Your Privacy at Spellwin Casino

This Privacy Policy explains what personal data we collect when you play at Spellwin Casino, why we collect it, how long we keep it and the rights you hold over it. It applies to every visit to spellwin-aud.com and to every account you open with us.

Data We Collect From You

We collect only the data we need to run your account, meet our licence obligations under Curaçao licence OGL/2024/112/0974 and keep the platform safe. Collection happens when you register, deposit, play, contact support or respond to our promotions.

• Identity data: full name, date of birth, email address, phone number, residential address.
• Verification documents: passport or driver's licence, proof of address, proof of payment method, required before your first withdrawal.
• Transaction data: deposits and withdrawals (from AUD 30 minimum), payment method details, cryptocurrency wallet addresses.
• Technical data: IP address, device and browser type, operating system, language preference.
• Gameplay data: bets placed, games opened, wins and losses, session times, bonus usage.
• Marketing preferences: which promotions you opt into, communication channels you accept, consent records.

How We Use Your Data

We use each category of data for a defined purpose and nothing else. Your verification documents are processed within 24 to 72 hours and then stored securely for regulatory purposes.

Gameplay behaviour feeds our responsible-gambling monitoring, so we can spot harmful patterns early and offer deposit limits, loss limits or self-exclusion before problems escalate.

• Creating and administering your player account.
• KYC and AML checks, including identity, address and payment method verification.
• Processing deposits and withdrawals, which take 0 to 24 hours.
• Fraud prevention, bonus abuse detection and multi-account checks.
• Responsible-gambling monitoring and session reminders.
• Marketing and bonus offers, only where you have consented.
• Meeting tax, audit and regulatory reporting obligations.

Our Legal Bases for Processing

Contract. We process identity and transaction data to set up and run your account, pay your winnings and honour the 350% welcome bonus terms up to AUD 5,000. Without this data we cannot provide the service you signed up for.

Legal obligation. Our Curaçao licence requires us to verify your identity, keep transaction records for at least five years and report suspicious activity. These duties cannot be waived, even at your request.

Legitimate interest. We rely on legitimate interest for fraud prevention, security monitoring, aggregate analytics and improving game performance. This interest never overrides your rights, and you may object to processing on this basis.

Consent. Marketing emails, SMS and promotional push messages run only on your consent. You can withdraw it at any time by updating your communication preferences or clicking the unsubscribe link, without affecting your account.

How Long We Keep Records

Retention periods follow the strictest applicable rule. Gambling regulations require transaction and KYC records to be held for a minimum of five years after account closure, after which they are deleted or irreversibly anonymised.

Who We Share Data With

We never sell your personal data. Sharing is limited to service providers who need it to perform a specific function, each bound by contractual data-protection obligations.

• Payment processors handling Visa, Mastercard, Skrill, MiFinity, Jeton and crypto transactions.
• KYC and AML verification providers that check your documents and screen against sanctions lists.
• The Curaçao licensing authority and other regulators, auditors or law-enforcement bodies where legally required.
• Analytics and hosting providers operating under data-processing agreements.
• Game providers receive your gameplay session data only in pseudonymised form.

Your Rights Over Your Data

You control your personal data. Requests made through [email protected] or our 24/7 live chat are answered within 30 days, usually much faster.

If you are unhappy with how we handled a request, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or your local data-protection authority.

• Access: get a copy of the personal data we hold about you.
• Rectification: correct inaccurate or outdated details.
• Erasure: request deletion where no legal retention duty applies.
• Portability: receive your data in a machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: stop marketing communications at any time.
• Complain: escalate to the relevant data-protection authority.

Cookies and Tracking

We use strictly necessary cookies to keep you logged in and remember your session, plus optional analytics and marketing cookies that load only after you accept them in the cookie banner. You can change your cookie choices at any time in your account settings. Full details, including a list of each cookie and its lifespan, are set out on our dedicated Cookies Policy page.

How We Protect Your Information

All traffic between your device and our servers travels over TLS encryption. Verification documents and payment records sit in encrypted storage, and access is limited to staff who need it for their role, logged and reviewed regularly.

If a data breach occurs that is likely to result in serious harm, we notify affected players and the relevant regulator without undue delay, in line with the Notifiable Data Breaches scheme and GDPR requirements where they apply.

• TLS 1.2+ encryption on all connections.
• Role-based access controls with audit logging.
• Encrypted storage of KYC documents.
• Regular penetration testing and security reviews.
• Documented breach-response and notification procedures.

Contact Our Data Protection Team

Questions about this policy, a specific request or a complaint can go to our Data Protection Officer at [email protected] or to [email protected]. We answer every privacy query within 30 days. If you need immediate help with your gambling, call Gambling Help Online on 1800 858 858, available around the clock.

We may update this Privacy Policy to reflect changes in law or our services. Material changes are announced on this page before they take effect, and the revision date is always shown at the top.

Frequently asked questions

How do I request a copy of my data?

Email [email protected] or message our 24/7 live chat with the request. We verify your identity and send your data within 30 days.

Can I delete my KYC documents?

Not immediately. Gambling regulations require us to keep verification documents for at least 5 years after your account closes. After that we delete or anonymise them.

How do I stop marketing emails?

Open any email from us and click unsubscribe, or turn off promotions in your account settings. Withdrawal of consent does not affect your account or bonuses already active.

Do you share my data with game providers?

Only pseudonymised gameplay session data needed to run the games. Providers never receive your name, email or payment details.