What this page covers - and what it does not
SpinCrypto accounts, deposits and real-money play happen on the official spincrypto.com website, and the personal data processing behind them follows the operator's own Privacy Notice. This page is a structured review of that notice: what the operator processes, why, for how long and with which safeguards. It is written so that a player can understand the data picture before registering, without reading fifteen sections of policy text first.
This website provides information and game demos. It does not create casino accounts, hold balances or process deposits. The company and contacts below belong to the operator of spincrypto.com, not a statement of ownership of this domain.
Data controller and contacts
Personal data behind SpinCrypto accounts is controlled by GLOBONET B.V., a company incorporated in Curaçao under registration number 146296, with its registered address at Kaya Richard J. Beaujon Z/N, Curaçao. The company holds the Curaçao Gaming Authority B2C licence OGL/2024/367/0690, granted in April 2025 in accordance with the National Ordinance on Games of Chance.
| Role | Details |
|---|---|
| Data controller | GLOBONET B.V., registration 146296, Curaçao |
| Licence | CGA B2C licence OGL/2024/367/0690 |
| Operational support | NETGLOBE SERVICES LTD, HE 313864, Limassol, Cyprus |
| Data Protection Officer | [email protected] |
| Customer support | [email protected] |
Categories of personal data
Five groups cover what a SpinCrypto account can involve, and each group has a clear reason to exist:
- Account and identity data - nickname, email address, encrypted password, date of birth, country and city of residence, phone number and identity verification documents such as a passport, national ID or utility bill
- Crypto and financial data - public crypto-asset wallet addresses (hosted or unhosted), network identifiers, deposit and withdrawal transaction hashes (TxIDs), wallet ownership signatures and source-of-funds or wealth documentation
- Technical and blockchain data - IP address, hardware and device parameters, operating system, browser type and language, timezone, login and logout timestamps and risk-scoring telemetry from third-party blockchain analytics
- Usage and gaming data - wagering history, win and loss statistics, bonus usage, session duration and responsible gaming or AML classifications
- Marketing and communication data - email, SMS and Telegram preferences, live chat logs, support tickets and tournament participation records
No payment card details or bank credentials are part of this picture: the operator processes supported crypto-assets only, so the traditional payment data that usually fills a privacy notice is absent by design.
Why information is used
Processing follows applicable data protection legislation, including the GDPR where it applies based on location and the services provided. The purposes are the ordinary ones behind any online account: performing the contract with the player, meeting legal and regulatory obligations, pursuing legitimate interests such as security and fraud prevention, and acting on consent where it is required.
In practice the same data keeps the account working, releases bonuses correctly, routes support requests and keeps payments verifiable on-chain. Responsible gaming processing is a purpose of its own: self-exclusion requests, limits, behaviour monitoring, affordability assessments and responsible gaming support all rely on it.
Crypto services and blockchain processing
The crypto-only setup processes its own class of information: wallet addresses, blockchain network details, transaction identifiers, smart contract interactions, wallet risk classifications and blockchain analytics results. Wallet ownership or control can be verified through signed messages, test transactions or other cryptographic methods.
Two properties of public blockchains matter for expectations. Transactions are immutable and publicly accessible, and third-party analytics providers assess addresses for links to sanctioned entities, darknet marketplaces, mixers and tumblers, ransomware activity and fraudulent or illicit transfers. Because public records cannot be changed by the operator or by anyone else, deletion of on-chain data is not something any privacy request can deliver - and this page states that openly rather than implying otherwise.
Automated checks
Automated checks help identify suspicious activity. Questions about an account review can be directed to the operator’s support team.
International transfers
Personal data may move between Curaçao, Cyprus, the European Economic Area and other jurisdictions in which service providers operate, with appropriate safeguards implemented where required.
Retention and security
Active account data is kept for the duration of the customer relationship. Compliance, transaction, identity verification and gaming records may be retained for up to five years after account closure, or longer where the law requires it - a retention schedule set by regulation rather than by preference.
Security measures listed in the notice include encryption in transit and at rest, role-based access controls, multi-factor authentication, security monitoring and logging, penetration testing, vulnerability assessments, incident response procedures, employee training and regular security reviews.
Your privacy rights
Depending on country of residence and applicable law, players can request access to their personal data, correction, deletion, restriction of processing, objection, portability, and withdrawal of consent where processing relies on it. Questions about personal data go to [email protected], and account or payment questions to [email protected].
One expectation is set honestly: requests apply to the data the operator holds, while public blockchain records are immutable and stay outside anyone's ability to erase.
Restricted jurisdictions and changes
Geolocation and residency information is processed to determine whether the services are accessed from jurisdictions where online gaming is prohibited or restricted. The privacy notice itself may be amended over time, and the latest version is always published on the official website.
What to take from this before registering
Before registering, review the operator’s notice for the data it processes, the purposes and retention periods. Public blockchain records remain even after an account is deleted. Contact the Data Protection Officer with questions about personal data.
Players who want the complete legal text, including every listed provider category and the exact wording of the safeguards, can read the official SpinCrypto privacy notice in full - this page exists to make that text easier to digest, not to replace it.