burger icon
Spin City Casino
Log In

Privacy Policy

This Privacy Policy explains the principles and practices by which spin-city-casino, operating exclusively through the website spin-city-nz.com, collects, uses, and protects the personal information of players and visitors. The policy is essential to ensure compliance with New Zealand privacy laws and applicable international standards. It applies to all users of spin-city-nz.com, including registered players and site visitors, and is effective from 6 November 2025.

Who We Are

OBSERVE: spin-city-casino is owned and operated by Faro Entertainment N.V., a legal entity registered in Curaçao. EXPAND: The company is licensed for remote gaming operations, with a presence in New Zealand for client services. REFLECT: Clear identification of the data controller and contact points is fundamental for regulatory compliance and user transparency.

  • Legal Operator Name: Faro Entertainment N.V.
  • Registered Address: Kaya Richard J. Beaujon Z/N, Curaçao, 00000
  • Company Registration Number: 142227
  • Gaming License: OGL/2025/194/0642 (Curaçao Gaming Control Board, valid through 2025)
  • Data Protection Contact:

What Personal Data We Collect

OBSERVE: spin-city-casino must collect various data categories to fulfill legal, operational, and user experience requirements. EXPAND: Data categories extend beyond user-provided details to include technical, behavioral, and payment information. REFLECT: Full transparency regarding data collection supports legal compliance and builds user trust.

  • Personal Data: Full name, date of birth, residential address, email, phone number, identification documents (for verification and KYC/AML purposes)
  • Technical Data: IP address, device type, operating system, browser type, access times, log files
  • Payment Data: Bank account or credit/debit card details, payment transaction history, withdrawal and deposit records
  • Behavioral Data: Betting and gaming history, account preferences, on-site interactions (clicks, pages viewed), communication logs
  • Cookies & Similar Technologies: Session cookies, persistent cookies, third-party cookies (analytics, advertising), tracking pixels, device fingerprinting

Legal Basis for Processing

OBSERVE: Under New Zealand law (Privacy Act 2020), plus international best practice, data processing requires a clear legal basis. EXPAND: Legal grounds must cover all operational scenarios, including regulatory obligations. REFLECT: Users must be informed of these legal grounds to ensure fairness and accountability.

  1. User Consent: Data may be processed with your explicit consent, e.g., for marketing communications. Consent is obtained via registration forms or account preferences, and may be withdrawn at any time.
  2. Contractual Necessity: Data is processed as required to establish, manage, and fulfill your gaming account, process transactions, and provide requested services.
  3. Legal Obligations: Processing is required to comply with statutory duties (e.g., anti-money laundering (AML) and know-your-customer (KYC) requirements, regulatory reporting).
  4. Legitimate Interests: Data is processed for business purposes including system security, fraud prevention, analytics, and service improvement, provided such interests are not overridden by your rights and freedoms.

Regional Compliance Note: Where required by New Zealand law or applicable international standards, we will seek additional consent or provide enhanced notice before processing sensitive data.

Purpose of Processing

OBSERVE: Data is only processed for clearly defined, lawful purposes. EXPAND: Each processing activity is tied to operational, legal, or business objectives. REFLECT: Transparency about processing purposes allows users to make informed decisions.

  • Provision of Casino Services: Account creation, identity verification, gaming operations, payment processing, and customer support
  • Compliance & Security: Fulfilling legal duties (KYC/AML), fraud detection, risk management, and regulatory reporting
  • Service Improvement: Monitoring and enhancing website functionality, user experience optimization, and troubleshooting
  • Marketing & Promotions: Sending offers, newsletters, and promotional material (only with consent)
  • Analytics: Aggregated data analysis to improve products and services

Disclosure & Sharing

OBSERVE: Data disclosures are strictly limited to necessary parties. EXPAND: Third-party sharing is regulated by data protection agreements and legal requirements. REFLECT: Users are informed about all categories of data recipients and the circumstances for disclosure.

  • Payment Partners: Banks, payment processors, and financial institutions for transaction facilitation
  • Service Providers: IT vendors, cloud hosting, KYC/AML service providers, analytics partners (only where necessary and under contract)
  • Regulatory Authorities: Gaming regulators, law enforcement, and tax authorities (compliance with legal obligations)
  • Affiliates: Marketing partners and affiliates, solely for the purpose of operating bonus programs or referrals
  • Advertising Networks: Third-party marketing services, only with explicit user consent and in accordance with privacy preferences

Protective Clause: All third-party data processors are contractually obliged to implement adequate data protection measures and process personal data only as instructed by spin-city-casino.

International Transfers

OBSERVE: Data may be processed or stored outside New Zealand (notably in Curaçao and Cyprus). EXPAND: International transfers are governed by contractual safeguards. REFLECT: Users are informed about transfer destinations and protective guarantees.

  • Transfer Destinations: Personal data may be transferred to Curaçao (headquarters) and Cyprus (subsidiary operations), and to other jurisdictions where service providers are located.
  • Protection Measures:
    • Standard Contractual Clauses (SCCs) or equivalent safeguards ensuring data protection continuity
    • Data processing agreements with non-NZ/EEA service providers
    • Periodic review of third-party compliance with international privacy standards
  • User Rights: You may request further information about the transfer mechanisms in place for your data by contacting support@spin-city-nz.com.

