Data Protection at SpinEmpire: The Privacy Policy for Ireland
This policy explains what personal data the platform collects from Irish players, why each category is held, how long it is retained, and the rights the General Data Protection Regulation (GDPR) grants you. Data handling is purpose-bound: information is collected for defined reasons and not repurposed beyond them.
What Data Is Collected and Why
Three broad categories are processed, each tied to a specific purpose:
- Identity data — name, date of birth, address and identification documents. Collected to satisfy age verification, KYC and the operator's licensing obligations.
- Transaction data — deposits, withdrawals and payment method details. Collected to process cashier activity and to meet anti-money-laundering requirements.
- Technical and usage data — device, browser, IP address and gameplay records. Collected to operate the service securely, prevent fraud and improve the platform.
The Legal Basis for Processing
Processing rests on defined GDPR lawful bases: contractual necessity (running your account), legal obligation (licensing, KYC, anti-money-laundering), and legitimate interest (fraud prevention and service security). Marketing communications rely on consent, which can be withdrawn at any time without affecting other processing.
Data Retention
Personal data is retained only as long as its purpose requires or the law demands. Account and transaction records tied to regulatory obligations are kept for the statutory period after account closure; data held on the basis of consent is deleted when consent is withdrawn or the purpose ends.
Data Security and SSL Encryption
All data in transit is protected by SSL encryption, covering credentials, documents and payment information. Access to stored data is restricted to authorised personnel on a need-to-know basis. No transmission or storage system is absolutely impregnable, but controls are maintained to the standard the licence requires.
Third Parties and Data Sharing
Data is shared only where necessary: with payment processors to complete transactions, with identity-verification providers for KYC, and with the regulator or law enforcement where legally compelled. Processors are bound by data-protection agreements. Player data is not sold.
Your Six GDPR Rights
As a data subject in Ireland you hold enforceable rights over your information:
- Access — obtain a copy of the personal data held about you
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion where no overriding legal basis applies
- Restriction — limit processing in defined circumstances
- Portability — receive your data in a portable format
- Objection — object to processing based on legitimate interest, including marketing
Requests are made through customer support and executed within the statutory timeframe. You also retain the right to lodge a complaint with the Irish Data Protection Commission.
Cookies
The platform uses cookies to maintain sessions, remember preferences and analyse usage. Essential cookies are required for the service to function; non-essential cookies operate on consent and can be managed through your browser settings.
Contact
Questions about this policy or requests to exercise your rights can be directed to customer support via 24/7 live chat or by email to [email protected]. This policy may be updated; material changes are notified, and the current version always governs.