Venturing into online gaming offers excitement, but it also stirs up questions about what happens to your personal information. At PiperSpin Casino, we think understanding data protection should feel like a conversation, not a law exam. Whether you are spinning the reels for the first time or joining our affiliate programme, knowing how your data is collected, used, and safeguarded creates the trust every great gaming experience depends on. This guide explains the essentials of our data protection policies in plain language, with a clear focus on the rights and responsibilities that matter to players and partners in Spain. We are dedicated to full transparency, and this is your starting point for feeling secure every time you visit us.
What a Data Protection Policy Really Includes
Many newcomers assume a data protection policy is just another document of small print they can overlook. It truly is a commitment. At its core, this policy details precisely what data we collect, the reasons we require it, and how we keep it safe. For an online casino like PiperSpin Casino, that means specifying everything from the email address you use for registration to the verification papers demanded by Spanish law. The policy also specifies who we disclose data to, such as payment processors or regulatory bodies, and under what strict conditions. By reviewing it, you obtain a clear picture of your rights and our duties. We view this document not as a defense for the company, but as an instrument that helps you make knowledgeable decisions about your privacy while playing on our platform.
The Fundamental Principles We Adhere To
All determinations we arrive at concerning your data relies on a few essential principles. Lawfulness means we only process personal information when we have a valid legal reason, such as satisfying a contract with you or complying with anti-money laundering regulations. Equity and transparency require us to tell you upfront what happens to your data, never obscuring details in complicated jargon. Restriction of purpose ensures we gather data for specific, explicit reasons, like handling a withdrawal, and never redirect it for unrelated marketing without your clear consent. Minimization of data keeps us focused on gathering only what is necessary. These principles are not abstract ideals; they are the practical rules that form our daily operations and shield every member of the PiperSpin Casino community.
How Data Protection Applies to iGaming
The internet gambling sector handles highly confidential categories of information, which makes solid privacy safeguards non-negotiable. Beyond fundamental personal data, we process monetary transfers, ID verification files, and occasionally behavioural data that helps us promote responsible gambling. In Spain, operators like PiperSpin Casino must also follow particular regulations from the Dirección General de Ordenación del Juego (DGOJ) on top of the General Data Protection Regulation (GDPR). This twofold tier of oversight means our policies are designed to meet strict criteria that protect both your privacy and the integrity of the gaming environment. Understanding this context helps you see why we request certain documents during account verification. It is not bureaucracy, but a legal protection for everyone involved.
Your Rights Under Spanish and EU Law
As a player or affiliate based in Spain, you are covered by some of the world’s strongest data privacy laws. The GDPR and the Spanish Organic Law on Data Protection and Digital Rights (LOPDGDD) grant you a set of actionable rights over your personal information. We have structured our internal processes to make using these rights simple, not a bureaucratic maze. If you want to see what data we hold, correct an error, or request deletion, our support team is trained to handle your request quickly and without unnecessary friction. Understanding these rights converts you from a passive user into an active participant in your own privacy protection, and we advise every newcomer to acquaint with the tools available.
Retrieval, Rectification, and Portability
You have the right to ask for a copy of the personal data we process about you at any time. This access right enables you to verify that we are handling your information lawfully. If you spot an inaccuracy, the right to rectification enables you to have incomplete or incorrect data corrected without undue delay. The right to data portability implies you can receive certain information in a structured, commonly used format and even transfer it to another service provider where technically feasible. For example, you could request a machine-readable file of your transaction history. To exercise any of these rights, simply contact our Data Protection Officer through the channels listed on our website, and we will respond within the legally mandated timeframe.
Erasure, Restriction, and Objection
In specific circumstances, you can ask us to delete your personal data, often called the right to be forgotten. This applies, for instance, when the data is no longer necessary for the purpose we collected it, or if you withdraw consent and no other legal ground for processing exists. Please note that legal obligations, such as anti-money laundering record-keeping, may require us to retain certain information for a set period. You also have the right to restrict processing while a dispute over data accuracy or lawfulness is resolved, and the right to object to processing based on legitimate interests, including profiling for direct marketing. We uphold all valid objections and never penalise you for exercising these fundamental rights.
How We Gather and Use Your Data
Openness about data collection involves knowing the multiple ways data arrives at us. We obtain data via direct contact, automated systems, and reliable external sources, consistently with a defined objective attached. When you create an account, we require details like your name, date of birth, and address to confirm your identity and ensure you satisfy the legal age requirement. If you participate in our affiliate programme, we obtain business information to manage commissions and maintain our partnership. Each piece of data carries a specific purpose, whether it is processing a deposit, dispatching a withdrawal confirmation, or enhancing our website’s performance. We under no circumstances sell your personal information to external marketers, and we tightly control internal access to personnel who require it to support you.
