Hellspin Casino Privacy Policy

At Hellspin Casino, your privacy is not just a legal obligation — it is a core commitment that shapes every aspect of how we operate. This Hellspin Casino privacy policy has been drafted in full compliance with the Australian Privacy Act 1988, the Australian Privacy Principles (APPs), and, where applicable, the General Data Protection Regulation (GDPR). Whether you are a first-time visitor or a loyal member of our platform, understanding how your personal data is collected, stored, and used empowers you to make informed decisions about your online gaming experience. We encourage all Australian players to read this document carefully, as it outlines your privacy rights, describes our data protection practices, and explains the measures we take to maintain the highest standards of information security and confidentiality.

1. Identity of the Data Controller

Hellspin Casino is operated by a company registered in Curaçao and licensed by the Government of Curaçao. As the data controller, Hellspin Casino is responsible for determining the purposes and means by which your personal information is processed. All inquiries regarding data processing activities, user data management, or this privacy policy may be directed to our dedicated Data Protection Officer (DPO).

Data Protection Officer Contact:
Email: [email protected]
General Support: [email protected]

We take our responsibilities as a data controller seriously and ensure that all data collection, data storage, and data processing activities are carried out lawfully, transparently, and fairly.

2. Personal Data We Collect

Hellspin Casino collects a range of personal data categories to provide you with a safe, compliant, and enjoyable gaming environment. Below is a detailed overview of the types of personal information we may collect:

2.1 Identification Data

• Full legal name
• Date of birth (to verify you are of legal gambling age)
• Nationality and country of residence
• Government-issued identification documents (passport, driver's licence, national ID card)

2.2 Contact Data

• Email address
• Phone number (where provided)
• Residential and billing address

2.3 Financial Data

• Payment method details (card numbers, e-wallet identifiers, cryptocurrency wallet addresses)
• Transaction history (deposits, withdrawals, bonuses)
• Bank account information where applicable

2.4 Gaming Activity Data

• Game session logs (titles played, stakes, duration)
• Bonus utilisation and wagering records
• Win/loss history and betting patterns

2.5 Technical Data

• IP address and geolocation data
• Device type, operating system, and browser version
• Login timestamps and session duration
• Cookies and similar tracking technologies (see Section 6)

2.6 Communication Data

• Records of live chat conversations with support agents
• Email correspondence
• Feedback, complaints, and dispute records

2.7 Sensitive Data

In limited circumstances, and only where legally required or with your explicit consent, Hellspin Casino may process sensitive categories of personal data, such as information related to responsible gambling self-exclusions or health-related disclosures.

2.8 Data Received from Third Parties

• Identity verification results from KYC/AML service providers
• Fraud detection signals from payment processors
• Information from responsible gambling registries (e.g., self-exclusion databases)
• Analytics data from advertising partners

3. How We Collect Your Personal Information

We collect user data through multiple channels to ensure accuracy and completeness. The primary methods of data collection employed by Hellspin Casino include:

• Registration forms: When you create an account, we collect your identification and contact details directly.
• Account activity: Ongoing gaming and transactional activity generates records automatically.
• Cookies and tracking technologies: Our website uses cookies to gather technical and behavioural data (detailed in Section 6).
• Customer support interactions: Communications you initiate with our team are recorded for quality and compliance purposes.
• Third-party integrations: Payment providers, KYC platforms, and analytics services may share relevant data with us.
• Promotional campaigns: If you participate in competitions or surveys, additional data may be collected.

4. Purposes of Data Processing

Hellspin Casino processes your personal data for the following clearly defined purposes. Our data processing activities are always anchored to a lawful basis, and we never use your information beyond what is necessary.

5. Legal Basis for Processing

Under the Australian Privacy Act 1988 and, where the GDPR applies, under Article 6 of the GDPR, Hellspin Casino relies on the following legal bases for data processing:

• Contractual Necessity: Processing required to fulfil our obligations under your player agreement.
• Legal Obligation: Processing mandated by law, including KYC, AML, and responsible gambling requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent (e.g., for direct marketing). You may withdraw consent at any time.

6. Cookie Policy

The Hellspin Casino cookie policy governs the use of cookies and similar tracking technologies on our website. Cookies are small text files stored on your device that help us deliver a seamless, personalised, and secure gaming experience. By continuing to use hellspincasino1.org, you consent to our use of cookies as described below.

6.1 Types of Cookies We Use

6.2 Managing Your Cookie Preferences

You can manage, restrict, or delete cookies at any time through your browser settings or by using our cookie consent tool, available on the site. Please note that disabling certain cookies may affect the functionality of Hellspin Casino and your overall user experience. For more information, consult your browser's help documentation.

6.3 Third-Party Cookies

Some cookies on our platform are set by third-party services, including analytics providers (e.g., Google Analytics) and advertising networks. These third parties have their own privacy policy and cookie policy documents, and Hellspin Casino is not responsible for their data practices. We recommend reviewing their policies independently.

7. Sharing Personal Data with Third Parties

We respect the confidentiality of your personal information and do not sell, rent, or trade your data to third parties for their own marketing purposes. However, Hellspin Casino data protection obligations and operational requirements mean we may share your user data with the following categories of recipients:

7.1 Payment Providers

To process your deposits and withdrawals via PayID, Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, Bitcoin, Ethereum, Litecoin, or bank transfer, we share the minimum necessary personal data with our payment processing partners. These providers are bound by strict data security requirements and may not use your data for any other purpose.

7.2 Regulatory Authorities

We are legally obliged to share personal information with the Curaçao gaming authority, Australian regulatory bodies, tax authorities, and law enforcement agencies where required by law — for example, in the context of AML investigations or court orders.

