This Privacy Policy explains how SpinBob, operated by Win Top Ltd, collects, uses, stores, and protects your personal data when you use our web platform. These practices apply fully to all players residing in the United Kingdom. Please read this page carefully so you understand how your information is handled.

What We Collect and Why

When you create an account, we ask for information such as your full name, date of birth, email address, and payment details. This information is necessary to verify your identity, process deposits and withdrawals, and meet our obligations under applicable licensing and anti-money laundering requirements. During transaction processing, we also receive data from payment gateways — such as partial card numbers or transaction references — solely to confirm that payments have been completed correctly.

We collect this data because we are required to know who our players are. Without it, we cannot open an account for you, process funds, or respond to disputes. We do not collect more than we need for these purposes.

How We Protect Your Data

All data transmitted between your browser and our platform is protected using 256-bit SSL encryption. Your personal and financial information is stored on secure servers with restricted access, meaning only authorised personnel who require the data to carry out specific operational tasks are permitted to view it. Internal access controls are reviewed on an ongoing basis to minimise the risk of unauthorised disclosure.

We do not sell your personal data to third parties. There are, however, limited and strictly defined circumstances in which we may share your information with external parties. These include payment processors and identity verification services that help us complete transactions and confirm your identity, as well as regulatory authorities or law enforcement bodies where we are legally obliged to disclose information. Any third party we work with is required to handle your data securely and only for the purpose for which it was shared.

We retain your personal data for as long as your account remains active. Following account closure or a period of inactivity, we keep your records for the duration required by our licensing obligations and applicable law. Once that retention period has passed, your data is securely deleted or anonymised.

You have the right to request access to the personal data we hold about you, to ask us to correct any inaccuracies, or to request the removal of your account data where no legal obligation requires us to retain it. To exercise any of these rights, please contact us through our support channels. We will respond to your request within a reasonable timeframe and in accordance with our obligations under data protection law.

If we make material changes to this Privacy Policy, we will notify you through the web platform or by email before those changes take effect. We encourage you to review this page periodically. Continued use of the platform following any update constitutes your acknowledgement of the revised policy.

If you have concerns about how your data is handled that we have not been able to resolve, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.