Privacy Policy
This notice sets out the categories of personal information HellSpin records, the grounds on which we rely to handle it, and the requests you can make about your own file. It applies to the website, the mobile interface and any correspondence with our support desk.
Information recorded when you use HellSpin
Opening an account requires your full name, date of birth, residential address, email address, telephone number and a username. Regulatory obligations attached to licence OGL/2024/1676/0905 require verification documents as well, typically a government photo identity document, a recent utility bill or bank statement, and evidence relating to the payment instrument used.
Financial records cover deposits, withdrawals, the last four digits of cards, wallet identifiers and the source-of-funds declarations requested at certain thresholds. We never store complete card numbers or the security code printed on the reverse; those pass directly to the acquiring processor.
Technical records are generated automatically and include IP address, approximate location derived from it, browser and operating system fingerprint, device identifiers, referral URL, pages viewed and the timing of each session. Support transcripts, recorded calls and email threads are retained alongside them.
Lawful bases and purposes
Contractual necessity covers the operation of your account: crediting deposits, settling wagers, paying out balances and answering queries. Without this information the service cannot be delivered at all.
Legal obligation covers anti-money-laundering checks, age verification, sanctions screening, tax reporting where applicable and the retention of wagering logs for regulatory inspection. These purposes override a deletion request for as long as the obligation persists.
Legitimate interest covers fraud prevention, bonus abuse detection, platform security, aggregated product analytics and the behavioural monitoring that underpins our responsible gaming programme. Consent, freely given and freely withdrawn, is the basis for promotional email, SMS and push notifications.
Disclosure to third parties
Game content is supplied by external studios whose servers determine outcomes. Those studios receive a pseudonymous player reference and wager data, not your name or contact details.
Payment institutions, identity verification bureaux, cloud hosting providers, anti-fraud networks and customer-messaging platforms act as processors under written agreements that restrict them to instructions issued by HellSpin. Regulators, law enforcement and auditors receive disclosures where a valid legal basis exists.
Personal information is never sold, rented or traded to advertisers or data brokers. Where a processor operates outside your jurisdiction, transfers are covered by standard contractual clauses or an equivalent adequacy mechanism.
Cookies, storage and tracking
Strictly necessary cookies maintain your logged-in session, remember interface preferences and protect submission forms against automated abuse. These cannot be disabled while the service is in use.
Analytics and measurement identifiers help us understand navigation patterns, page performance and campaign attribution in aggregate form. Affiliate partners may set a referral identifier that records which channel introduced you to HellSpin.
Preferences can be adjusted at any time through the cookie panel at the foot of every page or through your browser settings. Blocking non-essential categories does not restrict access to games or to your balance.
Retention periods and your requests
Account and transaction files are kept for the duration of the relationship and for a further period mandated by our licensing conditions, commonly five years after closure. Self-exclusion records are held for longer so that the exclusion can be enforced across future registration attempts.
You may request a copy of the data we hold, correction of inaccurate entries, restriction of certain processing, portability of records you supplied, or erasure once no retention obligation applies. Requests are answered within thirty days and require identity confirmation to prevent impersonation.
Australian users may escalate an unresolved complaint to the Office of the Australian Information Commissioner. Residents elsewhere may approach the supervisory authority in their own country; our licensing bodies also accept data-handling complaints.
Where to turn
- Data Protection Officer, HellSpin — reachable via the privacy request form in the account settings area
- General support — live chat and the help centre email address published in the site footer
- Office of the Australian Information Commissioner — oaic.gov.au, 1300 363 992, for unresolved privacy complaints