Privacy Policy

This privacy policy outlines how Cosmic Spins Casino collects, uses, stores, and protects your personal information when you access our online gaming platform. We are committed to safeguarding your privacy and ensuring that your data is handled in accordance with applicable data protection regulations in the United Kingdom, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This document explains our practices regarding the information we gather during your interaction with our services and the measures we implement to maintain the confidentiality and security of your personal data.

When you register an account, play games, make transactions, or communicate with our customer support team, we collect various types of information necessary to provide you with a secure and personalised gaming experience. Understanding how we process your data, the legal basis for such processing, and your rights as a data subject is essential for maintaining transparency and trust between Cosmic Spins Casino and our players. We encourage you to read this casino privacy policy carefully to familiarise yourself with our data handling procedures.

Information We Collect

We collect several categories of personal information to operate our gaming platform effectively and comply with legal obligations. The data we gather falls into information you provide directly, information collected automatically, and information obtained from third-party sources.

When you create an account with Cosmic Spins Casino, you provide personal details including your full name, date of birth, residential address, email address, and telephone number. We also collect payment information such as credit card details, bank account numbers, or details of alternative payment methods you choose to use. For identity verification purposes, we may request copies of identification documents including passports, driving licences, or utility bills to confirm your identity and address.

Our systems automatically collect technical information when you access our website, including your IP address, browser type, device information, operating system, and geographic location. We gather data about your gaming activity, including games played, bets placed, winnings, losses, session duration, and interaction patterns with our platform. Cookies and similar tracking technologies allow us to collect information about your preferences and browsing behaviour to enhance your experience.

We may receive information from third-party payment processors, credit reference agencies, fraud prevention services, and regulatory bodies. These sources help us verify your identity, assess creditworthiness, detect fraudulent activity, and fulfil our legal obligations under anti-money laundering and responsible gambling regulations.

How We Use Your Information

The personal data we collect serves multiple purposes essential to operating Cosmic Spins Casino and providing you with gaming services. We process your information based on various legal grounds including contractual necessity, legal obligations, legitimate interests, and your consent where applicable.

We use your personal information to create and manage your player account, process deposits and withdrawals, verify your identity and age, and prevent underage gambling. Your data enables us to provide customer support, respond to enquiries, resolve disputes, and maintain communication regarding your account activity. We analyse gaming behaviour to detect problem gambling patterns and implement responsible gambling measures when necessary.

Compliance with regulatory requirements necessitates using your information to fulfil anti-money laundering obligations, report suspicious transactions, cooperate with law enforcement agencies, and maintain records as required by gambling licences. We process data to prevent fraud, protect against unauthorised access, detect security breaches, and safeguard the integrity of our gaming platform.

We may use your information for marketing purposes where you have provided consent, including sending promotional offers, bonuses, newsletters, and information about new games. You retain the right to opt out of marketing communications at any time through your account settings or by following unsubscribe links in our emails.

Data Sharing and Disclosure

Cosmic Spins Casino shares your personal information with selected third parties only when necessary to provide our services, comply with legal obligations, or protect our legitimate interests. We maintain strict data sharing agreements with all parties who process your information on our behalf.

We share data with payment service providers and financial institutions to process transactions, verify payment methods, and prevent fraudulent activity. Gaming software providers and platform technology partners receive limited information necessary to deliver games and maintain technical infrastructure. Customer service platforms and communication tools process data to enable support interactions.

Regulatory authorities and licensing bodies receive information as required by gambling regulations and licence conditions. We disclose data to law enforcement agencies when legally obligated or when necessary to investigate suspected criminal activity, fraud, or breaches of our terms and conditions. Credit reference agencies and fraud prevention services receive information to verify identity and assess risk.

In the event of a business reorganisation, merger, acquisition, or asset sale, your personal information may be transferred to the relevant third party subject to confidentiality obligations. We require all third parties to respect the security of your data and treat it in accordance with applicable data protection laws.

Data Retention and Security

We retain your personal information for as long as necessary to fulfil the purposes outlined in this casino privacy policy and to comply with legal, regulatory, accounting, and reporting requirements. The retention periods vary depending on the type of information and the purpose for which it was collected.

Account information and transaction records are retained for a minimum of five years following account closure to comply with anti-money laundering regulations and financial reporting obligations. Gaming activity data is stored for the duration required by our gambling licence and regulatory framework. Identity verification documents are kept for the period mandated by know-your-customer requirements.

We implement comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest using industry-standard protocols, secure socket layer (SSL) technology for all transactions, firewalls and intrusion detection systems, regular security assessments and penetration testing, and access controls limiting data access to authorised personnel only.

Our staff members receive training on data protection principles and confidentiality obligations. We maintain incident response procedures to address potential data breaches promptly and notify affected individuals and regulatory authorities as required by law. Despite our security measures, no system is completely secure, and we cannot guarantee absolute security of information transmitted over the internet.

Your Privacy Rights

Under UK data protection legislation, you possess several rights regarding your personal information. You may exercise these rights by contacting our data protection officer through the channels specified on our website.

You have the right to access your personal data and receive a copy of the information we hold about you. This includes details about how we use your data, who we share it with, and how long we retain it. You may request corrections to inaccurate or incomplete personal information held in our systems.

In certain circumstances, you have the right to request deletion of your personal data, though this right is subject to our legal obligations to retain information for regulatory and compliance purposes. You may object to processing based on legitimate interests and request restriction of processing in specific situations. Where processing is based on consent, you retain the right to withdraw that consent at any time.

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller. If you believe we have processed your information unlawfully, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.

To exercise any of these rights, please submit a written request providing sufficient information to identify you and specify the right you wish to exercise. We will respond to your request within one month, though this period may be extended by two additional months for complex requests. We may require additional information to verify your identity before processing requests concerning your personal data.