How Your Data Is Handled

A policy aligned with PIPEDA and Quebec Law 25, naming the operator, the processors and your rights, revised on 2026-09-19.

Spinaconda Casino Privacy Policy

Data Controller

The controller of your personal information is Verdant Reef Gaming N.V., the operator of Spinaconda, registered at Kaya Grandi 22, Willemstad, Curaçao. We hold a gaming licence issued by the Curaçao Gaming Control Board (Licence No. 8048/JAZ2023-041). Questions about this policy go to [email protected].

Complaints to Regulators

If we do not resolve a privacy concern, you may complain to the Office of the Privacy Commissioner of Canada. Residents of Quebec may also complain to the Commission d’accès à l’information du Québec. We ask that you write to us first so we can attempt to fix the issue.

Categories of Data We Collect

At registration we collect your email address, password (stored in hashed form), date of birth, name and country. When you deposit or withdraw we record the payment method (Visa, Mastercard, Paysafecard, Revolut, Skrill, Neteller, bank transfer, Bitcoin, Litecoin or Ethereum), amounts and transaction identifiers. For KYC we collect a driver’s licence, passport or provincial photo ID card and a utility bill or bank statement. Technical data includes IP address, device and browser type, session logs and the game rounds you play.

Retention and Account Closure

Account data is kept while the account is open. After closure we retain identity, transaction and game history records for 5 years to meet anti-money laundering and dispute obligations, then delete or anonymize them. Marketing preferences are removed at closure, and technical logs are deleted after 12 months.

Cookies and Email Marketing

We use strictly necessary cookies to keep you signed in and to remember the cookie choice you made in the banner, and analytics cookies to measure which pages and games are used. You can refuse non-essential cookies in the banner or through your browser settings. Promotional emails are sent only with your consent under Canada’s Anti-Spam Legislation (CASL), and every message carries an unsubscribe link that takes effect within 10 business days.

Individual Rights and Quebec Provisions

Under PIPEDA you may ask to see the personal information we hold about you, ask us to correct it and withdraw your consent, subject to legal and contractual limits such as anti-money laundering record keeping. Residents of Quebec also have the rights created by Law 25: portability of your data in a structured, commonly used format, and de-indexation or cessation of dissemination in the cases the law allows. Send the request from your registered email address, and we reply within 30 days.

Third Parties Who Receive Data

Payment data is passed to the providers used for your chosen method, namely Visa, Mastercard, Paysafecard, Revolut, Skrill, Neteller and the blockchain networks for Bitcoin, Litecoin and Ethereum. Identity documents are reviewed by our verification team. Game providers Pragmatic Play, NetEnt, Evolution Gaming, Play’n GO, Hacksaw Gaming, Nolimit City, Push Gaming, Microgaming, Thunderkick, Spribe and BGaming receive the technical identifiers needed to run a session, not your identity documents.

Storage Outside Canada

Our servers and service providers are located outside Canada, including in Curaçao, so your information is processed under foreign law and may be accessed by authorities there. Transfers are covered by written agreements requiring the recipient to apply protection comparable to PIPEDA, to use the data only for the service, and to report security incidents to us.

We use your data to run your account, process payments, verify age and identity, detect fraud and meet anti-money laundering obligations. Express consent is requested for sensitive items such as identity documents, and it is given when you upload them. Implied consent applies to routine operations such as keeping a session active. Where the law requires us to keep or report information, we do so without needing further consent.

Contact for Data Requests

Send access, correction, withdrawal of consent, portability and deletion requests to [email protected] with the subject line Privacy Request. We confirm receipt within 3 business days and may ask for a driver’s licence, passport or provincial photo ID card to confirm that the request comes from the account holder.