Privacy Policy

Version: 1.0  |  Last Updated: 11 November 2026

1. Introduction

Welcome to Daytona Spin ("we", "us", "our"), operated through the website daytonaspins-casino.co.uk (the "Site"). We are committed to protecting the privacy and security of every individual who uses our services. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and what rights you hold under applicable data-protection law.

This Policy applies to all visitors, registered players, and prospective customers who interact with the Site or contact our support team. It should be read alongside our Terms & Conditions and our Responsible Gaming page, which together form the complete framework governing your relationship with Daytona Spin.

Our processing of personal data is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By accessing or using the Site, you acknowledge that you have read and understood this Policy.

2. Data We Collect

We collect and process several categories of personal data, depending on how you interact with the Site. We collect only the minimum data necessary to deliver our services safely and lawfully.

2.1. Data You Provide Directly

• Identity data: full name, date of birth, gender, username.
• Contact data: email address, telephone number, postal address.
• Verification data: copies of government-issued ID, proof of address, and source-of-funds documentation required for age and identity verification, as well as anti-money-laundering (AML) compliance.
• Financial data: payment card details (processed via secure third-party payment providers), bank account information, transaction history, deposit and withdrawal records.
• Communications data: messages sent to our support team via email, live chat, or telephone, together with records of those interactions.
• Responsible gaming data: self-exclusion requests, deposit limits, cooling-off periods, and any information you share when seeking safer gambling support.

2.2. Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, device identifiers, time zone, and screen resolution.
• Usage data: pages visited, games played, session duration, click paths, referring URLs, and search terms used within the Site.
• Cookie and tracking data: information gathered through cookies, pixels, and similar technologies as described in Section 6.

2.3. Data Received from Third Parties

• Identity and fraud-check providers: results of electronic identity verification checks, credit reference signals used for AML purposes, and fraud-risk scores.
• Payment processors: transaction status confirmations, chargeback notices, and fraud-alert flags.
• Responsible gaming databases: self-exclusion registrations from recognised schemes that we are required to check.
• Analytics providers: aggregated and pseudonymised behavioural data to help us improve site performance.

2.4. Special Category Data

We do not intentionally collect special category data (e.g. health, religion, or political opinion) unless you voluntarily disclose such information in the context of a responsible gaming interaction. Any such data is treated with the highest level of protection and processed only where a lawful basis under Article 9 of the UK GDPR applies.

3. How We Use Your Data

We use the personal data we hold for the following purposes, each of which is supported by a legal basis set out in Section 4.

3.1. Account Management and Service Delivery

We process your identity, contact, and financial data to register your account, verify your age and identity, process deposits and withdrawals, deliver gameplay, and provide customer support. Without this data we cannot perform the contract with you.

3.2. Legal and Regulatory Compliance

We are required by law to conduct Know Your Customer (KYC) checks, screen transactions for money-laundering indicators, and maintain records for specified periods. We also process data to enforce self-exclusion obligations and to comply with any orders or requests from regulatory authorities and law-enforcement agencies.

3.3. Responsible Gaming

We monitor gambling patterns and account activity to identify signs of problem gambling, to apply the limits and restrictions you request, and to contact you if we have welfare concerns. Please refer to our Responsible Gaming page for the full range of tools available to you.

3.4. Fraud Prevention and Security

Technical, usage, and financial data are analysed to detect, prevent, and investigate fraud, collusion, bonus abuse, and other prohibited activities. This includes automated risk-scoring processes supplemented by human review where a significant decision may affect you.

3.5. Marketing and Personalisation

Where you have given your consent, or where we rely on our legitimate interests (subject to your right to object), we may use your contact and usage data to send you promotional offers, personalised bonuses, and updates about new games or features. You may withdraw consent or object to marketing at any time by contacting us at [email protected] or by using the unsubscribe link in any marketing email.

3.6. Analytics and Product Improvement

Aggregated and pseudonymised usage data help us understand how players interact with the Site, allowing us to improve navigation, game selection, and overall performance. Where possible, we use data in a form that cannot directly identify you for these purposes.

4. Legal Bases for Processing

Under the UK GDPR, we must identify a lawful basis for each processing activity. The table below summarises the primary legal bases we rely on.

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your data-protection rights. You have the right to challenge this assessment — see Section 9.6 for the right to object.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of consent will not affect processing carried out under a different legal basis.

5. Data Sharing & Third Parties

We do not sell your personal data. We share it only where necessary and under appropriate safeguards with the following categories of third party.

