Privacy Policy — SpinEmpire Casino Austria

Last updated: July 2026 · In accordance with the GDPR (EU) 2016/679

1. Data Controller

The controller within the meaning of the GDPR for the processing of your personal data is:

GBL Solutions N.V.
Groot Kwartierweg 10
Willemstad, Curaçao
Registration number: 163779

Data protection contact: email: [email protected]

If you have questions about the processing of your personal data or wish to exercise your rights as a data subject, please contact the email address above directly.

2. What Data We Collect

We collect various categories of personal data in the course of your use of our services:

Registration Data

• First and last name
• Date and place of birth
• Email address and password (encrypted)
• Residential address and country
• Phone number
• Username

KYC Data (Identity Verification)

• Copies of identity documents (ID card, passport, driving licence)
• Proof of address (bank statements, utility bills)
• Selfie with ID (if requested)
• Information on the source of funds

Transaction Data

• Deposit and withdrawal history
• Payment methods used and associated data
• Account balance and transaction amounts

Gaming Activity

• Game history, bets and results
• Games used and playing times
• Bonuses and free spins

Technical Data

• IP address and geographic location
• Device data (operating system, browser, device type)
• Cookie data and session information
• Connection times and access times

3. Legal Bases for Processing

We process your personal data on the basis of the following legal grounds under Art. 6 GDPR:

• Art. 6(1)(b) GDPR — Performance of a contract: Processing to carry out the user agreement (account management, payment processing, provision of games)
• Art. 6(1)(c) GDPR — Legal obligation: Processing to fulfil legal obligations, in particular KYC/AML requirements (anti-money-laundering, tax law)
• Art. 6(1)(f) GDPR — Legitimate interests: Fraud prevention, operational security, improvement of our services
• Art. 6(1)(a) GDPR — Consent: For optional analytics cookies, marketing communication and similar purpose-bound processing that is not strictly necessary

4. Retention Period

We store your personal data only for as long as it is necessary for the respective purposes or as required by statutory retention obligations:

• Account data and KYC documents: For the duration of the account relationship plus statutory retention periods (usually 5–10 years after the end of the contract)
• Transaction data: Up to 10 years after the respective transaction (tax and anti-money-laundering retention obligations)
• Gaming activity: For the duration of the active account relationship; a maximum of 5 years after account closure
• Technical logs: A maximum of 12 months after collection
• Marketing consents: Until consent is withdrawn plus 3 years as proof

After the retention periods expire, your data is securely deleted or anonymised in compliance with data protection law.

5. Data Transfer to Third Parties

We only pass your personal data to third parties in the following cases:

• Payment service providers: To process deposits and withdrawals (e.g. credit card companies, e-wallet providers, banks) — only to the extent necessary for payment processing
• KYC providers: To specialised service providers for identity verification and anti-money-laundering
• Authorities: To law enforcement, regulatory authorities or courts where we are legally obliged to do so
• Player protection registers: To self-exclusion registers and player protection organisations within the legally prescribed framework

Important: We never sell your personal data to third parties and do not pass it on to third parties for advertising purposes.

6. Your Data Protection Rights under the GDPR

As a data subject, you have the following rights, which you can exercise against us at any time:

• Right of access (Art. 15 GDPR): You have the right to know which personal data we process about you, for what purposes and to whom it is transferred.
• Right to rectification (Art. 16 GDPR): You have the right to have inaccurate or incomplete data corrected.
• Right to erasure (Art. 17 GDPR): You can request the deletion of your data, provided no statutory retention obligations stand in the way.
• Right to restriction of processing (Art. 18 GDPR): In certain cases you can request that the processing of your data be restricted.
• Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, machine-readable format and to transfer it to another provider.
• Right to object (Art. 21 GDPR): You can object to the processing of your data based on legitimate interests, in particular against direct marketing.
• Right to withdraw consent (Art. 7(3) GDPR): You can withdraw consent at any time with effect for the future. The lawfulness of processing carried out up to the withdrawal remains unaffected.

To exercise these rights, please contact: [email protected]. We will respond to your request within 30 days.

7. Contact for Data Subject Rights

We are available for all requests relating to your data protection rights:

Email: [email protected]
Subject: Please write "Data protection request" in the subject line for faster processing.

Response time: We process your request within a maximum of 30 days. For complex requests, this period may be extended by a further 30 days, of which we will inform you.

8. Data Security

We use technical and organisational security measures to protect your personal data against unauthorised access, loss or misuse:

• 256-bit SSL/TLS encryption: All data transfers between your browser and our servers are encrypted.
• Access control: Access to personal data is limited to authorised staff who are subject to a strict duty of confidentiality.
• Regular security audits: We review our security infrastructure regularly to identify and fix vulnerabilities at an early stage.
• Password hashing: Passwords are never stored in plain text but are hashed using modern cryptographic methods.
• Two-factor authentication: We offer the option of two-factor authentication for additional protection of your account.

Despite all security measures, no data transmission over the internet can be guaranteed to be completely secure. We therefore recommend that you use a strong password and change it regularly.

9. Cookies

Our website uses cookies. Cookies are small text files that are stored on your device when you visit our website.

Technically necessary cookies

These cookies are strictly necessary for the operation of the website and cannot be disabled. They enable basic functions such as login, security and language settings.

Optional analytics cookies

With your consent, we use analytics cookies to understand how visitors use our website. This data helps us improve the user experience. You can withdraw your consent at any time in the cookie settings.

You can delete or disable cookies in your browser settings at any time. Please note that disabling technically necessary cookies may limit the functionality of the website.

10. International Data Transfers

As we operate as a company based in Curaçao, your data may be transferred to countries outside the European Economic Area (EEA). For such transfers, we ensure that an adequate level of data protection is guaranteed — for example through the European Commission's Standard Contractual Clauses (Art. 46 GDPR) or other appropriate safeguards.

Payment service providers may also be based in third countries. They are contractually obliged to protect your data in accordance with GDPR standards.

11. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

Competent authority in Austria:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Website: www.dsb.gv.at

12. Changes to the Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our data practices or legal requirements.

We will notify you of material changes by email or by a corresponding notification on our website. The date of the last update is shown at the top of this page.

We recommend that you visit this page regularly to stay informed of any changes.