Regional Compliance Note: All international transfers comply with the New Zealand Privacy Act 2020 and applicable international regulations.

Data Retention

OBSERVE: Data retention policies are set according to legal, regulatory, and operational requirements. EXPAND: Each data category has defined retention periods and deletion criteria. REFLECT: Commitment to data minimization and user control over data lifecycle is a core compliance principle.

  • Personal Data: Retained for the duration of your account activity and no more than 5 years following account closure or last transaction, unless a longer retention period is required by law (e.g., for AML/KYC).
  • Payment Data: Retained for 5 years after transaction or account closure for statutory audit and regulatory purposes.
  • Technical & Behavioral Data: Retained for up to 2 years for analytics and security, unless anonymized for longer-term trend analysis.
  • Deletion Criteria: Data is deleted or anonymized upon expiration of retention period, user-initiated deletion request (where applicable), or when processing purposes are fulfilled.

Legal Disclaimer: Certain data may be retained beyond these periods where required by law or for the exercise or defense of legal claims.

Your Rights

OBSERVE: Users are entitled to robust privacy rights, aligned with the NZ Privacy Act 2020 and international best practices. EXPAND: Procedures and timeframes for exercising rights are specified. REFLECT: Full user empowerment and transparency is ensured.

  1. Right of Access: You may request a copy of personal data held about you.
  2. Right to Correction: You may request correction or update of inaccurate or incomplete data.
  3. Right to Deletion: You may request deletion of personal data, subject to retention requirements imposed by law.
  4. Right to Restrict Processing: You may request temporary suspension of processing under defined circumstances.
  5. Right to Object: You may object to processing based on legitimate interests, direct marketing, or profiling.
  6. Right to Data Portability: You may request a machine-readable copy of your data or have it transferred to another provider.
  7. Right to Withdraw Consent: You may withdraw marketing consent at any time via account settings or by contacting support@spin-city-nz.com.
  8. Procedure for Exercising Rights:
    • Submit your request via email (support@spin-city-nz.com), contact form, or live chat.
    • spin-city-casino will acknowledge and respond within 30 days, free of charge, unless a lawful exception applies.
    • Where permitted by law, requests may be refused or limited (e.g., for ongoing investigations or legal compliance), with reasons provided.

Regional Compliance Note: While spin-city-casino does not operate in Mexico, users are also protected by globally recognized privacy standards and may refer to equivalent GDPR-aligned rights.

Cookies & Tracking Technologies

OBSERVE: Cookies are used for essential functionality, analytics, and advertising. EXPAND: Each cookie type serves a specific purpose with user options for management. REFLECT: Clear information empowers users to make informed choices about tracking technologies.

  • Session Cookies: Enable core website functionality during your visit. Deleted when you close your browser.
  • Persistent Cookies: Remain on your device for a defined period to remember preferences and enhance user experience.
  • Third-Party Cookies: Used by analytics providers (e.g., Google Analytics) and advertising networks, subject to your consent.
  • Purposes: Site navigation, account authentication, analytics, personalized advertising, fraud detection, and service improvement.
  • Cookie Management:
    • Adjust browser settings to block or delete cookies.
    • Manage preferences via the internal cookie control panel on spin-city-nz.com.

Note: Disabling certain cookies may impact website functionality and user experience.

Data Security

OBSERVE: Robust technical and organizational measures are implemented to protect user data. EXPAND: Security controls cover all phases of data processing. REFLECT: Compliance with international security standards is regularly reviewed.

  • Encryption: All data transmissions protected by TLS 1.2+ encryption; sensitive data encrypted at rest and in transit.
  • Authentication & Access Controls: Multi-factor authentication for staff; role-based access restrictions; regular password audits.
  • Security Audits: Regular independent security assessments and vulnerability testing.
  • Staff Training: Ongoing privacy and security awareness programs for all employees.
  • Incident Response: Documented procedures for detecting, reporting, and managing data breaches, including notification to affected users and authorities as required by law.
  • Compliance: Adherence to international standards (ISO 27001, SOC 2) where applicable, with periodic review and certification.

Complaints & Contacts

OBSERVE: Multiple complaint channels are provided for user convenience. EXPAND: Step-by-step procedures and escalation paths are clearly described. REFLECT: Users are empowered to seek redress both internally and through supervisory authorities.

  1. Initial Contact: Contact spin-city-casino's Data Protection Department via:
  2. Complaint Procedure:
    • Submit your complaint or inquiry through any of the above channels.
    • spin-city-casino will confirm receipt within 5 business days and provide a substantive response within 30 days.
    • If dissatisfied with the response, you may escalate your complaint to the relevant supervisory authority:

Updates

OBSERVE: Policy updates are communicated to ensure ongoing transparency. EXPAND: Users receive timely notice and retain control over their data. REFLECT: Version control and changelog maintain accountability.

  • Notification Methods: Users will be notified of material changes by email, prominent website banners, and account dashboard alerts.
  • Advance Notice: For significant changes, at least 30 days' advance notice will be provided before changes take effect.
  • User Options: During the notice period, users may object to changes or close their accounts without penalty.
  • Version Control: This Privacy Policy was last updated on 6 November 2025. Previous versions and a changelog of material changes are available upon request.

Legal Disclaimer: Continued use of spin-city-nz.com after policy updates constitutes acceptance of the revised terms, subject to user rights under New Zealand law.