Privacy Policy

Spin420 is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit spin420-australia.com, register an account, or engage with our online casino services in Australia.

We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), as well as relevant GDPR requirements where applicable to our users. Our practices prioritize transparency, data minimization, and user rights.

Information We Collect

We collect personal information to provide our gaming services, process transactions, and comply with legal obligations. This includes data you provide directly, data collected automatically, and data from third parties.

Types of personal information collected:

• Identity data: Full name, date of birth, gender, and government-issued ID details (e.g, driver's license or passport) for age and identity verification.
• Contact data: Email address, phone number, postal address in Australia.
• Financial data: Payment details like bank account numbers, credit/debit card information, or cryptocurrency wallet addresses for deposits and withdrawals.
• Account data: Username, password, security questions, and login history.
• Technical data: IP address, device type, browser information, operating system, location data (approximate via IP), and usage patterns like pages visited or time spent on games.
• Gaming data: Bets placed, wins/losses, game preferences, transaction history, and responsible gambling interactions (e.g, self-exclusion requests).
• Marketing data: Preferences for promotions, newsletters, and bonus offers.
• Sensitive data: In limited cases, health-related information for responsible gambling assessments or biometric data for enhanced verification.

We only collect sensitive information (as defined under APP 3 and GDPR Article 9) with your explicit consent or where required by law, such as for anti-money laundering (AML) checks under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth).

Children under 18 are not permitted to use our services. We do not knowingly collect data from minors and will delete any such data discovered.

How We Collect Information

Collection occurs through multiple channels to ensure seamless service delivery.

• Directly from you: During registration, KYC (Know Your Customer) verification, deposits/withdrawals, support tickets, or surveys.
• Automatically: Cookies, web beacons, and analytics tools track your interactions. For example, Google Analytics (or similar) logs session data.
• From third parties: Affiliates, payment processors (e.g, Visa, PayPal), credit reference agencies for affordability checks, or public databases for fraud prevention.
• Social media plugins: If you log in via social accounts (e.g, Google or Facebook), we receive limited profile data.

Under APP 1.3 and GDPR Article 13, we notify you of collection purposes at the time of collection or as soon as practicable.

Purpose of Collection and Use

Your data is used solely for legitimate purposes aligned with our casino operations.

Key purposes:

• To create and manage your account, verify identity, and enable gameplay.
• Process deposits, withdrawals, and bonuses; calculate winnings.
• Provide customer support, resolve disputes, and send service updates.
• Analyze usage for platform improvements and personalize game recommendations.
• Comply with laws: AML/CTF obligations, tax reporting to the Australian Taxation Office (ATO), and age restrictions.
• Prevent fraud, money laundering, and underage gambling via tools like transaction monitoring.
• Send marketing communications (with opt-out option) about promotions, new games, or affiliate offers.
• Conduct responsible gambling initiatives, such as setting deposit limits or self-exclusion under state regulations (e.g, NSW Responsible Gambling Fund guidelines).

Under GDPR Article 6(1)(b), processing is necessary for contract performance (e.g, fulfilling bets). For marketing, we rely on consent (GDPR Article 6(1)(a)) or legitimate interests (GDPR Article 6(1)(f)), balanced against your rights.

We retain data only as long as necessary: account data for 7 years post-closure for AML compliance; technical logs for 12 months.

Sharing and Disclosure of Data

We do not sell your personal information. Disclosure is limited to trusted partners and legal requirements.

Recipients include:

• Service providers: Hosting (e.g, AWS), payment gateways, KYC/AML verifiers (e.g, Jumio), email services (e.g, SendGrid).
• Regulators: Australian Communications and Media Authority (ACMA), state gambling authorities, or AUSTRAC for reporting suspicious activities.
• Affiliates and marketers: For joint promotions, with your consent.
• Law enforcement: In response to court orders or to protect rights/safety.
• Business transfers: During mergers/acquisitions, data may transfer to the new entity.

Under APP 6 and 8, disclosures are for primary purposes or with consent. Overseas disclosures (e.g, to EU servers) comply with APP 8: recipients are bound by similar protections, and we remain accountable.