Details You Provide Personally
The bulk of the data we hold is obtained directly from you via forms, chats, and account settings. This includes registration details, payment method information, and any documents you submit for Know Your Customer (KYC) checks, like a passport or utility bill. When you reach out to our support team, we keep a record of that conversation to address issues effectively and improve our service. If you opt into marketing communications, we record your preferences to send only relevant offers, and you can modify these settings at any time. We handle all directly provided information as private, using it only to deliver the services you have sought and to meet our legal obligations under Spanish gambling regulations.
Information Obtained Automatically
Similar to most modern websites, PiperSpin Casino uses automated technologies to collect certain technical data when you navigate our pages. This covers your IP address, device type, browser version, and how you engage with our games and features. We use cookies and similar technologies to store your preferences, ensure your session secure, and analyse site traffic. This automatic collection helps us detect potential fraud, like unusual login patterns, and allows us to personalize your experience without undermining your privacy. You can manage cookie settings through your browser, though turning off essential ones may affect site functionality. We consistently ask for consent for non-essential tracking in compliance with Spanish e-privacy rules.
Data Sharing In Our Affiliate Programme
Our affiliate programme relies on partnerships that depend on trust, and data protection is at the heart of that relationship. When you sign up as an affiliate, we share only the information required to track referrals, calculate commissions, and maintain the integrity of the programme. This typically includes a unique affiliate ID, aggregated performance statistics, and, in some cases, pseudonymised data about referred players. We never disclose sensitive player details to affiliates, and we require every partner to adhere to strict data processing terms. Understanding these boundaries is crucial for both new and experienced affiliates who want to promote PiperSpin Casino responsibly while staying fully compliant with Spanish and EU privacy regulations.
Key Information for Affiliates
As an affiliate, you function as an independent promoter, not as a data controller for player information. You will have access to a dashboard showing clicks, registrations, and commission earnings, but you will not see individual player identities, payment details, or contact information. This separation is intentional and legally required. If your promotional activities involve collecting any personal data yourself, for example, through a mailing list, you bear full responsibility for complying with the GDPR and LOPDGDD for that data. We recommend every affiliate provide their own clear privacy policy and obtain proper consent before gathering any user information. Our team provides guidance to help you meet these expectations from day one.
Data Handling Contracts
Before you start earning commissions, we require all affiliates to enter into a Data Processing Agreement (DPA) where applicable. This contract defines the scope, duration, and purpose of any data handling that touches our systems. It mandates that you implement appropriate technical and organisational measures to protect information, report any data breaches without delay, and assist us in responding to data subject requests if your actions affect our obligations. The DPA also prevents you from using shared data for any purpose beyond the agreed campaign tracking. We keep these agreements straightforward and transparent, reflecting our commitment to making compliance accessible even for those new to affiliate marketing in the regulated Spanish market.
Protection Systems That Protect Your Data
Robust policies mean little without solid security underpinning them. At PiperSpin Casino, we use a tiered approach to safeguard your confidential and financial information from unauthorized access, alteration, or loss. Our platform employs industry-standard encryption protocols, including TLS (Transport Layer Security), to secure data during transfer between your device and our servers. We also keep rigorous access controls within our organization, ensuring that only approved personnel with a legitimate business need can view confidential information. Periodic security audits, vulnerability scans, and penetration testing assist us detect and address potential weaknesses before they can be abused. While no online system can ensure absolute invulnerability, our ongoing investment in security technology and staff training reflects our devotion to maintaining your data safe.
Common Queries
Are my payment data saved on your servers?
Full credit card numbers and CVV codes are not stored on our systems. PCI-DSS compliant third-party gateways, which specialise in secure financial handling, process all payment transactions. We only keep tokenised references and transaction amounts required for your account history and dispute resolution. This strategy lowers risk and adheres to strict security standards in the industry.
Can I request the complete deletion of my account and data?
Yes, descubre más, you can request account closure and data erasure at any time. We will remove all personal data that we do not have a legal obligation to retain. Be advised that Spanish anti-money laundering laws mandate that we keep certain records, like transaction logs and identity verification documents, for a defined duration even after your account is closed. We will clearly explain what must be kept and for how long.
How long do you retain my personal data?
Retention periods vary depending on the type of data and the purpose for which it was collected. Typically, your account information is kept for the length of your relationship with us, plus an additional five years following your last activity to satisfy legal obligations. Data collected for marketing purposes is kept until you withdraw consent. When the relevant retention period concludes, we securely delete or anonymise your information.