Privacy Policy

Version: 1.0  |  Last Updated: 3 November 2026

1. Introduction

Welcome to SpinBoss ("we", "us", "our"), accessible at gaiasglade.co.uk. We are committed to protecting the personal data of every individual who visits or uses our platform. This Privacy Policy explains what personal information we collect, the purposes for which we process it, the legal grounds on which we rely, and the rights available to you under applicable United Kingdom data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this document carefully. By registering an account, depositing funds, or otherwise using any feature of SpinBoss, you acknowledge that you have read and understood the practices described here. This Privacy Policy forms part of, and should be read alongside, our Terms & Conditions and our Responsible Gaming Policy.

2. Data We Collect

We collect personal data from you directly, automatically through our platform, and occasionally from trusted third-party sources. The categories of data we may collect include:

2.1. Identity & Contact Data

• Full legal name, date of birth, and gender
• Residential address, email address, and telephone number
• Copies of identity documents (e.g., passport, driving licence) and proof-of-address documents provided during Know Your Customer (KYC) verification
• Selfie or liveness-check photographs where required for identity confirmation

2.2. Financial & Transaction Data

• Payment method details (e.g., Visa debit card, Mastercard, PayPal account reference, Skrill or Neteller account identifier, Apple Pay token, Google Pay token, Trustly/Open Banking reference, Paysafecard voucher code, Boku mobile payment reference, bank transfer details)
• Deposit amounts, withdrawal requests, and transaction history
• Responsible gaming limits, deposit caps, and self-exclusion records
• Source-of-funds documentation submitted to comply with anti-money laundering obligations

2.3. Technical & Usage Data

• IP address, browser type and version, operating system, and device identifiers
• Session timestamps, pages visited, game history, bet amounts, and in-session behavioural patterns
• Cookie identifiers, pixel data, and similar tracking technologies (see Section 6)
• Log files generated automatically by our servers during your use of the site

2.4. Communications Data

• Content of emails, live-chat transcripts, and support tickets exchanged with our team
• Marketing preferences and opt-in or opt-out records
• Survey responses, feedback forms, and competition entries

2.5. Special Category Data

We do not intentionally seek to collect special category data (e.g., health data, racial or ethnic origin). However, where you voluntarily disclose such information—for example, when contacting our Responsible Gaming team about a personal vulnerability—we will handle it with the highest level of care and will process it only to the extent strictly necessary to assist you.

3. How We Use Your Data

We use the personal data we hold about you for the following purposes:

3.1. Account Management & Service Delivery

To create and administer your SpinBoss account, verify your identity, process deposits and withdrawals using your chosen payment method, and deliver the gaming services you request. Without this processing, we cannot provide you with a functional account.

3.2. Regulatory Compliance & Fraud Prevention

To satisfy our legal obligations under UK anti-money laundering legislation, conduct KYC checks, screen against sanctions lists, detect and prevent fraud, and report suspicious activity to the relevant authorities. We also use your data to enforce our Terms & Conditions and uphold our obligations under applicable gambling regulation.

3.3. Responsible Gaming

To monitor your gaming behaviour for signs of problem gambling, enforce deposit limits, cooling-off periods, and self-exclusion requests, and to proactively reach out where our systems identify at-risk patterns. Further detail is provided in our Responsible Gaming Policy.

3.4. Customer Support

To respond to your enquiries, resolve disputes, and improve the quality of our customer service. Support interactions are logged and may be reviewed for quality assurance and staff training.

3.5. Marketing & Personalisation

Where you have given your consent, to send you promotional materials, personalised offers, and news about SpinBoss products. You may withdraw your marketing consent at any time by contacting us at [email protected] or by using the unsubscribe link in any marketing email.

3.6. Analytics & Platform Improvement

To understand how players use our platform, diagnose technical issues, test new features, and continually improve the user experience. This processing typically relies on aggregated or pseudonymised data wherever practicable.

4. Legal Bases for Processing

Under the UK GDPR, every instance of personal data processing must rest on a valid legal basis. The table below sets out the primary basis we rely on for each processing activity:

Where we rely on legitimate interests, we have carried out a balancing test to ensure that our interests do not override your fundamental rights and freedoms. You may request a summary of that assessment by contacting our Data Protection Officer (see Section 13).

5. Data Sharing & Third Parties

SpinBoss does not sell your personal data to any third party. However, to deliver our services effectively and meet our legal obligations, we share personal data with carefully vetted categories of recipient:

5.1. Payment Processors & Financial Institutions

We share transactional data with payment service providers (such as those operating Visa, Mastercard, PayPal, Skrill, Neteller, Trustly, Apple Pay, Google Pay, Paysafecard, and Boku networks) to process deposits and withdrawals. These providers are independently responsible for their own data processing activities under their respective privacy notices.

