This Privacy Policy explains how SpinPolo, operated by Win Top Ltd, collects, uses, stores, and shares your personal data when you use our web platform. It applies fully to all players residing in the United Kingdom. Please read it carefully so you understand your rights and our responsibilities.

What We Collect and Why

When you create an account with us, we collect personal information such as your full name, date of birth, email address, and chosen payment details. This information is necessary to verify your identity, process deposits and withdrawals, and meet our obligations under applicable anti-money laundering and responsible gambling requirements. During transaction processing, we may also collect data related to the payment method you use — for example, partial card numbers or cryptocurrency wallet references — solely to facilitate and record those transactions accurately.

We also gather technical data as you navigate our web platform. This includes your IP address, browser type, device information, and session activity. We use this data to keep the platform secure, detect unusual behaviour, and ensure a consistent experience across sessions. Cookies are used to maintain your login state and remember your preferences; they do not store sensitive financial information. You may manage cookie preferences through your browser settings, though disabling certain cookies may affect how parts of the platform function.

How We Protect and Share Your Data

Your data is protected using 256-bit SSL encryption across all connections between your browser and our servers. Personal and financial records are held on secured servers with restricted internal access, meaning only personnel who genuinely need to handle your data to carry out their role may do so. We do not sell your data to third parties, and we do not use it for purposes beyond those described in this policy.

There are limited circumstances in which we share your data with external parties. We work with payment processors and identity verification services to complete transactions and confirm your identity — those providers receive only the data they need to carry out their specific function. We may also be required to disclose data to regulatory or law enforcement authorities where we are legally obliged to do so. All third parties we engage with are required to handle your data responsibly and in accordance with applicable data protection standards.

Your data is retained for as long as your account remains active and for a period following closure or prolonged inactivity, as required by legal and regulatory obligations. Once the applicable retention period has passed and there is no legal basis to hold it further, your data is securely deleted or anonymised.

You have the right to request access to the personal data we hold about you, to ask us to correct any inaccuracies, or to request the removal of your account data where no overriding legal obligation prevents us from doing so. To exercise any of these rights, please contact us through the support channels available on our web platform. We will respond within a reasonable timeframe and, where necessary, may need to verify your identity before processing your request.

If we make material changes to this Privacy Policy, we will notify you through your registered email address or via a notice on the platform. We encourage you to review this page periodically. Continued use of the platform following any update constitutes acceptance of the revised policy.