Privacy Policy

Welcome. We (LollySpins Casino) respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the rights you have under applicable data protection laws, including the European Union’s General Data Protection Regulation (GDPR) where relevant.

Information We Collect

We collect information to provide and improve our services, to meet legal obligations, and to keep accounts secure. The categories below show the types of personal data we may collect:

• Account information: name, email address, username, password, date of birth, and basic profile details you provide when registering.
• Identity and verification data: identity documents and other information you submit to verify your identity when required.
• Contact information: postal address, phone number, and other contact details you choose to provide.
• Technical and usage data: IP address, device and browser details, operating system, referral data, pages visited, and other interaction data collected automatically when you use our website or services.
• Communications: messages and correspondence with our support team, including any information you include in those communications.
• Preferences: marketing preferences and other settings you choose in your account or profile.
• Aggregated or anonymized data: information derived from your personal data but stripped of identifiers so individuals no longer can be identified.

How We Use Your Personal Data

We process personal data for specific, limited purposes. These include:

• Setting up and administering your account and providing the services you request.
• Verifying identity and complying with legal and regulatory obligations.
• Operating, improving, and securing our systems and website.
• Responding to your questions, requests, and complaints.
• Detecting and preventing fraud, abuse, and other unlawful activity.
• Personalizing your experience and providing relevant information and communications where you have agreed to receive them.
• Carrying out internal reporting and analytics to improve our services.
• Managing disputes, enforcing our terms, and protecting legal rights.

Legal Bases for Processing (GDPR)

Where the GDPR applies, we rely on one or more of the following legal bases:

• Performance of a contract: to provide services and perform obligations under our agreement with you.
• Legal obligation: to comply with laws and regulatory requirements.
• Legitimate interests: for fraud prevention, security, service improvement, and enforcing our rights, provided these interests are not overridden by your rights.
• Consent: when you have explicitly agreed to certain processing activities (for example, some marketing communications). You may withdraw consent at any time where withdrawal is permitted.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate the site, remember your preferences, and analyze usage so we can improve the experience. These technologies may include:

• Strictly necessary cookies: required for basic site functions and account access.
• Performance and analytics cookies: to measure and improve site performance.
• Functionality cookies: to remember choices you make on the site.
• Targeting cookies: to personalize content and communications where permitted.

You can control cookies through your browser settings and other tools. Disabling some cookies may affect site functionality.

Data Sharing and Disclosure

We share personal data only as necessary and with appropriate safeguards:

• Service providers: trusted third parties that perform services on our behalf, such as hosting, security, analytics, and customer support.
• Regulators and law enforcement: when required by law or to respond to lawful requests.
• Business transfers: in connection with a merger, acquisition, or sale of assets; continuing obligations will be protected.
• Aggregated or anonymized data: which we may use or share freely for legitimate business purposes.

International Data Transfers

Your data may be transferred to and processed in countries other than where you live. When we do so, we implement appropriate safeguards to protect your data, such as contractual protections or recognized transfer mechanisms, and we ensure adequate protection in accordance with applicable law.

Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, which may include meeting legal, regulatory, tax, or accounting obligations, resolving disputes, and enforcing agreements. When information is no longer needed, we will delete it or render it anonymous.

Your Rights

Subject to applicable law, you have certain rights in relation to your personal data. These may include the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data where we are not required to retain it for legal or legitimate business reasons.
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests, including profiling for automated decision-making where applicable.
• Request portability of your personal data in a structured, commonly used, machine-readable format.
• Withdraw consent where processing is based on consent.

To exercise your rights, contact us via email. We may ask you to verify your identity before fulfilling requests to protect your privacy and security.

Automated Decisions and Profiling

We may use automated processing, including profiling, for purposes such as account security, fraud detection, and to support responsible use of our services. Where automated decisions have legal or similarly significant effects, you have the right to request human review and to challenge the decision where permitted by law.

Security

We apply technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration. These measures include access controls, staff training, secure storage practices, and regular security assessments. No system can be guaranteed completely secure, so we also rely on your cooperation to protect your account credentials.

Children’s Privacy

We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from someone under the legal minimum age, we will take steps to delete the information as required by applicable law.

Responsible Use and Support

We may process data to support responsible use of our services, including identifying behaviour that may indicate harm or misuse and providing appropriate support. If you have concerns about your account or activity, contact our support team and we will assist you.

Changes to This Privacy Policy

We may update this policy to reflect changes in our practices or legal requirements. When we make material changes, we will notify you through the website or by email where appropriate. Please review this policy periodically.

Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our data practices, please contact us via our contact form.