Privacy Policy

We protect personal data and explain, in plain terms, how information is collected, used, shared, and secured when you use SpinRise in Canada. By accessing or using our services, you agree to this Privacy Policy, alongside related terms and cookie rules.

Who runs SpinRise

SpinRise is operated by Hollycorn N.V. (registration 144359) and licensed by the Curaçao Gaming Control Board under OGL/2023/176/0095. We act as the data controller and are responsible for privacy decisions affecting your account and activity.

Age limits and minors

Our services are for adults only. In some places, the minimum age is described as 18+ and, in other contexts, as 19+ (or the legal age in your jurisdiction). We do not knowingly collect personal data from minors, and underage accounts are blocked or removed when identified.

What we collect

We collect information needed to run accounts, support gameplay, process transactions where applicable, and meet KYC/AML requirements. Some data is provided by you; some is generated through use of the services, devices, and operational checks.

• Identity and contact details: name, date of birth, address, email, phone, and sometimes username, gender, or ID numbers.
• KYC documents: identity documents, proof of address, and source of funds or wealth.
• Financial and transaction records: deposits, withdrawals, wagering activity, and payment method details.
• Gameplay and account metrics: sessions, bonuses, limits, and gameplay/RTP-related statistics.
• Technical and communications data: IP address, device and browser details, time zone, cookies, page actions, and chat or call records.

Some information may fall into special categories when you provide it or when required, including responsible gaming notes, RG-related health hints, or racial/ethnic data visible within documents.

How we use information

We use data to provide services and keep the platform stable, secure, and compliant. Some processing is necessary to perform the contract with you; other processing may be required by law, rely on legitimate interests, or depend on consent.

• Open and administer accounts, deliver games, and manage service communications.
• Process payments and apply closed-loop controls where applicable.
• Perform KYC, AML, fraud, and risk checks; keep audit trails and assign risk flags.
• Maintain security, prevent abuse (including VPN or proxy checks), and monitor for suspicious activity.
• Personalize content and promotional messages when you opt in, and manage opt-out preferences.

Sharing and disclosures

We share information only in defined situations and with appropriate safeguards. Recipients may include group companies and vetted staff under confidentiality, as well as partners needed to deliver services.

• Game providers and studios supporting gameplay delivery.
• Payment processors and service providers supporting deposits and withdrawals.
• KYC/AML and verification vendors, including age and ID checks and sanctions/PEP screening tools.
• Professional advisors under contract, and regulators or law enforcement when required.
• Marketing vendors only when you have agreed to marketing; cross-brand marketing requires consent.

If we go through a merger, acquisition, or business transfer, relevant data may be transferred with the business, with notice where appropriate.

International processing

Your information may be transferred or stored outside of Canada, including outside the EU/EEA in certain setups. We use safeguards such as Standard Contractual Clauses and similar measures, and we take reasonable steps to protect data wherever it is processed.

Retention and deletion

We keep personal data only as long as needed for service operations, dispute handling, and legal or regulatory duties. For AML record-keeping, some core records must be retained for at least 5 years after your last transaction or account closure. When no longer needed, we securely delete or anonymize information, and we may keep anonymized statistics.

Your rights and choices

You can request access, correction, deletion where legally permitted, restriction, objection in legitimate-interest cases, and portability where available. You can also withdraw consent for future use, including marketing preferences. We may request identity verification to process certain requests.

We aim to respond within one month. Complex requests may take longer, and we will provide notice where appropriate. If you do not receive a reply within 10 days, contacting us through another channel may help.

Security basics

We use technical and organizational measures such as encryption, secure server infrastructure, access controls, authentication protocols, and ongoing monitoring. Account security also depends on you; keep credentials private and consider enabling 2FA when available.

Cookies and device data

Cookies and similar technologies help personalize content and measure performance. You can disable cookies through browser settings, though some functionality may be limited as a result.

Contact and support

For privacy questions, data requests, or marketing preferences, support is available via [email protected] or live chat. Our Data Protection Officer can be reached at [email protected].

If you prefer, you can also reach our Privacy Team through spinbara.win, when it suits you.

Quick policy snapshot

Updates to this policy

We may update this Privacy Policy to reflect legal changes, new services, or improvements to our practices. Updates are posted with an updated effective date, and continued use indicates acceptance of the latest version.