Spin Granny Privacy Policy

Spin Granny is operated by Ceshiroza SRL, a company registered in Costa Rica and the holder of gaming licence ALSI-202408027-FI2 issued by the Gaming Board of Anjouan, Union of the Comoros. This page sets out what personal data we collect from players and site visitors, the purposes for which we process it, who we share it with, how long we keep it, and what rights you have over it. Ceshiroza SRL is not established in the United Kingdom and does not hold a UK Gambling Commission licence; our data-handling practices are governed by the operator’s own commitments and the terms of our Anjouan authorisation rather than by UK GDPR or the Data Protection Act 2018.

What information we collect

We collect personal data across several categories depending on how you interact with the site. Account registration data includes your name, date of birth, residential address, email address, and phone number. KYC verification documents include government-issued photo identification, proof of address, and copies of payment methods used. Gameplay data covers deposits, withdrawals, bets placed, session times, and game selections. We also collect device and network data, including IP address, browser type, operating system, and device identifiers, as well as cookies and similar technologies used for site functionality and analytics.

How we use your information

We process account and gameplay data to provide the service: creating and maintaining your account, processing deposits and withdrawals, and enabling access to casino and sportsbook products. We process KYC and transaction data to meet our regulatory obligations under the Anjouan licence, including age verification, anti-money laundering checks, and transaction monitoring. Device and network data is used for security and fraud prevention. Where you have opted in, we may use your contact details to send marketing communications, which you can withdraw at any time.

We share personal data with licensed payment processors to handle deposits and withdrawals, and with identity verification and fraud-prevention providers to carry out KYC and anti-fraud checks. Data may be disclosed to the Gaming Board of Anjouan, Union of the Comoros, in connection with our licence obligations, and to law enforcement or other authorities where we are legally required to do so. We do not sell personal data to third parties.

Data retention

We retain personal data for five years after a player’s account becomes inactive or is closed, in line with our anti-money laundering obligations and the player protection measures published on the site. Certain records, including transaction logs and verification documents, may be kept for longer where a specific legal or regulatory requirement applies. When the applicable retention period expires, data is deleted or anonymised.

Your rights

You have the right to request a copy of the personal data we hold about you. You can ask us to correct inaccurate or incomplete data. You may request erasure of your data where no legal obligation requires us to retain it. You have the right to restrict or object to certain processing activities. Where processing is based on your consent, you can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise any of these rights, contact us using the details below.

Contact us

Privacy queries and data subject requests can be sent to [email protected] , where replies are provided within one business day. For account closure matters, you may also write to [email protected] . No Data Protection Officer has been designated; all privacy correspondence is handled by the support team.