Privacy Policy

Commitment to player privacy

At Spinfin Casino we treat privacy as a core product feature designed for crypto-savvy players. Our approach is analytical and fact-driven: we collect only the data necessary to operate a secure, fast and low-fee gaming platform while meeting legal requirements tied to our Costa Rica Gambling license. This policy explains the categories of data we handle and how we protect them.

Principles that guide us

We operate on three practical principles: data minimization, transparency and security. Minimization means we ask for the least possible data to enable services such as deposits, withdrawals and account verification. Transparency means clear notices and options to control marketing preferences. Security means implementing robust measures to protect account and transaction data.

What we collect and why

We collect registration details, identity documents for verification, transaction records and gameplay telemetry. For players using fiat methods we receive payment confirmations through processors; for crypto players we record public wallet addresses and transaction IDs that are necessary for settlement and audit. We also collect device and session data for fraud detection and troubleshooting.

Cookie and tracking practices

Cookies enhance site performance and personalize your experience. We use them for session management, authentication and analytics. You control cookie preferences through your browser and account settings; we rely on consent where legally required for targeted profiling.

How we use data

Data powers essential functions: account management, payments, dispute resolution, regulatory compliance and tournaments. We use behavioral data to run active tournaments and challenges, to allocate VIP Program benefits and to ensure fair play across our catalogue of 7,600 games. Promotional activity follows consent-based marketing where required.

Operational transparency

We apply strict purpose limitation: data used for security will not be repurposed for marketing without consent. Wagering requirements such as x35 are enforced using transaction and play history. When you request withdrawals, we reconcile records to prevent fraud and to comply with identity-check obligations.

Sharing and third parties

We engage specialized providers for payments, hosting, analytics and game services. Game studios including Pragmatic Play, Evolution Gaming and Play'n GO receive game-level telemetry needed to operate and settle sessions. Payment processors and blockchain services assist with rapid settlements and low-fee transfers. All vendors operate under contractual terms that limit use and require confidentiality.

Legal and compliance sharing

We share personal data with law enforcement or regulators only when legally obliged. We also share necessary data with auditors and legal advisors to meet licensing and fiscal duties. Shared datasets are minimized and pseudonymized when possible to protect player identities.

Crypto specifics - anonymity, speed and low fees

Crypto payments are core to our audience. Blockchain transactions are recorded on public ledgers, which are by nature pseudonymous and irreversible. We store public wallet addresses and transaction IDs to confirm settlement and to reconcile fees. Crypto lets us deliver faster withdrawal times and lower fees compared with traditional rails, supporting our goal to be efficient for players who prioritize speed and privacy.

Practical advice for crypto users

Maintain control of your private keys and use hardware wallets where appropriate. Spinfin never requests private keys. For faster processing, use supported stablecoins when available; our systems reconcile on-chain events to process deposits and withdrawals within industry-typical crypto latency.

Your rights and how to exercise them

We support data subject rights in applicable jurisdictions: access, correction, erasure, restriction, objection and portability. To exercise rights contact our 24/7 multilingual customer support. We verify identity before responding to requests to protect your account and other players from unauthorized actions.

How we handle requests

Requests are logged and tracked for accountability. We aim to respond promptly and to provide clear explanations. If you are not satisfied with our response you may raise the issue with a supervisory authority in your jurisdiction where applicable.

Security measures and data handling

Security is engineered into our operations. We deploy encryption for data in transit and at rest, role-based access controls, monitoring and routine audits. Internal access is limited to personnel who need it to perform their duties, such as payment reconciliation, compliance reviews and customer service.

Incident response

We maintain documented procedures to detect, contain and investigate incidents. In the unlikely event of a breach affecting personal data we will follow applicable notification rules and communicate with affected players and authorities as required by law.

Data retention and account closure

We retain records as necessary for business operations, dispute resolution and to meet legal obligations connected to licensing and financial compliance. When an account is closed we remove or anonymize personal data that is no longer required while maintaining minimal records needed for audit, fraud prevention and regulatory reporting.

Closing or limiting your account

You can request account closure through our support channels. Closure processes require verification to prevent fraud. Certain transaction traces may be retained for legitimate business and legal reasons but will be handled under strict access controls.

Contact and support

If you have questions about how we handle personal data, contact our 24/7 multilingual customer support team who can provide specific guidance. We are available to help with privacy requests, account inquiries, tournament disputes and VIP Program questions. For quick navigation back to our main site use the homepage link.

Return to homepage