This Privacy Policy explains how SpinBob, operated by Win Top Ltd, collects, uses, stores, and shares your personal data when you use our web platform. It applies fully to all players residing in the United Kingdom. Please read it carefully so you understand your rights and our responsibilities.

What We Collect and Why

When you create an account, we ask for information such as your full name, date of birth, email address, and payment details. This information is necessary to verify your identity, process deposits and withdrawals, and meet our obligations under applicable licensing and anti-money laundering requirements. During transaction processing, we also record payment method details and transaction histories to maintain accurate account records and resolve any disputes that may arise.

As you navigate our web platform, we automatically collect certain technical data, including your IP address, browser type, device type, and session activity logs. We use this information to keep the platform secure, detect unusual or potentially fraudulent behaviour, and ensure that pages load correctly for you. We also use cookies — small text files stored in your browser — to remember your preferences, maintain your session, and gather anonymised usage statistics that help us improve the platform over time. You can manage cookie preferences through your browser settings, though disabling certain cookies may affect how parts of the platform function.

How We Protect and Share Your Data

Your data is protected using 256-bit SSL encryption during transmission, and stored on secure servers with restricted internal access. Only staff members who require access to your data in order to carry out their role are permitted to view it. We do not sell your personal information to third parties.

There are limited circumstances in which we share your data with external parties. We work with payment gateways to process your deposits and withdrawals, and with identity verification services to confirm your identity as required by our licensing authority, the Anjouan Gaming Authority (licence number ALSI-202509029-FI1). We may also be required to disclose data to regulatory or law enforcement authorities where we are legally obliged to do so. In each case, data is shared only to the extent necessary and under appropriate confidentiality obligations.

We retain your personal data for as long as your account remains active. Following account closure or a period of inactivity, we keep your data for the period required by our regulatory and legal obligations. Once that retention period has passed, your data is securely deleted or anonymised.

You have the right to request access to the personal data we hold about you, to ask us to correct any inaccuracies, or to request the deletion of your account data where no legal obligation requires us to retain it. To exercise any of these rights, please contact us through the support channels available on our web platform. We will respond to your request within a reasonable timeframe and in accordance with applicable data protection law.

If we make material changes to this Privacy Policy, we will notify you through our web platform or by email before those changes take effect. We encourage you to review this page periodically so that you remain informed about how we handle your data.