5.1. Service Providers and Data Processors

• Payment processors: companies that handle deposits, withdrawals, and fraud checks. These include providers accepting Visa, Mastercard, Maestro, PayPal, Skrill, Neteller, Paysafecard, Apple Pay, Google Pay, Bank Transfer (Faster Payments), and Trustly.
• Identity verification providers: third-party KYC and AML services that carry out electronic checks against reference databases.
• Cloud hosting and IT providers: infrastructure partners who store and process data on our behalf under strict contractual obligations.
• Customer-support platforms: software providers that facilitate our live-chat and ticketing systems.
• Analytics and marketing platforms: tools used to measure site performance and deliver targeted communications where you have consented.

5.2. Regulatory and Law-Enforcement Bodies

We may disclose data to competent authorities, regulatory bodies, or law-enforcement agencies where we are legally required to do so, or where disclosure is necessary to protect the safety of users or the public.

5.3. Responsible Gaming Schemes

We are required to share and check data with recognised self-exclusion databases and responsible gaming schemes in order to honour exclusion requests and protect vulnerable players.

5.4. Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity. We will notify you in advance of any such transfer and ensure the receiving party adheres to obligations equivalent to those set out in this Policy.

5.5. Processor Obligations

All third-party processors are bound by written data-processing agreements that require them to process data only on our instructions, implement appropriate technical and organisational security measures, and assist us in meeting our obligations under UK GDPR.

6. Cookies & Tracking Technologies

When you visit the Site, we and our third-party partners use cookies and similar technologies such as web beacons, pixel tags, and local-storage objects to recognise your device, store preferences, and collect usage data.

6.1. Types of Cookies We Use

• Strictly necessary cookies: essential for the Site to function. These enable login sessions, security tokens, and load-balancing. They cannot be disabled without breaking core functionality.
• Functional cookies: remember your language preference, currency setting, and responsible-gaming limits so you do not need to re-enter them on each visit.
• Performance and analytics cookies: collect anonymised information about how visitors use the Site, which pages load slowly, and which features are most popular, helping us improve the experience.
• Marketing and targeting cookies: placed by our advertising partners to deliver relevant promotional content and to measure campaign effectiveness. These are only set where you have given consent via our cookie-preference banner.

6.2. Managing Your Cookie Preferences

You may adjust your cookie preferences at any time by clicking the cookie settings link in the footer of the Site. You may also control cookies through your browser settings; however, disabling strictly necessary cookies may impair your ability to use the Site. For more information about managing cookies generally, visit allaboutcookies.org.

7. Data Security

We take the security of your personal data seriously and have implemented a range of technical and organisational measures designed to protect it against unauthorised access, loss, destruction, or disclosure.

7.1. Technical Measures

• Encryption: all data transmitted between your device and the Site is protected using TLS (Transport Layer Security). Sensitive data at rest, including payment details, is stored in encrypted form.
• Access controls: access to systems holding personal data is restricted to authorised personnel on a strict need-to-know basis, governed by role-based permissions.
• Penetration testing and vulnerability scanning: we regularly test our infrastructure for weaknesses and remediate identified risks promptly.
• Intrusion detection: automated monitoring systems alert our security team to anomalous activity in real time.

7.2. Organisational Measures

Staff with access to personal data receive regular data-protection training. We maintain internal policies on data handling, incident response, and secure disposal. All third-party processors are vetted for their security posture before engagement.

7.3. Personal Data Breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware, and will notify affected individuals without undue delay where the risk is high, as required by UK GDPR Article 33 and Article 34.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, or to defend legal claims.

• Account and transaction records: retained for a minimum of five years from account closure or the date of the last transaction, in line with AML record-keeping requirements.
• KYC and verification documents: retained for at least five years after the end of the customer relationship.
• Marketing communications preferences: retained until you withdraw consent or object, plus a brief period to process your request.
• Responsible gaming records: self-exclusion data is retained for the duration of the exclusion and for a minimum period thereafter, to prevent re-registration.
• Cookie and analytics data: generally retained for up to 13 months, after which it is either deleted or anonymised.

At the end of the applicable retention period, data is securely deleted or anonymised so that it can no longer be associated with you. Where anonymisation is used, the anonymised data may be retained indefinitely for statistical and research purposes.

9. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have eight individual rights in relation to your personal data. We are committed to honouring all valid requests and will respond within one calendar month of receipt. Where a request is complex or numerous, we may extend this period by a further two months, in which case we will inform you within the first month.

9.1. Right to Be Informed

You have the right to receive clear and transparent information about how we collect and use your personal data. This Privacy Policy is our primary mechanism for fulfilling that right, and we will notify you of any material changes in accordance with Section 12.

9.2. Right of Access

You have the right to request a copy of the personal data we hold about you, together with supplementary information about how it is processed. This is known as a Subject Access Request (SAR). Submit your SAR to [email protected]. In most cases, this service is provided free of charge.

