Privacy Policy

Effective Date: 11 May 2026.

Last Updated: 11 May 2026.

Operator: SpinFin (spin-fin.co).

Jurisdiction: United.

Contact: [email protected].

1. Introduction and Scope

Welcome to SpinFin. We are committed to protecting and respecting your privacy while providing a premium gaming environment. This Privacy Policy explains how SpinFin collects, uses, protects, and shares your personal data when you use our website (spin-fin.co), our mobile applications, or any of our related services.

As a UK-based operator catering to the British punter, SpinFin operates in strict accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Furthermore, as an entity operating within the iGaming sector, we adhere to the rigorous standards set forth by the UK Gambling Commission (UKGC) regarding player protection and data integrity.

By registering an account or using our services, you acknowledge that your personal information will be handled as described in this policy. If you do not agree with these terms, please refrain from using the platform.

2. The Data Controller

The data controller responsible for your personal information is SpinFin. We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact us at [email protected].

3. Data We Collect About You

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store, and transfer different kinds of personal data about you which we have grouped together as follows:

3.1 Identity Data

Includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth, and gender. Under UKGC regulations, we must verify that you are 18+ before you can place a flutter on our site.

3.2 Contact Data

Includes billing address, residential address, email address, and telephone numbers.

3.3 Financial Data

Includes bank account and payment card details. We process transactions involving GBP (£) via various methods including Visa/Mastercard, PayPal, Neteller, Skrill, Paysafecard, Apple Pay, Google Pay, and direct bank transfers.

3.4 Transaction Data

Includes details about payments to and from you and other details of products and services you have purchased from us, including your betting history and wins.

3.5 Technical Data

Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.

3.6 Profile Data

Includes your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.

3.7 Usage Data

Includes information about how you use our website, products, and services, including your interaction with sports markets like the Premier League, horse racing, or cricket.

3.8 Marketing and Communications Data

Includes your preferences in receiving marketing from us and our third parties and your communication preferences.

4. How We Collect Your Data

We use different methods to collect data from and about you including:

• Direct Interactions: You may give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you create an account, place a bet, or report a problem.
• Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.
• Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties and public sources, such as: Analytics providers. Credit reference agencies and identity verification services (to comply with UKGC "Know Your Customer" or KYC requirements). Providers of technical, payment, and delivery services.

5. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

5.1 Performance of Contract

This means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract. This includes managing your bets, processing your "quid" or "wedge" withdrawals, and providing customer support.

5.2 Legitimate Interests

We may use your data for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. This includes conducting market research, improving our website, and preventing bonus abuse.

5.3 Comply with a Legal or Regulatory Obligation

As a UKGC-licensed entity, we have a legal obligation to process data to prevent money laundering, ensure responsible gambling, and verify the age of our punters. This includes checking data against GamStop databases to ensure self-excluded individuals cannot access the platform.

6. Purposes for Which We Will Use Your Personal Data

7. Marketing and Bonus Culture

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. In the UK, we adhere to strict rules regarding how bonuses (like a "fiver" or "tenner" free bet) are marketed.

7.1 Promotional Offers

You may receive marketing communications from us if you have requested information from us or opened an account with us and you have not opted out of receiving that marketing. We ensure that all bonus terms, including wagering requirements, are stated clearly and upfront to avoid any confusion for the punter.

7.2 Third-Party Marketing

We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.

7.3 Opting Out

You can ask us or third parties to stop sending you marketing messages at any time by logging into the website and checking or unchecking relevant boxes to adjust your marketing preferences or by following the opt-out links on any marketing message sent to you.

8. Responsible Gambling and Data Protection

At SpinFin, your safety is paramount. We take our responsibility toward the UKGC and the "BeGambleAware" initiative very seriously.

8.1 Monitoring and Interaction

We use automated systems to monitor your gambling patterns. This is to identify potential signs of problem gambling. If our systems flag a concern, we may use your Contact Data to reach out to you or apply restrictions to your account, such as deposit limits or cooling-off periods.

8.2 GamStop and Self-Exclusion

In compliance with UK regulations, we integrate with GamStop. If you have registered with GamStop for national self-exclusion, we receive and process this data to ensure you are prevented from accessing our gambling facilities. We also provide links and data sharing with organizations like GamCare (0808 8020 133).

9. Disclosures of Your Personal Data

We may have to share your personal data with the parties set out below for the purposes set out in Section 6:

• Internal Third Parties: Other companies in our corporate group.
• External Third Parties: * Service providers acting as processors who provide IT and system administration services. Professional advisers including lawyers, bankers, auditors, and insurers. HM Revenue & Customs, regulators (including the UKGC), and other authorities. Credit reference and fraud prevention agencies. Payment providers (e.g, PayPal, Skrill, or your bank) to facilitate the transfer of your winnings or "wedge."

10. International Transfers

We may share your personal data within our corporate group. This may involve transferring your data outside the United Kingdom. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.
• Where we use certain service providers, we may use specific contracts approved for use in the UK which give personal data the same protection it has in the UK.

11. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

12. Data Retention

How long will you use my personal data for?

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, and the applicable legal requirements. Under UK law, we are generally required to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers for tax and anti-money laundering purposes.

13. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include:

• Request access to your personal data (commonly known as a "data subject access request").
• Request correction of the personal data that we hold about you.
• Request erasure of your personal data.
• Object to processing of your personal data where we are relying on a legitimate interest.
• Request restriction of processing of your personal data.
• Request the transfer of your personal data to you or to a third party.
• Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us at [email protected].

13.1 No Fee Usually Required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

13.2 What We May Need From You

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

14. Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

15. Complaints

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

16. Changes to the Privacy Policy

We keep our privacy policy under regular review. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

17. Specific UKGC Compliance Provisions

17.1 Verification and KYC

To comply with our license conditions, we must verify your identity. This means we may share your data with third-party agencies to confirm you are who you say you are and that you are of legal age. This protects the integrity of the "flutter" and prevents underage gambling.

17.2 Bonus Abuse and Fraud

We monitor patterns of play to detect bonus abuse. If we identify fraudulent activity or attempts to circumvent our wagering requirements, we reserve the right to share relevant data with other operators or the UKGC as part of our duty to maintain a fair and crime-free gambling environment.

17.3 Responsible Gambling Interactions

If you interact with our responsible gambling tools — such as setting a limit on how many "nicker" you can deposit per week — this data is stored securely and used solely to enforce those limits for your protection.

18. Glossary of Terms

• UK GDPR: The Retained Regulation (EU) 2016/679 (General Data Protection Regulation) as it forms part of the law of England and Wales, Scotland and Northern Ireland.
• Punter: A customer of SpinFin who places bets on our platform.
• Wedge: Refers to a significant amount of money or a large win.
• Flutter: A casual or small bet.
• KYC: Know Your Customer; the process of verifying a player's identity and address.

19. Contacting Us

If you have any questions about this Privacy Policy or our data protection practices, please contact our support team. We are here to ensure that your experience at SpinFin is both enjoyable and secure.

Email: [email protected].

Regulator: UK Gambling.

Advocacy: BeGambleAware.org | GamCare |.

---

SpinFin is dedicated to fair play and data transparency. Play Responsibly. 18+ Only.