5.2. Identity Verification & Compliance Partners

We engage specialist third-party providers to perform electronic KYC checks, sanctions screening, age verification, and source-of-funds assessments. These providers act as our data processors or, in some cases, independent controllers, and are contractually required to process your data only for the stated purpose and in accordance with UK GDPR.

5.3. Regulatory & Law Enforcement Authorities

We may be required by law to disclose personal data to regulatory bodies, law enforcement agencies, tax authorities, or courts of competent jurisdiction. Such disclosures are made only to the extent required or permitted by applicable law.

5.4. Technology & Hosting Providers

Our platform is hosted and maintained by technology partners who process personal data on our behalf under Data Processing Agreements that meet UK GDPR requirements. These include cloud infrastructure providers, software vendors, and cybersecurity firms.

5.5. Responsible Gaming Organisations

In limited circumstances—such as administering a GAMSTOP or similar multi-operator self-exclusion—we may share minimal personal data with accredited responsible gaming bodies to give effect to your self-exclusion request.

6. Cookies & Tracking Technologies

SpinBoss uses cookies and similar technologies to operate the platform, remember your preferences, and gather analytics. A cookie is a small text file stored on your device when you visit our website.

6.1. Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the site to function—for example, to keep you logged in or to complete a transaction. These cannot be disabled without breaking core features.
• Performance & Analytics Cookies: Collect anonymised data about how visitors use our site, allowing us to improve navigation and content. We use tools such as Google Analytics for this purpose.
• Functionality Cookies: Remember your preferences (e.g., language, preferred game lobby view) so that you do not need to re-enter them on every visit.
• Targeting & Advertising Cookies: Used, subject to your consent, to deliver relevant promotional content and to measure the effectiveness of marketing campaigns.

6.2. Managing Your Cookie Preferences

You can control non-essential cookies through the cookie preference centre available via the banner displayed on your first visit to our site. You may also configure your browser to block or delete cookies; however, please note that disabling strictly necessary cookies will impair your ability to use SpinBoss. For further guidance on managing cookies, visit www.allaboutcookies.org.

7. Data Security

We implement a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational measures include:

• Encryption: All data transmitted between your device and our servers is protected using Transport Layer Security (TLS 1.2 or higher). Sensitive data held at rest is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Penetration Testing & Vulnerability Management: Our infrastructure undergoes regular security assessments and penetration tests conducted by qualified third-party specialists.
• Incident Response: We maintain a documented data breach response procedure. In the event of a personal data breach likely to result in a risk to your rights, we will notify the Information Commissioner's Office (ICO) within 72 hours and, where required, inform affected individuals without undue delay.
• Pseudonymisation: Where technically feasible, analytics data is pseudonymised to reduce the risk associated with any potential breach.

Despite our extensive measures, no transmission over the internet is completely secure. You also bear responsibility for maintaining the confidentiality of your account credentials and should notify us immediately at [email protected] if you suspect any unauthorised access to your account.

8. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Our standard retention periods are:

• Account and transaction records: A minimum of five (5) years from the date of your last transaction or the closure of your account, whichever is later. This period reflects anti-money laundering and record-keeping obligations under UK law.
• KYC and identity verification documents: Retained for the duration of the account and for five (5) years thereafter.
• Marketing preferences and consent records: For as long as you hold an account, plus an additional three (3) years to demonstrate compliance with consent requirements.
• Support communications: Up to three (3) years from the date of the most recent interaction, unless a longer period is needed for ongoing dispute resolution.
• Technical logs and analytics: Typically up to thirteen (13) months, in line with ICO guidance on analytics data.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

9. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have a number of rights in relation to the personal data we hold about you. We are committed to facilitating the exercise of these rights promptly and without charge (save in limited, exceptional circumstances permitted by law).

9.1. Right of Access

You have the right to request a copy of the personal data we hold about you, along with information about how it is processed. We will respond to valid Subject Access Requests (SARs) within one calendar month of receipt. Where a request is complex or numerous, we may extend this period by a further two months, in which case we will inform you within the first month and explain the reason for the delay.

9.2. Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. We ask that you notify us promptly of any change to your contact details or other personal information through your account settings or by contacting our support team.

9.3. Right to Erasure ("Right to be Forgotten")

You may request that we delete your personal data in certain circumstances—for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Please note that we may be required to retain certain data to fulfil legal obligations (e.g., AML record-keeping), meaning erasure cannot always be completed in full.

