Privacy Policy
HellSpin collects a limited set of personal information in order to run a licensed gaming service, meet its regulatory obligations and keep accounts secure. The sections below describe what is gathered, the lawful basis for holding it and how you can exercise control over your record.
Updated 9 Feb 2026
Categories of information held
Registration creates a core record containing your full name, date of birth, residential address, email address, telephone number and chosen currency. Verification adds copies of identity and address documentation, which are stored in encrypted form and accessible only to compliance staff.
Transactional information covers deposits, withdrawals, bonus credits, stakes and outcomes. This ledger is retained in full because licensing conditions require an auditable history of every movement of funds.
Technical information is captured automatically each time you connect: IP address, approximate geographic region derived from it, device type, operating system, browser build and referring page. Cookies and similar identifiers record session state and preferences; non-essential categories are only set once you have given consent through the banner presented on first visit.
Purposes and legal grounds
Contractual necessity covers everything required to open and operate your account — authenticating logins, processing payments, crediting winnings and answering support enquiries. Without this information the service cannot be provided.
Legal obligation covers anti-money-laundering checks, sanctions and politically-exposed-person screening, source-of-funds enquiries above defined thresholds, and reporting to the Curacao Gaming Control Board, the Estonian Tax and Customs Board or the Kahnawake Gaming Commission where a regulator requires it under licence OGL/2024/1676/0905.
Legitimate interest supports fraud detection, bonus-abuse analysis, aggregate performance reporting and the security monitoring that protects the platform as a whole. Consent applies separately to promotional email, SMS and push notifications, each of which can be switched off at any time without affecting your ability to play.
Disclosure and international transfer
We share information with payment institutions and card acquirers to settle transactions, with identity-verification providers to confirm documents, and with the game studios whose titles appear in our lobby where a specific dispute over a round needs investigating. Each recipient is bound by written terms limiting use to the stated purpose.
Regulators, auditors and law-enforcement bodies receive information where a lawful request is made. We do not sell personal information to advertisers or data brokers under any arrangement.
Some processing takes place outside your country of residence. Where information leaves the European Economic Area we rely on standard contractual clauses or an adequacy decision, and Australian users' information is handled in line with the Australian Privacy Principles regardless of where the receiving server sits.
Retention periods and your rights
Account and transaction records are held for a minimum of five years after the account closes, reflecting anti-money-laundering law. Verification documents follow the same schedule. Marketing preference records persist for as long as the preference is relevant, and technical logs are ordinarily purged within twelve months unless attached to an open investigation.
You may request a copy of your record, correct anything inaccurate, ask for deletion of information we are not obliged to keep, restrict or object to particular processing, or receive a portable export of the details you supplied. Requests are answered within thirty days and identity is confirmed before any disclosure is made.
Where a self-exclusion is in force, the identifying details needed to enforce that exclusion will be retained even if a deletion request is submitted. Complaints about how HellSpin handles personal information may be escalated to the Office of the Australian Information Commissioner or to the supervisory authority in your own jurisdiction.
Support contacts
- Data Protection Officer — reachable through the privacy request form in the HellSpin help centre
- HellSpin customer support — available around the clock via live chat for account and verification queries
- Office of the Australian Information Commissioner (oaic.gov.au) for unresolved privacy complaints
This document describes HellSpin's current handling of personal information and is reviewed periodically. Where a provision conflicts with mandatory law in your place of residence, that law prevails.