Privacy Policy

Effective from: 16 April 2025 Last Updated: 16 September 2025

General

HighSpin Casino (“we”, “our”, “us”) is operated by COSTA MATRIX GROUP LLC, duly registered and operating under the laws of Costa Rica. As a data controller, we have a legal obligation under gambling regulations to process personal data from players in order to allow them to participate in games and provide them with ancillary services.

This Privacy Policy of High Spin explains what personal data we collect when you use our services, how we use it, and for what purposes. It also provides important information about how your data is protected and outlines your legal rights regarding its use.

We may periodically make modifications to this Policy. While we will do our best to notify you of such changes, we recommend that you revisit this Privacy Policy regularly to remain informed of any updates. Continued use of the HighSpin Casino platform following any such modifications constitutes your acceptance of the revised Policy.

If you have any questions or concerns regarding this Privacy Policy or how your personal data is handled, please contact our customer support team at [email protected].

Personal Data We Collect

The personal information which we may request to use and process shall include, without limitation:

a) Registration and Account Information Any information that you provide to us when filling in the forms on our account registration pages, as well as any other data that you subsequently submit via the website or by email. This includes, but is not limited to, your first and last name, date of birth, email address, phone number, and residential address.

b) Communications All correspondence made with us via the website, email, web chat, or through any other means of communication. This includes records of enquiries, complaints, support interactions, and any other exchanges between you and our team.

c) Transaction History All player account transaction history, whether this takes place via the website or via other means of communication. This includes records of deposits, withdrawals, wagers, winnings, bonus allocations, and any other financial activity associated with your account.

d) Technical and Usage Data Website logins and their details, including traffic data, GeoIP location data, browser and device data, weblogs, activity logs, and other traffic information recorded in our systems. This data helps us to maintain platform security, improve user experience, and comply with our regulatory obligations.

e) Verification Documents Documents and proofs reasonably requested by us to verify your account, to process deposits or withdrawals, and to conduct anti-fraud checks, whether on our own initiative or as required by applicable legislation. Such proofs may include, but are not limited to, passport scans, driving licences, national identity cards, payment slips, bank statements, utility bills, and other supporting documentation.

f) Survey and Assessment Data Information provided through survey participation or any other customer assessments that we may carry out from time to time, including feedback forms, satisfaction surveys, and promotional competitions.

How We Use Your Personal Data

We use the personal data we collect for the following purposes:

a) Account Management and Service Delivery To register and maintain your player account, verify your identity and eligibility, process deposits and withdrawals, provide customer support, and deliver the services offered by HighSpin Casino.

b) Legal and Regulatory Compliance To fulfil our obligations under applicable laws and regulations, including anti-money laundering (AML) legislation, Know Your Customer (KYC) requirements, gambling regulations, and any other legal requirements to which we are subject. This includes verifying your age and identity, monitoring transactions for suspicious activity, and reporting to relevant authorities where required.

c) Fraud Prevention and Security To detect, investigate, and prevent fraudulent activity, money laundering, cheating, and other illegal or prohibited conduct on our platform. This includes monitoring gameplay, transactions, and account activity to identify unusual patterns or behaviour.

d) Platform Improvement and Analytics To analyse how our platform is used, identify areas for improvement, troubleshoot technical issues, and enhance the overall user experience for our players.

e) Marketing and Promotions Where you have provided your consent or where we have a legitimate interest in doing so, to send you information about our promotions, offers, bonuses, and other marketing communications. You may opt out of receiving marketing communications at any time by contacting us at [email protected] or by using the unsubscribe option included in our communications.

f) Responsible Gambling To fulfil our responsible gambling obligations, including monitoring player activity for signs of problem gambling, applying player-initiated restrictions, and communicating with players in relation to responsible gambling tools and support resources.

g) Dispute Resolution To investigate and resolve any disputes, complaints, or claims raised by players or third parties in connection with the use of our services.

Legal Basis for Processing

We process your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and HighSpin Casino, including the provision of gaming services and the management of your account.
• Legal Obligation: Processing is necessary to comply with our legal and regulatory obligations, including AML, KYC, and gambling compliance requirements.
• Legitimate Interests: Processing is necessary for the purposes of our legitimate interests, including fraud prevention, platform security, business analytics, and the improvement of our services, provided that such interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent as the legal basis for processing, such as for direct marketing communications, you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Sharing Your Personal Data

We may share your personal data with the following categories of recipients in the circumstances described below:

a) Group Companies and Affiliates We may share your personal data with other companies within our group for the purposes of providing and improving our services, ensuring compliance with our obligations, and conducting business operations.

