Privacy Policy

Introduction and Data Controller

Welcome to SpinStag Casino (spinstag.co). The protection of your personal data is of the utmost importance to us. This Privacy Policy informs you in detail about how we collect, process, and use your personal data when you visit our website spinstag.co or use our online gambling services.

The data controller responsible for data processing within the meaning of applicable data protection laws is:

We strictly adhere to applicable data protection regulations as well as specific regulatory requirements for the Canadian online gaming market and provincial gaming standards.

Principles of Data Processing

We process personal data in accordance with legal requirements. Personal data means any information relating to an identified or identifiable natural person. The principles we observe include:

  • Lawfulness, Fairness, and Transparency: Processing is carried out on a transparent and understandable legal basis.
  • Purpose Limitation: Data is collected exclusively for specified, explicit, and legitimate purposes.
  • Data Minimization: Only data that is strictly necessary for the respective purpose is collected.
  • Storage Limitation: Data is stored only as long as necessary for the fulfillment of purposes or required by statutory retention periods.

Collection and Processing of Personal Data

3.1 Visiting the Website (Server Log Files)

When you visit our website spinstag.co, our system automatically collects information that your browser transmits to us. These server log files include:

  • IP address of the accessing device (whereby anonymized forms may be used).
  • Date and time of access.
  • Name and URL of the retrieved file.
  • Website from which access is made (referrer URL).
  • Browser and operating system used.

The legal basis for this processing is our legitimate interest in ensuring system security, stability, and troubleshooting.

3.2 Registration and Account Opening

To use the casino games and services on spinstag.co, you must create a user account. During this process, we collect the following data:

  • First and last name.
  • Date of birth and age (to verify legal age in accordance with Canadian provincial gaming regulations).
  • Residential address and postcode.
  • Email address ([email protected] for support inquiries).
  • Telephone.
  • Login credentials (username and encrypted password).

The legal basis for this is the performance of a contract as well as legal obligations in connection with anti-money laundering requirements and gambling laws.

Identity Verification and Responsible Gambling (KYC & AML)

As a regulated online gambling provider, we are legally required (amongst other things, under anti-money laundering and gaming regulations) to verify the identity of our players.

  • KYC (Know Your Customer): We require identification documents (e.g, driver's license or passport), proof of address (e.g, recent utility bills), and, where applicable, proof of the origin of funds used (Source of Wealth / Source of Funds).
  • Responsible Gambling and Self-Exclusion: To protect against problem gambling and comply with Canadian responsible gaming standards, we process data within the framework of gambling addiction prevention. This includes cooperating with self-exclusion programs and support frameworks to protect vulnerable individuals.

The legal basis here is compliance with legal obligations and the public interest in player protection.

Payment Transactions and Payment Methods

For deposits and withdrawals on spinstag.co, we work with secure payment service providers. Depending on availability in Canada, players can use common payment methods such as credit cards (Mastercard, Visa), Interac, bank transfers, e-wallets (such as MuchBetter, ecoPayz), or prepaid vouchers (such as Paysafecard).

  • Data Transmission: When processing payments, we transmit the data required for the transaction (e.g, name, transaction amount, banking or credit card details) to the respective payment service provider.
  • Legal Basis: Processing is carried out for the performance of the casino contract and to fulfill statutory tax and commercial law requirements.

Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies on spinstag.co to ensure website functionality, optimize the user experience, and perform statistical evaluations.

  • Essential Cookies: These are strictly necessary for the smooth operation of the website, account management, and the execution of transactions.
  • Analytical and Marketing Cookies: With your consent (via our cookie banner), we use analytics tools to understand how players use our platform. You can withdraw your consent at any time with effect for the future.

The legal basis for essential cookies is technical necessity and legitimate interest; for non-essential cookies, it is your consent.

Disclosure of Data to Third Parties

We generally only transfer your personal data to third parties if:

  • You have given your explicit consent.
  • The transfer is necessary for the establishment, exercise, or defense of legal claims, and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data.
  • There is a legal obligation, in particular to authorities, regulatory bodies, or law enforcement agencies.
  • This is legally permissible and necessary for the processing of contractual relationships (e.g, payment service providers, IT service providers, identity verification providers acting as data processors).

Retention Period and Deletion of Data

We store your personal data only for as long as is necessary to fulfill the purposes for which it was collected.

  • Statutory Retention Periods: Due to tax and anti-money laundering regulations, we are required to retain certain player and transaction data for a period of up to 5 to 10 years after account closure.
  • After these periods expire, the corresponding data is routinely deleted unless continued processing is required for limited purposes (e.g, legal disputes).

Your Rights as a Data Subject

As a data subject, you have comprehensive rights under applicable privacy laws that you can assert against us at the following times:

  • Right of Access: You have the right to request confirmation as to whether we are processing personal data concerning you and to obtain information about this data.
  • Right to Rectification: You can request the correction of inaccurate data or the completion of your data stored with us.
  • Right to Erasure: You have the right to request the deletion of your personal data, provided no statutory retention obligations or our legitimate interests prevent it.
  • Right to Restriction of Processing: Under certain circumstances, you can request the restriction of the processing of your data.
  • Right to Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable format or to request transmission to another controller.
  • Right to Object: You can object to the processing of your data based on legitimate interests for reasons arising from your particular situation.
  • Withdrawal of Consent: You can revoke granted consent at any time with effect for the future.

To exercise your rights or if you have any questions about data protection, you can contact our support team at any time via email at [email protected].

Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates applicable privacy laws, you have the right to lodge a complaint with a competent provincial or federal privacy commissioner or regulatory supervisory authority in Canada.

Data Security

We employ state-of-the-art technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures, such as SSL/TLS encryption for data transmission, are continuously improved in line with technological developments.

Currency and Amendment of this Privacy Policy

This Privacy Policy is currently valid (as of 2026). Due to the further development of our website spinstag.co or due to changed legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The respective current version can be viewed and accessed on our website at any time.