Spin Granny Privacy Policy

Spin Granny is operated by Ceshiroza SRL, a company registered in Costa Rica and the holder of gaming licence ALSI-202408027-FI2 issued by the Gaming Board of Anjouan, Union of the Comoros. This page describes the personal data we collect from players and site visitors, the purposes for which we process it, and the rights available to you. Ceshiroza SRL is not established in Canada and does not hold an iGaming Ontario licence; data processing is conducted under the operator’s own data-handling commitments and the terms of its Anjouan authorisation, with Costa Rican law governing the Terms and Conditions.

What information we collect

We collect personal data across several categories depending on how you interact with the site. Account registration data includes your name, date of birth, residential address, email address, and phone number. KYC verification requires government-issued identity documents, proof of address, and copies of payment methods used. We also collect gameplay data covering deposits, withdrawals, bets placed, session times, and game selections, as well as device and network data such as IP address, browser type, operating system, and device identifiers. Cookies and similar technologies are used for site functionality and analytics purposes.

How we use your information

We process personal data to provide the service: creating and maintaining your account, processing deposits and withdrawals, and enabling gameplay across casino, live casino, and sportsbook products. We use identity and transaction data to meet our regulatory obligations under the licence, including age verification, KYC checks, anti-money laundering monitoring, and fraud prevention. Device and session data supports security monitoring and the investigation of suspected collusion or fraudulent activity. Where you have opted in, we use your contact details to send marketing communications, which you may withdraw at any time.

We share personal data with licensed payment processors to handle deposits and withdrawals, and with third-party identity and fraud-prevention providers to carry out KYC and anti-fraud checks. Data may be disclosed to the Gaming Board of Anjouan, Union of the Comoros (licence reference ALSI-202408027-FI2) and to law enforcement or regulatory bodies where we are legally required to do so. We do not sell personal data to third parties.

Data retention

We retain personal data for five years after a player stops using the service, in line with our regulatory obligations and anti-money laundering requirements under the Anjouan licence. Certain records, including identity verification documents and transaction logs, may be kept for the full retention period regardless of account status. After the applicable period expires, data is deleted or anonymised.

Your rights

You have the right to request a copy of the personal data we hold about you. You may ask us to correct inaccurate or incomplete data. You can request erasure of your data where no legal obligation requires us to retain it. You have the right to restrict or object to certain processing activities. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. If you have a complaint about how we handle your data, you may raise it with the relevant supervisory authority in your country of residence.

Contact us

Privacy queries can be sent to [email protected] , which is monitored around the clock with replies issued within one business day. For account closure requests, you may also write to [email protected] . No separate Data Protection Officer is currently named for this operator; the support address is the correct point of contact for all data-related requests.