Spinrise Casino Privacy Policy

Who Controls Your Data

Your personal information is controlled by Hollycorn N.V., the operator of Spinrise, registered at Scharlooweg 39, Willemstad, Curaçao. Hollycorn N.V. determines the purposes and means of processing your data across the registration, cashier, and account management functions of the site.

Transferring Data Outside Canada

Because Hollycorn N.V. is based in Curaçao, personal information collected from Canadian players is processed and stored outside Canada, on servers operated by the company and its infrastructure providers. Where data is transferred to a processor in another country, contractual safeguards are put in place requiring that processor to protect the data to a standard consistent with this policy, regardless of where the processing occurs.

Your Rights as a Data Subject

You can request access to the personal information we hold about you, ask us to correct inaccurate information, and withdraw consent for optional processing such as marketing communications at any time. If you are a resident of Quebec, you additionally have the right under Law 25 to request that outdated or unlawfully collected information about you be de-indexed from search results linked to your name, and to request that your data be provided to you in a structured, commonly used format for transfer elsewhere.

What Happens to Your Data After You Close Your Account

Account and transaction records are retained for as long as your account is active and for a further period after closure to meet the record-keeping obligations attached to our gaming licence, typically several years following the account’s closure. Once the applicable retention period has passed, records no longer required for legal or regulatory purposes are deleted or anonymized rather than kept indefinitely.

Complaints to a Regulator

If you believe your personal information has been mishandled and the matter is not resolved to your satisfaction after contacting us directly, you may file a complaint with the Office of the Privacy Commissioner of Canada. Quebec residents may instead, or in addition, file a complaint with the Commission d’acces a l’information du Quebec, which oversees compliance with Law 25 for organizations serving Quebec residents.

Cookies, Analytics, and Marketing Messages

Spinrise uses cookies for account sessions, site preferences, and analytics that help us understand how the site is used. Analytics and non-essential cookies can be declined through the cookie banner shown on your first visit or adjusted later through your browser settings. Marketing emails are sent only with your consent under Canada’s Anti-Spam Legislation, and every marketing message includes a working unsubscribe link that takes effect on your next login.

What Information We Collect

We collect the information you provide at registration, including your name, date of birth, and email address, along with payment details used for deposits and withdrawals through methods such as Interac, Visa, Mastercard, Skrill, Neteller, and supported cryptocurrencies. Identity verification documents, including a government-issued photo ID and a proof of address, are collected before your first withdrawal. Technical data such as your IP address, browser type, and session logs are recorded automatically for security and fraud prevention purposes.

Payment details are shared with the payment providers you choose to use, including Interac, Visa, Mastercard, Skrill, Neteller, MiFinity, ecoPayz, and the relevant cryptocurrency payment processors, solely to complete your transactions. Identity verification information is shared with the KYC verification service engaged by Spinrise to confirm your documents. Gameplay data such as bets and outcomes is shared with the relevant game studio, including Pragmatic Play, Evolution Gaming, NetEnt, Play’n GO, and BGaming, to the extent needed to operate the games themselves.

Under PIPEDA, we rely on your express consent to process sensitive information such as identity documents submitted for verification, and on implied consent for routine account operations like processing a deposit you initiate. Some processing, such as retaining transaction records for anti-money laundering reporting under our licence obligations, is carried out to meet a legal requirement rather than for consent-based purposes, and this processing continues even if you later withdraw consent for other uses of your data.

Requesting Access to Your Data

To ask a question about this policy, request a copy of the personal information we hold about you, or exercise any of the rights described above, contact us at [email protected]. Include your registered account email in the request so we can locate your records and respond within a reasonable timeframe.