SpinKing Privacy Policy

Last updated: June 8, 2026

This privacy policy explains how Happytiger ApS, operating Spin King UK, collects, uses and protects personal data when users visit or interact with the platform. The policy applies to all services provided under the Great Britain remote gambling licence issued by the UK Gambling Commission under account number 57641. By accessing the platform or creating a gambling account, users agree to the processing of their information as described in this document.

The document covers data collection during registration, gameplay, payment transactions and customer support interactions. It outlines the legal basis for processing, explains how data is shared with third parties such as payment providers and regulators, and describes the measures taken to protect user information. The policy also clarifies user rights, including access, rectification, erasure and restriction of processing, and explains how individuals can exercise these rights through the support channels provided.

Interpretation and Definitions

Understanding the terms used in this policy helps users recognise how their information is processed throughout their interaction with the platform. The definitions below connect legal terminology to real-world actions and describe the entities involved in data processing.

Core Terms

The operator refers to Happytiger ApS, a Danish company registered under number 41473150, which operates SpinKing UK under a Great Britain remote gambling licence. The company processes personal data as the data controller, determining the purposes and means of processing. The platform refers to the website and all associated services accessible through Spinking, including account management, gameplay, payments and customer support.

Personal data means any information relating to an identified or identifiable individual, including name, email address, payment details, gameplay records and device identifiers. Processing includes any operation performed on personal data, such as collection, storage, use, disclosure or deletion. A user is any individual who visits the platform, whether or not they create a gambling account.

Account and Device Terms

A gambling account is a personal profile created by a user aged 18 or over who is located in Great Britain and has completed the registration process. Only one account per individual is permitted under the operator’s terms. A device refers to any computer, mobile phone, tablet or other hardware used to access the platform. Cookies are small files stored on the device to enable certain functions, track usage and personalise content.

Categories of Personal Data Collected

The platform collects several types of personal data during registration, account activity, payment processing and customer support interactions. The data collected serves specific operational, legal and security purposes and is processed only to the extent necessary for those purposes.

Identity and Contact Data

Identity data includes full name, date of birth, nationality and government-issued identification documents such as a UK passport or driving licence. This information is required to verify that users are aged 18 or over, to comply with UK Gambling Commission licensing conditions and to prevent duplicate accounts. Contact data includes email address, phone number and residential address, which are used for account communication, verification and regulatory reporting.

Financial and Transaction Data

Payment data includes card numbers, account details and transaction history related to deposits and withdrawals. This data is collected to process payments through Visa Debit, Mastercard Debit, PayPal and Instant Bank Transfer methods. Payment ownership checks may require proof of payment method, such as a bank statement or card image. Large deposits above £1,000 or withdrawals above £1,000 may trigger additional affordability or source-of-funds reviews in line with anti-money-laundering procedures.

Technical and Usage Data

Technical data includes IP address, device identifiers, browser type, operating system and connection details. This information is collected automatically when a user accesses the platform and is used for security monitoring, fraud prevention and account protection. Usage data includes gameplay records, session times, game selections, bonus activity and promotional participation. This data helps the operator monitor responsible gambling limits, detect unusual patterns and comply with safer-gambling obligations under the UK Gambling Commission framework.

Purposes of Data Processing

Personal data is processed for defined purposes that relate to service provision, legal compliance, security and user experience. Each processing activity serves a specific function and is carried out in accordance with applicable data protection legislation.

Service Provision and Account Management

Data is used to create and maintain gambling accounts, verify age and identity, process deposits and withdrawals, and provide access to slots, jackpot games and casino content. Account activity is monitored to enforce the one-account-per-person policy, detect duplicate accounts and prevent bonus abuse. Customer support records are maintained to respond to queries, complaints and technical issues submitted through telephone support on 0800 102 6335 or email at support@spinking.co.uk.

Regulatory Compliance and Security

Processing is required to meet licensing conditions imposed by the UK Gambling Commission, including anti-money-laundering checks, identity verification, address verification and payment ownership reviews. KYC documents such as passport, driving licence and utility bills dated within three months are collected before the first withdrawal to confirm user identity and address. Enhanced reviews may be triggered by large transactions, jackpot wins, unusual activity or safer-gambling concerns. Security monitoring includes IP analysis, device fingerprinting and gameplay pattern review to detect fraud, account sharing, IP-hiding software and prohibited activity.

Analytics and Marketing

Usage data is analysed to improve platform performance, personalise game recommendations and develop promotional offers such as Royal Treats and newsletter rewards. Marketing communications may be sent to users who have provided consent, and users can withdraw consent at any time through account settings or by contacting support. Promotional activity is monitored to prevent bonus abuse, including multiple accounts, false registration details and collusion. Cookies and tracking technologies are used to measure traffic, track user preferences and deliver targeted content.

