Sunny Spins Privacy Policy

Who Controls Your Data

The data controller for Sunny Spins is Internet Gaming Services, the operator that runs the casino under a Curacao gaming licence. The operator is established in Curacao, and no street address is published for it on the site. Every privacy request is handled through [email protected], and we act on it as the controller.

Who We Share Your Data With

We share personal data only where the service you use requires it. Payment details go to the network behind the method you choose: Visa, Mastercard, Skrill, Neteller, your bank for bank transfers, or the Bitcoin, Ethereum, Litecoin and Dogecoin networks for crypto, where transactions are public by design. Game sessions run on Realtime Gaming and SpinLogic Gaming software, which receive the technical data needed to load and settle a round. Identity documents are seen by our verification staff and are not published or sold. We do not sell personal data to advertisers. Where a court order or a regulator with authority over our licence requires disclosure, we release only the records that are requested.

What Information We Collect

Registration collects your first name, last name, email address and password across the three sign-up steps. Payments add the method used, amounts, dates and transaction IDs or crypto hashes. Verification adds an Australian driver’s licence, passport or Medicare card and a proof of address such as a utility bill or bank statement. Technical data includes IP address, device type, browser, session logs and game history, and cookies add identifiers described below.

When Your Data Leaves Australia

Because Internet Gaming Services is established in Curacao and the casino games run on the operator’s servers, your data is processed outside Australia. Australia has no adequacy arrangement with Curacao, so we limit the data sent abroad to what is needed to run your account, and we apply the same security controls to it wherever it is processed. By registering, you accept this transfer.

Complaints to a Supervisory Authority

If you think we have mishandled your personal data, write to [email protected] first so we can review the case. You may also complain to the Office of the Australian Information Commissioner (OAIC), which oversees privacy under the Privacy Act 1988. Bringing a complaint to the authority does not affect your other rights.

Cookies and How Long We Keep Your Data

We use strictly necessary cookies to keep you logged in and run the cashier, and analytics cookies to see which pages and games are used. You can accept or decline non-essential cookies in the cookie notice and clear them at any time in your browser settings, though blocking necessary cookies will stop login from working.

Account data is kept while your account is open. After closure we retain identity, payment and game history records for as long as anti-money-laundering, tax and dispute rules require, and then delete or anonymise them. Accounts inactive for 180 consecutive days can have balances reduced to zero, and the account data follows the same retention rule after that.

Why We Process Your Data

We process data to create and run your account, deliver games from Realtime Gaming and SpinLogic Gaming, pay out withdrawals, and apply bonus rules such as the 40x and 50x wagering requirements. The legal bases are performance of our contract with you, our legal duty to verify identity and prevent fraud and money laundering, our legitimate interest in securing the platform, and your consent for optional cookies and marketing emails, which you can withdraw at any time.

Rights Over Your Data

You can ask us for access to the data we hold, correction of anything inaccurate, deletion, restriction of processing, objection to processing based on our legitimate interest, and a portable copy of data you supplied. We answer requests after confirming your identity, and we may keep records we are legally required to retain, such as verification files and payment history. Withdraw marketing consent by using the unsubscribe link in an email or by writing to us.

Contacting Us About Your Data

Send access, correction, deletion or objection requests to [email protected] from the email address registered on your account, quoting your username and describing the request. We may ask for a verification document before releasing or deleting data. Players must be 18 or over, and we do not knowingly collect data from minors.