Northspin Casino Privacy Policy
Who Controls Your Data
The data controller for Northspin is 3-102-948708 SRL, the company registered in Costa Rica that holds our Tobique Gaming Commission licence. It decides why and how the personal data of players in the United Kingdom is used. Questions about that use go to [email protected].
How We Justify Processing and How You Can Object
We rely on four lawful bases under the UK GDPR. Performance of a contract covers running your account, paying out winnings and delivering bonuses. Legal obligation covers verification and anti-money-laundering checks. Legitimate interests cover fraud prevention and keeping the platform secure. Consent covers optional analytics cookies and marketing emails, and you can withdraw it at any time.
You have the right of access, rectification, erasure, restriction of processing, objection and data portability. To use any of them, email us from your registered address, and we will confirm your identity before acting. Objection to marketing is applied straight away, while erasure may be limited where the law requires us to keep records.
What We Collect When You Register and Play
At registration we collect your name, date of birth, email address and password. When you pay we record the method, amount, date and transaction ID, and for verification we hold copies of your passport or UK photocard driving licence and a utility bill, council tax bill or bank statement. Our servers also log technical data such as IP address, browser, device type and session times, and we store the game activity that appears in your account history. If you contact support, we keep the text of your live chat and email conversations so that an agent who picks up your case later can see what was already agreed. We do not knowingly collect data from anyone under 18, and an account found to belong to a minor is closed and its data removed once any legal retention duty has ended.
How Cookies and Analytics Work
We use strictly necessary cookies to keep you logged in and protect your session, functional cookies to remember your preferences, and analytics cookies to see which pages are used. Necessary cookies need no consent. The others are governed by the Privacy and Electronic Communications Regulations (PECR), so we ask for your agreement through the cookie notice, and you can opt out later by clearing cookies or changing your browser settings. Analytics data is used in aggregated form to improve page speed and layout, and it is never used to decide what limits or bonuses your account receives.
Who Receives Your Data and How Long We Keep It
We share only what each recipient needs to do its job.
| Recipient | Data shared | Purpose |
|---|---|---|
| Visa, Mastercard, Skrill, Neteller, Apple Pay, bank transfer and cryptocurrency processors | Name, amount, transaction details | Deposits and withdrawals |
| Pragmatic Play, Evolution Gaming, NetEnt, Hacksaw Gaming, Play’n GO, Nolimit City, BGaming, Push Gaming, Thunderkick, Microgaming, Spribe | Session identifier, bet history for the game | Running games and settling rounds |
| Tobique Gaming Commission | Licensing and compliance records on request | Regulatory oversight |
We keep account data while your account is open. After closure we retain identity, payment and game records only for the period that anti-money-laundering, tax and accounting rules require, and then delete or anonymise them.
How Transfers Abroad and Complaints to the ICO Work
Our operator is based in Costa Rica, so your data leaves the United Kingdom. We protect these transfers with the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, together with encryption in transit.
If you are unhappy with how we have handled your data, please tell us first. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK data protection regulator, whether or not you have contacted us.
How to Send a Data Request
Email [email protected] from the address on your account, state which right you want to use and include your username. We will confirm your identity, respond in writing and tell you if we need more time or cannot fully comply for a legal reason.