Privacy Policy

Scope and Who We Are

This Privacy Notice explains how HeroSpin and its related companies collect and manage personal data for registered players who maintain accounts and for everyone who visits the website. The operator acts as the data controller and decides the purposes and methods for processing your information. We cooperate with joint controllers to ensure proper ownership and security of the data you share. If you have any questions or want to exercise your data protection rights, contact our Data Protection Officer at [email protected].

Personal Data We Collect

We gather details you give us directly during registration and while using the platform. These include your full name, email address, date of birth, country of residence, phone number, gender, username, and official identification such as passport or driving licence information. To meet regulatory standards we also require proof of address, source of funds details, bank account records, and financial statements. Our systems automatically log your IP address, device type, operating system, browsing habits, session duration, pages viewed, and general location. We may add data from public sources, commercial databases, fraud prevention services, and connected social media profiles to support verification and manage risks.

Purposes and Lawful Bases for Processing

The personal data we hold lets us deliver, maintain, and improve our services, answer your questions, conduct research, stop fraudulent activity, and support responsible gambling. We process this information to fulfil our contractual obligations, comply with legal requirements such as age checks, know-your-customer procedures, anti-money laundering rules, and mandatory regulatory reports. In suitable cases we rely on legitimate business interests such as protecting our operations, strengthening security, examining player patterns, and providing personalised experiences. When you give consent we may send marketing communications, tailor promotional offers, and display advertisements based on your interests. You can withdraw consent at any time without affecting the lawfulness of any processing that took place earlier.

How We Share Your Personal Data

We share personal data only when it is essential to provide and run our services. This includes our internal teams and group companies, payment processors that handle deposits and withdrawals, customer support partners, technology and hosting providers, marketing agencies, and specialist fraud prevention services. Game providers and analytics firms may receive limited information to help refine and improve our offerings. During corporate transactions such as mergers or acquisitions, data may move to new owners while keeping the same protection standards. We may also disclose essential details to law enforcement, regulators, or external dispute resolution bodies when required by law or to handle complaints, always restricting the information to what is strictly necessary.

Data Retention and Your Rights

We keep your personal data only while your account remains active or for as long as required by applicable legal obligations, including anti-money laundering regulations. Once your account closes and no further business or legal need exists, we will delete or anonymise the information so it can no longer be linked to you. You have several important rights, such as accessing your data, correcting inaccuracies, requesting deletion, restricting processing in certain cases, obtaining a portable copy, objecting to specific uses, and withdrawing consent. You may also file a complaint with your local data protection authority. To use any of these rights, contact our support team at [email protected] or the Data Protection Officer.

Cookies, Security and International Transfers

We use cookies and similar tracking technologies to enhance your experience on the website. Strictly necessary cookies work without consent, while others need your approval on your first visit. Our separate Cookie Notice provides full details on the technologies we use. We apply strong technical, organisational, and physical measures to protect your data, although we cannot guarantee absolute security in every situation. When personal information is transferred outside the EU or EEA we use recognised safeguards such as standard contractual clauses or adequacy decisions to maintain an equivalent level of protection.

Changes and Contact Information

This Privacy Notice may be updated from time to time to reflect changes in our operations or legal requirements. The current version shows an effective date on the website, and continued use of the services after any update means you accept the revised notice. If you have questions about this Privacy Notice or how we handle your personal information, please email [email protected] or [email protected]. We regularly review and improve our policies to make sure your data always receives the highest standards of care and security.