Privacy Policy

Privacy matters, and so does being clear about how information is handled. In Canada, this Privacy Policy explains how SpinRise collects, uses, shares, and protects information when you use our services.

By accessing or using our website, you agree to this Privacy Policy. This policy should be read alongside our Terms and Conditions and our Cookie Policy.

Who we are

SpinRise is run by Hollycorn N.V. in Curaçao (Reg. 144359, license OGL/2023/176/0095). We act as the data controller for the personal data handled under this Privacy Policy.

Who may use our services

Our services are for adults only. In some contexts this is 18+, and in others 19+ or the legal age in your jurisdiction. We do not knowingly collect personal data from minors, and underage accounts are blocked.

What we collect

We collect information you provide, as well as data generated when you use our platform. This helps us verify identity, process transactions, and support safer play.

• Identity and contact details (name, date of birth, address, email, phone).
• KYC documents (ID, proof of address, and where required, source of funds or wealth).
• Financial and transaction records (deposits, withdrawals, wagering, payment details).
• Gameplay and usage data (sessions, bonuses, limits, durations, hit rate, account-level RTP).
• Technical data (IP address, device, browser, time zone, cookies, page actions).
• Communications and preferences (chat, email, call records; calls may be recorded).
• Risk and responsibility data (AML checks, responsible gaming scores or self-tests).

Some information may fall into special categories when it is provided or required (for example, RG-related health hints or racial and ethnic data contained in documents).

How we use information

We use personal data to operate the service, secure accounts, and meet regulatory requirements. Some processing is necessary to provide the services you request.

• Open and manage your account, process payments, and provide games.
• Complete KYC and AML checks, assign risk flags, and maintain audit trails.
• Detect and prevent fraud, bonus abuse, and responsible gaming risks (including human review where appropriate).
• Operate, test, and improve platform functionality and communications.
• Personalize content and promotions, and send marketing where you have opted in.

Legal bases for processing

We process personal data based on contract performance, legal obligations, legitimate interests, and consent. Consent applies to certain cookies, personalization, and marketing preferences.

When we share data

We share personal information only in specific circumstances. Access is limited to vetted staff and partners, under confidentiality obligations and need-to-know controls.

• Service providers (for example, payment processors, IT services, communications platforms).
• Game studios and other providers needed to deliver gameplay.
• KYC and AML vendors supporting identity and risk checks.
• Regulators or law enforcement where required by law.
• Corporate changes, where information may transfer with the business (with notice in advance where appropriate).

International transfers

Your information may be transferred or stored outside of Canada, including where partners and tools operate outside the EEA. Where applicable, we use safeguards such as EU Standard Contractual Clauses.

How long we keep data

We retain personal data only for as long as needed for operations, compliance, dispute handling, and policy enforcement. Where AML requirements apply, certain core records are kept for at least 5 years after the last transaction or account closure.

When information is no longer needed, we securely delete or anonymize it. We may keep anonymized statistics for insights and service improvement.

Your rights and choices

You can request access, correction, deletion (where legally permitted), restriction, objection, and portability. You can also withdraw consent for future processing where consent applies.

To protect your account, we may request identity verification. We aim to respond within one month, and may take longer for complex requests with notice.

Security and account safety

We use industry-standard security measures, including encryption, secure infrastructure, access controls, and ongoing monitoring. No system can guarantee complete security, so please protect your devices and keep credentials private.

Your account is protected by a password and optional 2FA. We recommend enabling 2FA where it suits you.

Policy updates

We may update this Privacy Policy to reflect legal or service changes. Continued use means you accept the current version posted.

Quick reference

Contact

For privacy requests or questions, contact us using the addresses below. If a message bounces or goes unanswered, please try the other channel and follow up.

• Support: [email protected]
• Data Protection Officer: [email protected]