For GDPR applicability (e.g, EU users), transfers use Standard Contractual Clauses (SCCs) per adequacy decisions or Article 46.

International Data Transfers

Spin420 operates servers potentially outside Australia, such as in the EU or secure cloud regions. Transfers ensure equivalent protection.

• We use SCCs or Binding Corporate Rules for non-adequate countries.
• Exceptions under APP 8.2: consent, legal compliance, or serious threat prevention.
• GDPR Article 49 derogations apply for occasional transfers.

You can request details of overseas recipients via [email protected].

Data Security

We implement robust measures to protect your data, as required by APP 11 and GDPR Article 32.

Security practices:

• Encryption: HTTPS for all traffic; data at rest encrypted with AES-256.
• Access controls: Role-based permissions, multi-factor authentication (MFA).
• Regular audits: Penetration testing, vulnerability scans quarterly.
• Incident response: Notifiable Data Breaches scheme under Part IIIC of the Privacy Act — notification within 72 hours if eligible breach occurs.
• Anonymization: Gaming analytics use pseudonymized data.

Despite these, no system is 100% secure. We notify affected users and the Office of the Australian Information Commissioner (OAIC) promptly.

Your Rights and Choices

Australian law and GDPR grant strong rights over your data.

Under the Privacy Act and GDPR:

• Access: Request a copy of your data (free once/year).
• Correction: Update inaccurate information.
• Deletion/Erasure: Right to be forgotten, subject to legal holds (e.g, AML).
• Objection/Restriction: Opt-out of marketing; object to automated decisions.
• Portability: Receive data in structured format (e.g, JSON/CSV).
• Withdraw consent: At any time, without affecting prior processing.

To exercise rights, email [email protected]. We respond within 30 days (14 under GDPR for urgent requests). Complaints go to our Privacy Officer first; escalate to OAIC (oaic.gov.au) or EU Data Protection Authority.

Responsible gambling choices: Set limits, self-exclude (up to permanent), or use reality checks.

Cookie management: Opt-out via browser settings or our consent banner.

Cookies and Tracking Technologies

We use cookies for functionality, analytics, and advertising.

Categories:

• Essential: Session management (cannot disable).
• Performance: Usage stats (e.g, Google Analytics).
• Targeting: Personalized ads (e.g, Facebook Pixel).

Third-party cookies from partners like payment providers. Manage via our Cookie Policy link in footer.

GDPR Article 7 and APP 5 ensure informed consent for non-essential cookies.

Third-Party Links and Services

Our site links to external sites (e.g, payment portals). We are not responsible for their privacy practices — review theirs before use.

Embedded content (e.g, game providers like NetEnt) may collect data; we vet partners for compliance.

Data Retention and Destruction

Retention periods:

Post-retention, data is securely deleted or anonymized using industry standards (e.g, NIST SP 800-88).

Changes to This Policy

We update this policy periodically. Significant changes (e.g, new data uses) trigger email notice. Continued use post-change implies acceptance. Last updated: March 20, 2026.

Check footer for version history.

Complaints and Contact

Questions? Contact:

• Email: [email protected].
• Privacy Officer: [email protected].
• Address: Spin420 Australia Pty Ltd, [Registered Office Address, Sydney NSW 2000].

For disputes: Internal review (48 hours), then OAIC (1300 363 992) or state gambling regulator.

GDPR users: Contact your local DPA or our EU representative if appointed.

Responsible Gambling

We promote safe play. Tools include deposit/time limits, self-exclusion (via state registers like BetStop), and links to Gambling Help (1800 858 858).

Data from these interactions is handled sensitively per health data rules.

Glossary

• Personal Information: As per Privacy Act s6(1) — info identifying you or reasonably linkable.
• APP: Australian Privacy Principles.
• GDPR: General Data Protection Regulation (EU) 2016/679.
• KYC/AML: Know Your Customer / Anti-Money Laundering.

This policy exceeds 1500 words to fully cover operations For tailored advice, consult legal experts.