Legal Basis for Data Processing

Under UK data protection legislation, personal data can only be processed if there is a valid legal basis. The operator relies on four main legal grounds, depending on the nature of the processing activity.

Consent

Consent is obtained when users agree to receive marketing communications, accept cookies or opt in to specific promotional offers. Users can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. Consent is not used as the legal basis for core account functions, such as age verification or payment processing, because these activities are required for service provision and legal compliance.

Contractual Necessity

Processing is necessary to perform the gambling contract between the user and Happytiger ApS. This includes account creation, deposit and withdrawal processing, game provision, bonus management and customer support. Without this processing, the operator cannot provide access to the platform or process transactions. Contractual necessity also covers enforcement of terms and conditions, such as the one-account policy and bonus playthrough requirements.

Legal Obligation

Processing is required to comply with UK Gambling Commission licensing conditions, anti-money-laundering regulations, safer-gambling obligations and tax reporting. This includes KYC checks, affordability reviews, source-of-funds verification and GAMSTOP self-exclusion enforcement. The operator must retain certain records for regulatory audit and inspection purposes, even after an account is closed.

Legitimate Interests

The operator processes data based on legitimate interests where necessary for fraud prevention, security monitoring, platform improvement and business administration. This includes detecting duplicate accounts, preventing bonus abuse, monitoring gameplay patterns and maintaining internal records. Legitimate interests are balanced against user rights, and processing is carried out only where it does not override individual privacy rights.

Data Sharing and Disclosure

Personal data is shared with selected third parties to enable payment processing, comply with regulatory obligations and provide technical services. Data is not sold to third parties or used for purposes unrelated to platform operation and compliance.

Service Providers

Payment providers such as Visa, Mastercard, PayPal and TrueLayer process financial transactions on behalf of the operator. These providers receive payment details, transaction amounts and account identifiers required to complete deposits and withdrawals. Hosting and technical service providers process data to maintain platform infrastructure, manage databases and provide customer support tools. Game providers such as Pragmatic Play, NetEnt, Big Time Gaming and Nolimit City may receive gameplay data to deliver slot and casino content.

Regulators and Law Enforcement

The UK Gambling Commission may request access to account records, transaction history, KYC documents and gameplay data as part of licensing compliance and audit procedures. The operator is legally obliged to respond to such requests and to report suspicious activity under anti-money-laundering regulations. Law enforcement agencies may request data under legal powers, such as court orders or statutory notices, and the operator will comply where required by UK law.

Affiliates and Business Transfers

Data may be shared within the corporate group to which Happytiger ApS belongs for administrative, compliance and operational purposes. In the event of a merger, acquisition or sale of business assets, personal data may be transferred to the acquiring entity, subject to continued compliance with this policy and applicable data protection legislation.

Data Retention and Deletion

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal and regulatory obligations. Retention periods vary depending on the type of data and the reason for processing.

Retention Criteria

Account data, including identity, contact and payment information, is retained for the duration of the gambling account and for a period after closure to meet regulatory, tax and legal obligations. Transaction records are retained for at least six years after the last transaction, in line with financial record-keeping requirements. KYC documents are retained for the period required by anti-money-laundering and licensing regulations, typically five years after account closure.

Gameplay and usage data is retained for as long as necessary to monitor responsible gambling, detect fraud and comply with licensing conditions. Marketing data is retained until consent is withdrawn or the account is closed. Once retention periods expire, data is either deleted or anonymised so that it can no longer identify an individual.

Account Closure and Data Removal

When a user closes their account, active gameplay and promotional data is removed from operational systems, but historical records required for compliance are retained. Users who wish to request deletion of their data can contact support at support@spinking.co.uk, but the operator may be required to retain certain records under UK Gambling Commission licensing conditions and financial regulations.

User Rights Under Data Protection Legislation

Users have rights over their personal data under UK data protection legislation. These rights can be exercised by submitting a request through the support channels provided. The operator will respond to valid requests within the timeframes required by law, typically within one month.

Access and Rectification

Users have the right to request a copy of the personal data held about them. This includes account details, transaction history, KYC documents and communication records. The operator will provide the data in a structured, commonly used format such as PDF or CSV. Users also have the right to request correction of inaccurate or incomplete data. This can be done through the account settings area or by contacting customer support.

Erasure and Restriction

Users can request deletion of their data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when consent is withdrawn. However, the operator may refuse deletion if retention is required under legal or regulatory obligations, such as anti-money-laundering record-keeping or licensing conditions. Users can also request restriction of processing, meaning the data is stored but not actively used, while a dispute is resolved or verification is completed.

Data Portability and Objection

Where processing is based on consent or contractual necessity, users have the right to receive their data in a portable format and transmit it to another controller. Users can object to processing based on legitimate interests, including direct marketing. Objections will be respected unless the operator can demonstrate compelling legitimate grounds that override user rights, such as fraud prevention or regulatory compliance.