b) Service Providers and Data Processors We engage third-party service providers to assist us in delivering our services. These may include identity verification providers, payment processors, fraud prevention specialists, IT service providers, customer support platforms, and marketing service providers. All third-party processors are required to process your data only in accordance with our instructions and in compliance with applicable data protection requirements.

c) Regulatory and Law Enforcement Authorities We may be required to disclose your personal data to competent regulatory authorities, law enforcement agencies, tax authorities, or other governmental bodies where required to do so by law or in response to a lawful request. This includes reporting obligations under AML legislation.

d) Business Transfers In the event of a merger, acquisition, reorganisation, or sale of all or part of our business assets, your personal data may be transferred to the relevant third party as part of that transaction. We will endeavour to notify you of any such transfer and any choices you may have in connection with it.

e) Dispute Resolution and Legal Claims We may share your personal data with legal advisers, courts, arbitration bodies, or other parties where necessary for the establishment, exercise, or defence of legal claims.

We do not sell your personal data to third parties, and we do not share it for purposes other than those described in this Privacy Policy.

Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including the provision of services, compliance with legal and regulatory obligations, resolution of disputes, and enforcement of our agreements.

In general, player account data is retained for a minimum period of five (5) years following the closure of your account or the termination of our relationship with you, in order to satisfy our AML, KYC, and gambling regulatory obligations. In some cases, data may be retained for longer periods where required by law or where a legal claim is pending.

Where personal data is no longer required for any legitimate purpose, it will be securely deleted or anonymised in accordance with our internal data retention procedures.

Cookies and Tracking Technologies

HighSpin Casino uses cookies and similar tracking technologies to enhance your experience on our platform, analyse usage patterns, and deliver relevant content and advertising.

Types of cookies we use include:

• Strictly Necessary Cookies: Essential for the operation of the website and cannot be disabled.
• Analytical/Performance Cookies: Help us understand how visitors interact with our platform, enabling us to improve functionality and user experience.
• Functionality Cookies: Allow the website to remember your preferences and personalise your experience.
• Targeting/Advertising Cookies: Used to deliver relevant promotional content and track the effectiveness of our marketing campaigns.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the platform. For more detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

Data Security

HighSpin Casino takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to, encryption of sensitive data, secure server infrastructure, access controls, and regular security assessments.

Whilst we take all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is entirely secure. We cannot guarantee the absolute security of your data and shall not be liable for any unauthorised access or loss of personal data that is beyond our reasonable control.

You are responsible for maintaining the security of your own account login credentials. If you believe your account has been compromised, please contact us immediately at [email protected].

International Data Transfers

As an international online gaming operator, we may transfer your personal data to countries outside of the European Economic Area (EEA) or the United Kingdom in connection with the delivery of our services. Where such transfers occur, we take all reasonable steps to ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection laws.

These safeguards may include the use of standard contractual clauses approved by the relevant authorities, adequacy decisions, or other legally recognised transfer mechanisms.

Your Rights

You have the following rights in relation to the personal data we hold about you, subject to applicable legal limitations:

a) Right of Access You have the right to request a copy of the personal data we hold about you and to receive information about how it is processed.

b) Right to Rectification You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

c) Right to Erasure You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Please note that this right is subject to our legal and regulatory obligations to retain certain data.

d) Right to Restriction of Processing You have the right to request that we restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or object to its processing.

e) Right to Data Portability Where processing is based on your consent or on a contractual basis, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.

f) Right to Object You have the right to object to the processing of your personal data where it is carried out on the basis of our legitimate interests, including profiling for direct marketing purposes.

g) Right to Withdraw Consent Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

h) Right to Lodge a Complaint If you believe that our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority. In the United Kingdom, this is the Information Commissioner’s Office (ICO), which can be contacted at www.ico.org.uk.

To exercise any of the above rights, please contact our customer support team at [email protected]. We will respond to all legitimate requests within the timeframe required by applicable law and will not charge a fee for dealing with such requests unless they are manifestly unfounded or excessive.

Third-Party Links

The HighSpin Casino website may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to those third-party platforms, and we are not responsible for their privacy practices or the content they publish. We encourage you to review the privacy policies of any third-party websites you visit.

Children’s Privacy

HighSpin Casino does not knowingly collect or process personal data from individuals under the age of 18. If we become aware that personal data has been collected from a minor without appropriate consent, we will take immediate steps to delete that data and close any associated account. If you believe that a minor has registered an account on our platform, please contact us immediately at [email protected].

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which we process your personal data, please contact us at:

HighSpin Casino Customer Support Email: [email protected]

We are committed to handling all data-related enquiries with care, transparency, and in full compliance with our legal obligations.