9.3. Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You may update many details directly through your account settings; for data you cannot update yourself, contact our support team.

9.4. Right to Erasure ("Right to Be Forgotten")

You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and there is no other lawful basis), or where you object successfully. This right is not absolute: we may be required to retain certain data to comply with our legal obligations (for example, AML record-keeping requirements), in which case we will explain what data must be retained and why.

9.5. Right to Restrict Processing

You may ask us to pause processing of your data — for example, while you contest its accuracy or while your objection is being assessed. During a restriction, we may still store your data but will not actively process it, except with your consent or for legal claims.

9.6. Right to Object

You have the right to object to processing based on our legitimate interests, including profiling carried out for direct marketing. Where you object to direct marketing, we will cease that processing immediately and without requiring justification. For other legitimate interest processing, we will stop unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

9.7. Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transmit it directly to another controller where technically feasible.

9.8. Rights Related to Automated Decision-Making and Profiling

We use automated processes for fraud detection and responsible gaming risk assessment. Where such processing produces a decision that has a significant legal or similarly significant effect on you, you have the right to request human review of that decision, to express your point of view, and to contest the outcome. Contact us at [email protected] if you believe you have been affected by an automated decision.

9.9. How to Exercise Your Rights

To exercise any of the above rights, contact us in writing (email is acceptable) at [email protected]. We may ask you to verify your identity before processing your request to protect against unauthorised access. Exercising your rights is generally free; however, where a request is manifestly unfounded or excessive, we may charge a reasonable administrative fee.

9.10. Right to Lodge a Complaint with the ICO

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data-protection matters, at ico.org.uk, by telephone on 0303 123 1113, or by post to: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first.

10. International Data Transfers

Some of our service providers and technology partners are located outside the United Kingdom. Where we transfer personal data to a country that the UK has not deemed to provide an adequate level of protection, we ensure appropriate safeguards are in place before the transfer occurs.

10.1. Safeguards We Use

• UK International Data Transfer Agreements (IDTAs): contractual clauses approved by the ICO that impose UK-GDPR-equivalent obligations on the recipient.
• Adequacy decisions: transfers to countries recognised by the UK government as providing adequate protection require no additional safeguard.
• Binding corporate rules (BCRs): where applicable within corporate groups.

You may request further information about the specific safeguards applied to any international transfer by contacting us at [email protected].

11. Minors

Our services are strictly for individuals aged 18 years and over. We do not knowingly collect personal data from anyone under the age of 18. As part of our registration process, we carry out age-verification checks and may request documentary evidence of age.

If we discover or are notified that personal data has been collected from a minor, we will delete that data promptly and close the associated account. If you believe that a minor has registered on our Site, please contact us immediately at [email protected]. For information about tools to help protect minors from accessing gambling services, please visit our Responsible Gaming page.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable law. The version number and last updated date at the top of this page will always reflect the most current version.

For material changes — those that significantly affect your rights or how we process your data — we will notify you by email (to the address registered on your account) or by a prominent notice on the Site at least 14 days before the changes take effect. Continued use of the Site after the effective date constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should discontinue use of the Site and may request account closure in accordance with our Terms & Conditions.

13. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way we handle your personal data, please contact us using the details below.

13.1. General & Support Enquiries

• Email: [email protected]
• Website: daytonaspins-casino.co.uk

13.2. Data Protection / Privacy Enquiries

For matters specifically relating to your data-protection rights, Subject Access Requests, or the content of this Policy, please contact our Data Protection team:

• Email: [email protected]

When contacting us about a data-protection matter, please include your full name, registered email address, and a brief description of your request so that we can respond efficiently and verify your identity.

13.3. Responsible Gambling Support

If you or someone you know is experiencing difficulties related to gambling, free and confidential support is available from the following organisations:

• GamCare / National Gambling Helpline: gamcare.org.uk — Freephone 0808 8020 133, available 24/7.
• BeGambleAware: begambleaware.org — Information, advice, and access to the National Gambling Support Network.
• Gamblers Anonymous UK: gamblersanonymous.org.uk — Peer-led in-person and online support groups across the UK.
• Gordon Moody: gordonmoody.org.uk — Residential rehabilitation and therapeutic support for those with serious gambling harm.
• GamAnon: gamanon.org.uk — Support for family members, partners, and friends affected by someone else's gambling.
• NHS National Problem Gambling Clinic: Specialist NHS treatment service accepting self-referrals from residents of England and Wales aged 16 and over. Contact via the NHS gambling service finder.

For a full list of responsible gaming tools and self-exclusion options available on Daytona Spin, please visit our Responsible Gaming page.