Spinlander Privacy Policy
This document explains how personal information is collected, processed, protected, disclosed, and deleted. The policy applies to online casino and sportsbook services offered to users in Canada. Use of the services is based on user consent, given at registration and through ongoing choices in account settings. The policy describes rights and controls so users can manage their data throughout the account lifecycle.
Privacy and Data Protection
- Personal data collected:
- Identity and contact details — name, date of birth, residential address, email, phone number.
- Account information — username, preferences, responsible gambling settings, self-exclusion status.
- Verification records — identity documents, age checks, sanction and watchlist screening outcomes where required by law.
- Transaction and payment data — deposits, withdrawals, payment method identifiers, billing address, chargebacks.
- Gameplay and usage data — bets, game sessions, win-loss records, session duration, interaction logs.
- Technical data — device identifiers, IP address, browser type, operating system, app and website activity, cookies.
- Why this information is collected:
- To register and service accounts, verify identity and age, and provide the requested services.
- To process payments, detect and prevent fraud, and support responsible gambling tools.
- To meet legal obligations under Canadian laws including anti-money laundering and counter-terrorist financing requirements.
- To operate, secure, and improve websites, apps, systems, and user experience.
- Protection measures:
- Encryption in transit and at rest, access controls based on roles, multi-factor authentication for staff where applicable.
- Network monitoring, logging, vulnerability management, and regular security testing.
- Payment processing aligned to industry standards such as PCI DSS by qualified providers.
- Staff training, confidentiality obligations, and privacy impact assessments for high-risk processing.
- Breach response and notification procedures consistent with Canadian requirements when there is a real risk of significant harm.
- User rights:
- Access a copy of personal data, request correction, and request deletion where permitted by law.
- Withdraw consent for non-essential processing, and opt out of direct marketing at any time.
- File a complaint with the Office of the Privacy Commissioner of Canada or applicable provincial privacy regulators.
Compliance: Processing is conducted in line with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act and relevant provincial statutes, as well as applicable provincial gaming regulations.
Use of Collected Information
- Account servicing: create and manage accounts, verify identity and age, provide customer support.
- Transactions: process deposits and withdrawals, handle payment disputes, and maintain records for audits.
- Service improvement: monitor performance, fix issues, and enhance online features based on aggregated analytics.
- Marketing: send service updates and promotional information where consent exists. Users can withdraw consent at any time.
- Analytics: assess site usage trends, behaviour patterns, and product performance to improve services.
- Compliance: meet obligations relating to anti-money laundering, fraud prevention, sanctions screening, tax and regulatory reporting, and responsible gambling requirements.
Processing is lawful, limited to stated purposes, and conducted in a transparent manner appropriate for the services offered to users in Canada.
Access to Information
- Access and portability: users can request a copy of their personal data and information about processing activities.
- Updates and corrections: users may update profile fields directly or request correction where data is inaccurate or incomplete.
- Deletion: users can request deletion where retention is not required by law or for legitimate business needs such as fraud prevention.
- Process: requests are verified to protect accounts, assessed on a case-by-case basis, and responded to within 30 days where feasible.
- Limits: some data must be kept for record-keeping, dispute resolution, and anti-money laundering requirements.
By using Spinlander, users consent to security checks, identity verification, and processing of payment data by approved providers to prevent fraud and comply with law. Requests can be submitted through the support channels detailed on the website.
Protection of Children’s Privacy
The services are intended for adults 18 years of age or older. Access is restricted in any jurisdiction where the lawful age is higher. The operator cannot confirm age or identity without documents and verification steps.
If a minor’s information is identified, the account will be closed and personal data will be deleted where permitted by law. A parent or legal guardian may contact the Privacy Office using the methods listed on the site to request removal of a minor’s data.
International Data Transfers
Personal data may be stored or processed outside Canada where partners and service providers operate. By using Spinlander, users consent to cross-border transfers for the purposes described in this policy.
Safeguards are applied, including contractual protections such as data processing agreements and, where applicable, Standard Contractual Clauses or equivalent mechanisms, along with encryption and access controls. Partners are required to protect confidentiality and use the information only for agreed purposes.
Legal Disclaimer
This privacy disclaimer may limit or clarify the scope and effects of certain rules described in this policy where permitted by law. The disclaimer applies when the user accepts the policy through signature, online acceptance, or accession during registration or continued use of the services.
If there is a conflict between this policy and other service terms regarding personal data, this policy governs those privacy matters. Nothing in this policy creates a contractual entitlement beyond the privacy commitments stated here.
Use of Cookies
Cookies are small text files stored on a device by websites or apps to remember settings and identify a browser. Cookies and similar technologies are used for statistics, behaviour analysis, personalisation, and site improvement.
- Types used: essential cookies for core functions, performance and analytics cookies, functionality cookies, and advertising cookies where consent is given.
- Retention: non-essential cookies are retained for up to 1 year unless deleted earlier by the user.
- Controls: users can manage cookie preferences in the browser or through the site’s cookie settings. Blocking some cookies may affect functionality.
Third-party analytics and advertising partners may place cookies subject to their own policies. Those partners do not receive direct identifiers beyond what is necessary for the stated purposes.
Acceptance of Privacy Policy
Using Spinlander constitutes full acceptance of this privacy policy. The current version posted on the site prevails over any prior version.
Updates will be posted with an effective date. Continued use after changes take effect indicates acceptance of the updated document, subject to applicable consent requirements.
Third-Party Privacy Practices
Personal information may be shared in limited cases:
- Service providers: identity and age verification, payment processing, fraud prevention, data hosting, analytics, and customer support.
- Legal and regulatory: law enforcement, courts, regulators, and gaming authorities as required to comply with law, resolve disputes, or enforce agreements.
- Business operations: game content providers and partners needed to deliver requested services.
A list of key providers or categories is available on the site where applicable. If a specific party is not listed, the purpose and scope of sharing will be communicated where required by law. Providing data to access the services constitutes consent to such sharing, subject to security and confidentiality obligations. Personal data is not sold.
Links to Other Websites
The site may include links to third-party websites or apps that are not operated by the operator. Those sites have their own privacy policies and practices.
No responsibility is accepted for how external websites collect, use, or protect data. Users should review the privacy notices of third-party services before providing any information.