9.4. Right to Restrict Processing

You have the right to request that we limit the way we process your personal data in certain circumstances, such as while the accuracy of data you have contested is being verified, or where you have objected to processing and we are assessing whether our legitimate grounds override yours.

9.5. Right to Data Portability

Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller. Requests for data portability should be sent to [email protected].

9.6. Right to Object

You have the right to object at any time to the processing of your personal data where we rely on legitimate interests as our legal basis, including profiling based on those interests. You also have an absolute right to object to your personal data being processed for direct marketing purposes; upon receipt of such an objection, we will cease that processing immediately.

9.7. Rights Related to Automated Decision-Making & Profiling

Where we make automated decisions that have a significant legal or similarly significant effect on you—for example, automated account suspension triggered by fraud-detection algorithms—you have the right to request human review of that decision, to express your point of view, and to contest the outcome. Please contact our support team at [email protected] if you believe an automated decision has been applied to your account unfairly.

9.8. How to Exercise Your Rights

To exercise any of the rights listed above, please submit a written request to [email protected] or by post to the address provided in Section 13. We will verify your identity before processing any request. If you are dissatisfied with our handling of your personal data or our response to a rights request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113. You also have the right to seek judicial remedy.

10. International Data Transfers

The majority of the personal data we process is stored on servers located within the United Kingdom or the European Economic Area (EEA). However, some of our third-party service providers—including technology vendors, analytics platforms, and payment processors—may operate in, or transfer personal data to, countries outside the UK and the EEA that do not benefit from an adequacy decision issued by the UK Secretary of State.

In such cases, we take all reasonably practicable steps to ensure that your personal data continues to receive an equivalent level of protection. The safeguards we rely upon include:

• UK International Data Transfer Agreements (IDTAs) or the UK Addendum to the EU Standard Contractual Clauses, incorporated into contracts with recipients outside the UK
• Transfers to countries that the UK Secretary of State has recognised as providing an adequate level of data protection
• Binding Corporate Rules (BCRs) approved by the ICO, where applicable

You may request further information about the specific safeguards applied to any international transfer by contacting our Data Protection Officer at [email protected].

11. Minors

SpinBoss is strictly intended for individuals who are 18 years of age or older. We do not knowingly collect, process, or retain personal data relating to persons under the age of 18. As part of our registration and verification process, all customers are required to provide proof of age, and we employ third-party age verification services to support this obligation.

If we become aware that we have inadvertently collected personal data from a person under the age of 18, we will take immediate steps to delete that data and close the relevant account. If you believe that a minor may have created an account or submitted personal data through our platform, please notify us immediately at [email protected]. For further guidance on protecting younger people from gambling-related harm, please refer to our Responsible Gaming Policy.

12. Changes to This Policy

We review this Privacy Policy regularly and may update it from time to time to reflect changes in our processing activities, applicable law, or regulatory guidance issued by the ICO. When we make material changes, we will notify you by email (sent to the address associated with your account) and by displaying a prominent notice on our website at least 14 days before the changes take effect. Minor or administrative changes—such as corrections of typographical errors or updated contact details—may be made without prior notice.

The version number and "Last Updated" date at the top of this document will always reflect the most current iteration. We encourage you to revisit this page periodically. Your continued use of SpinBoss after any updated version has taken effect constitutes your acceptance of the revised terms, to the extent permitted by applicable law.

13. Contact Information

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way we handle your personal data, you are welcome to reach us through the following channels:

13.1. General Support

For general account and service enquiries, please contact our customer support team:
Email: [email protected]

13.2. Data Protection Officer (DPO)

For all privacy-related matters, data subject rights requests, and queries regarding this Policy, please contact our Data Protection Officer directly:
Email: [email protected]

13.3. Regulatory Contacts

If you wish to raise a concern with the UK data protection supervisory authority:
Information Commissioner's Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113

13.4. Responsible Gambling Support Organisations

If you or someone you know needs help with problem gambling, the following free, confidential services are available in the United Kingdom:

• GamCare – National Gambling Helpline: 0808 8020 133 | www.gamcare.org.uk
• BeGambleAware – National Gambling Support Network: www.begambleaware.org
• Gamblers Anonymous UK – Peer support meetings across Great Britain: www.gamblersanonymous.org.uk
• Gordon Moody – Residential treatment and online Gambling Therapy: www.gordonmoody.org.uk
• GAMSTOP – Free multi-operator self-exclusion service: www.gamstop.co.uk
• NHS National Problem Gambling Clinic – Specialist clinical support: www.cnwl.nhs.uk