7.3 KYC and Identity Verification Partners

Before your first withdrawal, Hellspin Casino is required to complete mandatory KYC (Know Your Customer) verification. We share identity documents and relevant personal data with accredited third-party verification services for this purpose.

7.4 Technology and Service Partners

We work with a range of trusted technology providers — including game suppliers such as Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming, Yggdrasil, Hacksaw Gaming, Push Gaming, Spribe, Red Tiger, Nolimit City, and Relax Gaming — as well as platform infrastructure and security vendors. These partners access only the data necessary to deliver their contracted services and are subject to binding data processing agreements.

7.5 Responsible Gambling Organisations

Where required or appropriate, we may share information with self-exclusion databases and responsible gambling support organisations to protect at-risk players.

8. International Data Transfers

As an online casino operating under a Curaçao licence, Hellspin Casino may transfer your personal data to countries outside Australia or the European Economic Area. Whenever such transfers occur, we ensure that appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Binding Corporate Rules where applicable
• Transfers to countries recognised as providing an adequate level of data protection
• Reliance on specific derogations where permitted by law (e.g., where the transfer is necessary to perform a contract with you)

If you would like more information about international transfers of your personal information, please contact our Data Protection Officer at [email protected].

9. Data Security

Hellspin Casino data security is implemented at the highest industry standards. We deploy a comprehensive suite of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

9.1 Technical Measures

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS protocols, ensuring that your personal information cannot be intercepted during transit.
• Firewall Protection: Advanced firewall systems monitor and control incoming and outgoing network traffic, protecting our infrastructure against external threats.
• Data Encryption at Rest: Sensitive personal data stored in our databases is encrypted, adding an additional layer of information security.
• RNG Certification: Our Random Number Generators (RNGs) are independently certified by accredited laboratories to ensure fair play and the integrity of gaming outcomes.
• Intrusion Detection Systems: Continuous monitoring tools detect and respond to potential security incidents in real time.

9.2 Organisational Measures

• Access to personal data is restricted to authorised personnel on a strict need-to-know basis.
• All staff handling user data receive regular training on data protection and information security best practices.
• Third-party vendors are assessed for data security compliance before engagement and are bound by data processing agreements.
• Incident response procedures are maintained and tested regularly to ensure rapid containment of any data breach.

Despite our best efforts, no system is entirely impenetrable. In the unlikely event of a personal data breach that poses a risk to your rights, Hellspin Casino will notify the relevant supervisory authority and, where required, affected players, within the timeframes prescribed by applicable law.

10. Data Retention Periods

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this privacy policy, or as required by law. The following general retention periods apply:

After the applicable retention period expires, your personal data is securely deleted or anonymised so that it can no longer be attributed to you.

11. Your Privacy Rights

Under the Australian Privacy Act 1988 and, where applicable, the GDPR, you hold a range of meaningful privacy rights in relation to your personal data held by Hellspin Casino. We are committed to honouring these rights promptly and transparently.

11.1 Right of Access

You have the right to request a copy of the personal information we hold about you, along with information about how it is being processed. Submit your request to [email protected] and we will respond within 30 days.

11.2 Right to Correction

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain information directly through your account profile.

11.3 Right to Deletion ("Right to Be Forgotten")

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where we have no overriding legal basis for continued processing. Please note that legal retention obligations may prevent us from deleting all data immediately.

11.4 Right to Restriction of Processing

In certain circumstances, you may ask us to restrict data processing — for example, while a correction request is being assessed or where you contest the lawfulness of processing.

11.5 Right to Data Portability

Where processing is based on consent or contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to have it transmitted to another data controller where technically feasible.

11.6 Right to Object

You have the right to object to data processing based on legitimate interests, including profiling, where your individual circumstances justify it. You also have an unconditional right to object to processing for direct marketing purposes.

11.7 Right to Withdraw Consent

Where Hellspin Casino processes your personal data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To opt out of marketing emails, click the "unsubscribe" link in any promotional email or contact [email protected].

11.8 Rights in Relation to Automated Decision-Making

Where decisions that significantly affect you are made solely by automated means (including profiling), you have the right to request human review of such decisions, express your point of view, and contest the outcome.

To exercise any of the privacy rights listed above, please contact our Data Protection Officer at [email protected]. We will verify your identity before processing your request and will respond within 30 days (or within the timeframe required by applicable law).

12. Supervisory Authority — OAIC

If you are an Australian resident and you believe that Hellspin Casino has not handled your personal information in accordance with the Australian Privacy Act 1988, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

We encourage you to contact us directly in the first instance so that we have an opportunity to resolve any concerns before you escalate to the OAIC. For GDPR-related complaints, you may also contact the relevant data protection authority in your country of residence within the European Economic Area.

13. Children's Privacy

Hellspin Casino is an adult gaming platform intended exclusively for players aged 18 years and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal information has been collected from a minor, we will take immediate steps to delete that data. If you believe a minor has registered on our platform, please notify us at [email protected].

14. Links to Third-Party Websites

Our website may contain links to third-party websites or services. This Hellspin Casino privacy policy applies solely to hellspincasino1.org and does not govern the data practices of any external sites. We strongly recommend reviewing the privacy policy and cookie policy of any third-party site you visit, as Hellspin Casino accepts no responsibility for their data protection practices or information security standards.

15. Updates to This Privacy Policy

We may update this Hellspin Casino privacy policy from time to time to reflect changes in our services, legal obligations, or regulatory requirements. When we make material changes, we will notify you via email or a prominent notice on our website prior to the changes taking effect. The date at the top of this page indicates when the policy was last revised. We encourage you to review this privacy policy periodically to stay informed about how we protect your personal data.