractual safeguards

Any subcontractor or partner with whom we share your data is required to maintain levels of protection equivalent to those we apply. Data processing agreements are systematically concluded with all of our subcontractors.

6. Cookies and Tracking Technologies

6.1. Types of cookies used

Our site uses several categories of cookies and similar tracking technologies (pixels, web beacons, local storage):

• Strictly necessary cookies: essential for the proper functioning of the site (session management, security, authentication). They cannot be disabled.
• Functional cookies: remember your preferences (language, game settings) to improve your experience.
• Analytics cookies: collect aggregated browsing data to improve site performance. We use analytics tools that comply with Canadian law.
• Advertising and targeting cookies: used only with your prior consent, they allow us to show you personalized offers and measure the effectiveness of our campaigns.

6.2. Managing your preferences

On your first visit, a consent banner lets you choose which categories of cookies you accept, with the exception of strictly necessary cookies. You can change your preferences at any time through the cookie management centre accessible at the bottom of every page. You can also configure your browser to refuse or delete cookies, but some site features may then be limited.

7. Data Security

7.1. Technical and organizational measures

Spin Casino implements appropriate technical and organizational security measures to protect your data against unauthorized access, loss, disclosure or accidental destruction. These measures include:

• Encryption of data in transit using the TLS (Transport Layer Security) protocol.
• Encryption of sensitive data at rest (hashed passwords, KYC documents).
• Strict access controls based on the principle of least privilege for internal staff.
• Continuous system monitoring and intrusion detection.
• Regular security assessments and penetration testing.
• Formal security incident response procedures.

7.2. Data breach notification

In the event of a data breach likely to harm your rights or freedoms, we undertake to notify the competent authorities and, where required, the individuals concerned, within the time limits set by applicable regulations. Any notification will be sent to the email address associated with your account.

8. Data Retention

We keep your personal data for as long as necessary to fulfil the purposes for which it was collected, or to meet our legal and regulatory obligations. Indicative retention periods are as follows:

At the end of the applicable retention period, your data is securely deleted or irreversibly anonymized.

9. Your Rights

As a Canadian resident, and more particularly as a Quebec resident, you benefit from a set of rights regarding your personal data, guaranteed by PIPEDA and Law 25. Spin Casino undertakes to respond to any request to exercise your rights within 30 calendar days of receiving it, unless particular complexity justifies an extension, of which you will be informed.

9.1. Right of access

You have the right to obtain confirmation that we are processing your personal data and, where applicable, to obtain a copy of it. Your request must specify the categories of data you want. We may ask you to confirm your identity before processing your request.

9.2. Right to rectification

If data concerning you is inaccurate, incomplete or outdated, you have the right to request that it be corrected. Certain changes (for example, a change of name) may require supporting documents.

9.3. Right to erasure

You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw your consent and there is no other legal basis. This right does not apply where retention is required by a legal obligation (for example, AML obligations or tax record-keeping requirements).

9.4. Right to restriction of processing

You may request that the processing of your data be restricted in certain circumstances, notably if you contest its accuracy, if you object to its processing, or if you need us to keep it for the establishment or exercise of legal claims, even if we no longer need it.

9.5. Right to data portability

For data you have provided to us and whose processing is based on your consent or the performance of a contract, you have the right to receive it in a structured, commonly used and machine-readable format (CSV or JSON), and to transmit it to another data controller.

9.6. Right to object

You may object at any time to the processing of your personal data based on our legitimate interest, particularly for direct marketing or profiling purposes. Your objection will be honoured unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

9.7. Right to withdraw consent

Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing. You can manage your consents directly in your account settings or by contacting us at the address given in section 13.

9.8. Right to lodge a complaint

If you believe that the processing of your personal data does not comply with applicable law, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, for Quebec residents, with the Commission d'accès à l'information du Québec (CAI) (cai.gouv.qc.ca). We nevertheless encourage you to contact us first so that we can handle your request directly and as quickly as possible.

10. International Data Transfers

Spin Casino may use service providers whose servers or teams are located outside Canada. In that case, your personal data may be transferred to countries whose data protection laws differ from those in force in Canada.

We ensure that any international data transfer is covered by appropriate safeguards, such as:

• Standard contractual clauses requiring the recipient to meet protection obligations equivalent to those under Canadian law.
• Verification that the destination country offers an adequate level of protection recognized by the competent Canadian authorities.
• Certification mechanisms or binding corporate rules where applicable.

On request sent to [email protected], we can provide you with information about the safeguards put in place for these specific transfers.

11. Minors

Spin Casino's services are strictly reserved for persons aged at least 18. We do not knowingly collect personal data concerning minors. If you believe that a minor has provided their personal data on our platform or has created a gaming account, please contact us immediately at [email protected]. Upon receiving such a report, we will carry out verification and, where applicable, delete the data concerned and close the account as soon as possible. Age verification mechanisms are built into our registration process to prevent access by minors. For more information on our commitment to protecting vulnerable players, see our Responsible Gaming page.

12. Changes to This Policy

Spin Casino reserves the right to modify this Policy at any time to reflect legislative or regulatory developments or changes in our data processing practices. Any material change will be notified to you by email at the address registered on your account and/or by a visible notice on our site, at least 15 days before the new provisions take effect. The date of the last update shown at the top of this document will always be updated. By continuing to use our services after the effective date of the changes, you accept the revised version of the Policy. If you do not accept the changes, you may close your account in accordance with the procedures described in our Terms and Conditions.

13. Contact Us

For any question about this Privacy Policy, the exercise of your rights or the processing of your personal data, you can contact us using the following details:

We undertake to acknowledge receipt of your request within 5 business days and to provide a complete response within 30 calendar days. If your request is particularly complex or if you submit several requests at the same time, this period may be extended by a further 30 days, and you will be informed in writing. To help us process your request, please clearly state your username, the subject of your request and any relevant identifying information. Spin Casino is committed to handling every request with rigour, impartiality and respect for the confidentiality of your information.