Effective Date: 1 January 2024
At The Duff Spin (operating via theduffspin.uk), our primary mission is to deliver an exceptional, entertaining, and fair gaming experience. However, underpinning this mission is our unwavering commitment to your privacy and security. We recognise that to maintain your trust, we must protect your personal data with the highest level of professionalism and vigilance.
This Privacy Policy outlines how we collect, use, store, and protect your personal data in strict compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller Information
For the purposes of applicable data protection legislation, The Duff Spin is the official Data Controller. This means we are responsible for deciding how we hold and use your personal information. If you have any questions regarding this policy, please contact our Data Protection Officer (DPO) at [email protected].
2. Information We Collect
To provide you with a secure and fully licensed gaming environment, we must collect certain categories of personal data. These include:
- Identity Data: First name, maiden name, last name, username or similar identifier, marital status, title, date of birth, and gender.
- Contact Data: Billing address, residential address, email address, and telephone numbers.
- Financial Data: Bank account details, payment card details, and funding source information.
- Transaction Data: Details about payments to and from you, your wagering history, gameplay data, and account balances.
- Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types, operating system, and platform.
- Compliance Data: Know Your Customer (KYC) documentation, Anti-Money Laundering (AML) checks, and responsible gambling markers of harm.
3. How We Use Your Data
We will only use your personal data when the law allows us to. Most commonly, we process your data under the following circumstances:
- Contractual Necessity: To register you as a new player, manage your account, process deposits and withdrawals, and deliver our gaming services.
- Legal Obligation: To comply with our licensing requirements under the UK Gambling Commission, perform necessary AML checks, verify your age and identity, and monitor for responsible gambling purposes.
- Legitimate Interests: To study how players use our services, develop our brand, provide network security, prevent fraud, and enhance our overall user experience.
- Consent: To send you direct marketing communications regarding new games, promotions, and bonuses (you may withdraw this consent at any time).
4. Data Sharing and Third Parties
We do not sell your personal data. However, to operate our casino securely and legally, we may share your information with carefully vetted third parties, including:
- Payment service providers to facilitate secure deposits and withdrawals.
- Identity verification and credit reference agencies for KYC and AML checks.
- Game providers to ensure the seamless operation of our casino library.
- Regulatory authorities, such as the UK Gambling Commission, the National Crime Agency (NCA), and other law enforcement bodies when legally obliged to do so.
- Responsible gambling organisations (e.g., GAMSTOP) to enforce self-exclusion limits.
5. Data Security
Our Casino employs state-of-the-art security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We use SSL (Secure Socket Layer) 256-bit encryption technology to ensure all data transmitted between your device and our servers remains strictly confidential. Furthermore, access to your personal data is strictly limited to employees, agents, and contractors who have a legitimate business need to know, subject to strict confidentiality agreements.
6. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By law, and to comply with UK Gambling Commission and AML regulations, we are required to retain basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for a minimum of five (5) years after they close their account.
7. Your Legal Rights
Under the UK GDPR, you possess several powerful rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct any incomplete or inaccurate data.
- Right to Erasure: You can ask us to delete or remove personal data where there is no good reason for us continuing to process it (subject to our legal retention obligations).
- Right to Object: You can object to the processing of your data where we are relying on a legitimate interest.
- Right to Restriction: You can ask us to suspend the processing of your personal data in specific scenarios.
- Right to Data Portability: You can request the transfer of your personal data to you or a third party.
To exercise any of these rights, please contact our support team or our DPO directly.
8. Cookies
Theduffspin.uk utilises cookies to distinguish you from other users, providing you with a tailored and seamless experience. Cookies help us to ensure your security while logged in and track the effectiveness of our platform. For comprehensive details on the cookies we use and how to manage your preferences, please review our Cookie Policy.
9. Changes to the Privacy Policy
We keep our Privacy Policy under regular review. Any updates will be published on this page, and, where appropriate, notified to you by email or via an account notification. We encourage you to review this policy periodically to stay informed about how we are protecting your personal data.