Your Privacy at Divaspin Casino

This Privacy Policy explains what personal information we collect when you play at Divaspin Casino, why we collect it, who we share it with, and the rights you have over it. We are operated by DivaSpin Entertainment N.V. under Curaçao licence OGL/2023/174/0090.

What Data We Collect

Categories of personal information

We collect only the information we need to run your account, process your payments and meet our legal obligations. That covers identity details, verification documents, transaction records, technical data and your gameplay behaviour.

• Identity data: full name, date of birth, email address, phone number and residential address.
• Verification documents: ID or passport, proof of address and payment method verification required before your first withdrawal.
• Transaction data: deposits and withdrawals, payment method details, and your betting and gaming history.
• Technical data: IP address, device and browser information, and approximate location derived from your IP.
• Gameplay behaviour: games you play, session times, wagering patterns and bonus usage, which we also use for responsible-gambling monitoring.
• Marketing preferences: whether you opted in to receive promotions, bonuses and tournament updates, and which channels you prefer.

How We Use Your Data

Purposes of processing

We use your data to open and maintain your account, verify your identity under our KYC obligations, process deposits and withdrawals in AUD or crypto, and detect fraud and bonus abuse. We also monitor play patterns to support responsible gambling, and we send you marketing messages only when you have consented.

• Creating and managing your Divaspin Casino account.
• Verifying your identity, age and payment method before withdrawals.
• Processing transactions through methods such as PayID, Visa, Skrill and Bitcoin.
• Preventing fraud, money laundering, chargebacks and multi-accounting.
• Monitoring play for responsible-gambling purposes, including deposit and loss limits you set.
• Sending promotional offers, such as our weekly 15% cashback, only with your consent.
• Meeting legal and regulatory obligations, including reporting to the relevant authorities.

Our Legal Bases

Why the law lets us process your data

Contract: we process your data to set up and run your player account and deliver the services you signed up for, including bonuses and withdrawals. Without this data we cannot operate your account.

Legal obligation: gaming and anti-money-laundering laws require us to verify your identity, keep transaction records and report suspicious activity. We cannot offer you a choice about this processing.

Legitimate interest: we process technical and gameplay data to secure our platform, prevent fraud, and improve our services, provided your interests and rights do not override ours.

Consent: we rely on your consent for marketing communications and for non-essential cookies. You can withdraw consent at any time without affecting the lawfulness of earlier processing.

How Long We Keep Records

Retention by category

We keep each category of data only as long as we need it. Transaction and KYC records must be retained for at least five years after your last transaction to satisfy regulatory requirements, after which we delete or anonymise them.

• Identity and KYC documents: retained for the regulatory minimum of five years after account closure.
• Transaction and wagering records: retained for five years, then deleted or anonymised.
• Account details: kept while your account is open, then for five years after closure.
• Marketing preferences: kept until you ask us to delete them or withdraw consent.
• Technical logs: kept for up to twelve months for security and fraud analysis.

Who We Share Data With

Categories of recipients

We never sell your personal data. We share it only with service providers and authorities who need it to deliver or regulate our services, and always under contractual confidentiality obligations.

• Payment processors handling your deposits and withdrawals, including card schemes, e-wallet providers and crypto gateways.
• KYC and AML verification providers that confirm your identity documents.
• Game and platform suppliers who receive your player ID and gameplay activity to deliver games and bonuses.
• Regulators and law enforcement, where we are legally required to disclose information.
• Analytics and IT support providers who help us maintain and improve the site under data-processing agreements.
• Professional advisers, such as auditors and lawyers, bound by confidentiality duties.

Your Rights Over Your Data

How to exercise them

You control your personal information. If you would like to access, correct or delete your data, contact us at [email protected] or our data protection officer at [email protected], and we will respond within 30 days. If you are unhappy with how we handled your request, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, or to your local data protection authority if you reside outside Australia.

• Access: get a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete details.
• Erasure: ask us to delete data we no longer have a legal reason to keep.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: stop marketing at any time via account settings or the unsubscribe link in every email.
• Complain: escalate to the OAIC or your local data protection authority.

Cookies and Tracking

We use strictly necessary cookies to keep you logged in and secure your sessions, plus analytics and optional marketing cookies that fire only with your consent. You can manage your cookie choices through the banner on first visit or in your browser settings at any time. Full details, including the specific cookies we set and their lifespans, are in our dedicated Cookies Policy.

How We Protect Your Data

Security and breach response

All traffic between your device and our platform is encrypted with TLS, and card and wallet details are tokenised so full payment credentials are never stored on our servers. Access to player data is restricted to trained staff on a need-to-know basis, with role-based permissions, multi-factor authentication and regular security audits in place.

• TLS encryption for all data in transit and encryption at rest for stored records.
• Role-based access controls and multi-factor authentication for staff systems.
• Continuous monitoring for suspicious account and transaction activity.
• Documented breach response: if a data breach is likely to cause you serious harm, we notify you and the relevant regulator without undue delay.

Frequently asked questions

How do I request a copy of my personal data?

Email [email protected] from your registered address and we will send your data within 30 days after verifying your identity.

Can I stop marketing messages from Divaspin Casino?

Yes. Withdraw consent in your account settings or click the unsubscribe link in any email. Marketing data is then deleted from our active lists.

Why do you need my ID before my first withdrawal?

Gaming regulations require us to verify your identity, age and payment method before releasing funds. These KYC records are retained for five years.

Do you share my data with anyone else?

Only with payment processors, verification providers, game suppliers and regulators who need it to deliver or oversee our services. We never sell your data.

How long do you keep my transaction history?

We retain transaction and wagering records for at least five years to meet regulatory obligations, then delete or anonymise them.