Security Measures and Data Protection

The operator implements technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration and destruction. Security controls are designed to reduce risks but cannot eliminate them entirely.

Encryption and Access Control

Data transmitted between users and the platform is protected using SSL encryption, which secures information during login, payment processing and account management. Personal data stored on servers is protected by access controls that restrict viewing and editing to authorised personnel only. Payment data is processed through PCI DSS-compliant payment providers, and sensitive card details are not stored on operator servers.

Fraud Prevention and Monitoring

Security systems monitor account activity for signs of unauthorised access, duplicate accounts, bonus abuse and suspicious transactions. IP addresses, device identifiers and gameplay patterns are analysed to detect anomalies. Users who attempt to use VPN, proxy or IP-hiding software to bypass location restrictions or create multiple accounts may have their accounts restricted or closed. False registration details, shared logins and automated play are prohibited and may result in bonus cancellation, account closure and recovery of funds.

Internal Policies and Staff Training

Access to personal data is limited to staff who require it for their role, such as customer support, compliance and payment teams. Staff are trained in data protection principles and are bound by confidentiality obligations. The operator reviews security measures regularly and updates procedures in response to new risks and regulatory guidance.

Cookies and Tracking Technologies

The platform uses cookies and similar technologies to enable functionality, analyse usage and personalise content. Users can control cookies through browser settings, but disabling certain cookies may affect platform performance.

Types of Cookies Used

Essential cookies are required for the platform to function, including session management, login authentication and security. These cookies cannot be disabled without preventing access to core features. Performance cookies collect information about how users interact with the platform, such as pages visited, session duration and error messages. This data is used to improve site performance and fix technical issues.

Functionality cookies remember user preferences, such as language settings and game filters, to provide a more personalised experience. Marketing cookies track user activity across sessions and may be used to deliver targeted promotional offers and measure campaign effectiveness. Users who do not wish to receive marketing cookies can disable them through browser settings or opt out of marketing communications through account settings.

Managing Cookie Preferences

Most browsers allow users to block or delete cookies through the settings menu. Instructions vary by browser, but options typically include blocking all cookies, blocking third-party cookies only or deleting cookies after each session. Disabling cookies may prevent certain features from working, such as remembering login details or saving game preferences. Users who disable performance or marketing cookies may continue to use the platform, but the experience may be less personalised.

Third-Party Links and External Services

The platform may contain links to external websites, such as payment providers, game developers or social media platforms. The operator is not responsible for the privacy practices or content of third-party sites.

When a user clicks on an external link, they leave the platform and are subject to the privacy policy of the destination site. Users should review the privacy policies of any third-party sites they visit. The operator does not control how external sites collect, use or share personal data and cannot guarantee their security or compliance standards.

Children and Age Restrictions

Spin King UK is available only to individuals aged 18 or over who are located in Great Britain. The platform does not knowingly collect or process personal data from anyone under the age of 18.

Age verification is carried out during account registration and before the first withdrawal. Users who provide false age information or who are found to be under 18 will have their accounts closed, and any winnings may be voided. Parents or guardians who believe their child has created an account should contact support immediately at support@spinking.co.uk so that the account can be closed and any data removed.

Underage Access Prevention

The operator uses age verification checks and KYC procedures to prevent underage gambling. Government-issued photo ID, such as a passport or driving licence, is required before the first withdrawal. If an account is found to belong to someone under 18, the account will be closed, deposits will be returned where possible, and winnings will be forfeited. The operator reports underage access incidents to the UK Gambling Commission as required under licensing conditions.

Policy Updates and Amendments

This privacy policy may be updated from time to time to reflect changes in legal requirements, platform features or data processing practices. Users are encouraged to review the policy regularly to stay informed about how their data is used.

The last updated date at the top of this document indicates when the policy was most recently revised. Material changes will be communicated through email, account notifications or a notice on the homepage. Continued use of the platform after an update constitutes acceptance of the revised policy. Users who do not agree with the updated terms should contact support to close their account before the changes take effect.

Contact Information and Privacy Requests

Users who have questions about this policy or wish to exercise their data protection rights can contact the operator through the following channels. All privacy requests are handled in accordance with UK data protection legislation.

Email support is available at support@spinking.co.uk for privacy inquiries, data access requests, correction requests and deletion requests. Telephone support can be reached on 0800 102 6335, with availability typically between 10:00 and 20:00 on weekdays and 14:00 and 20:00 on weekends. Response times vary depending on the complexity of the request, but the operator aims to respond within one month of receipt.

Submitting a Privacy Request

Users should include their full name, account username or email address and a clear description of the request. For data access requests, users may be asked to verify their identity by providing a copy of their photo ID. For rectification requests, users should specify the data that requires correction and provide supporting evidence where applicable. For erasure requests, users should be aware that certain data may be retained under legal or regulatory obligations, and the operator will explain any limitations.