Our Privacy Policy

This Privacy Policy explains what personal data we collect when you play at Hawaiispins Casino, why we collect it, who we share it with and the rights you hold over it. It applies to every visitor and registered player on hawaiispins.uk.

Data We Collect

We collect only the data needed to run your account, meet our legal obligations under the Anjouan licence ALSI-202203151-FI3 and keep our platform safe. Since our launch in 2022 we have grouped every data point into six categories, each with a clear purpose.

• Identity data: your full name, date of birth, email address, phone number and residential address, provided by you during registration.
• Verification documents: copies of your ID, proof of address and payment method, submitted during KYC checks before your first withdrawal.
• Transaction data: deposits, withdrawals, bonuses claimed, wagering progress and game stakes across GBP, EUR, USD, BTC, ETH and USDT.
• Technical data: IP address, device type, operating system, browser version and approximate location derived from your IP.
• Gameplay behaviour: games played, session duration, betting patterns, win and loss history, and responsible-gambling indicators.
• Marketing preferences: which channels you consented to (email or SMS) and which offers you interact with.

How We Use Your Data

Every use of your data maps to a specific operational or legal purpose. We do not profile you for anything beyond fraud detection and responsible-gambling monitoring, and we never sell your data.

• Creating and administering your player account, including login, balance and bonus management such as the 200% welcome bonus up to £2,000 plus 100 free spins.
• Verifying your identity and age under KYC rules before processing withdrawals.
• Processing deposits and withdrawals through Visa Debit, Mastercard Debit, Trustly, Skrill, Neteller, Bitcoin, Ethereum and other supported methods.
• Preventing fraud, bonus abuse, multi-accounting and money laundering through automated and manual review.
• Monitoring play for signs of problem gambling so we can apply deposit limits, loss limits or self-exclusion where you have requested them.
• Sending marketing messages, only where you have given consent, and honouring your preference settings at any time.
• Meeting reporting and record-keeping obligations owed to our regulator and payment providers.

Our Legal Bases

Contract

Processing your identity, transaction and gameplay data is necessary to perform the contract between you and us. Without it we cannot open your account, settle bets or pay out winnings up to the daily £5,000 and monthly £20,000 withdrawal limits.

Legal obligation

Anti-money-laundering and KYC rules oblige us to verify your identity and retain transaction records for at least five years. These checks happen whether or not you consent, because we cannot lawfully operate without them.

Legitimate interest

Fraud prevention, security monitoring and aggregated service analytics rest on our legitimate interest in keeping the platform safe and functional. This interest never overrides your rights; we weigh it against potential impact on you in every case.

Consent

Marketing communications, optional cookies and certain analytics tools run only on your consent. You may withdraw that consent at any time via your account settings or the unsubscribe link, without affecting the lawfulness of earlier processing.

How Long We Keep Data

We hold each data category only as long as its purpose requires, then delete or anonymise it. Regulatory minimums override shorter internal targets, which is why financial records stay on file longer than marketing preferences.

Who We Share Data With

We share data only with parties that help us operate, and only the minimum each needs. Every recipient works under a data-processing agreement that binds them to the same standards we apply ourselves.

• Payment processors handling your Visa, Mastercard, Trustly, Skrill, Neteller, MiFinity, Jeton and crypto transactions.
• KYC and AML verification providers that check your ID, address and payment method documents.
• Our licensing authority in Anjouan, when audits or suspicious-activity reports are required.
• Analytics and hosting providers that support site performance and security monitoring.
• Game and platform suppliers that receive your player ID and session data to deliver gameplay and settle outcomes.
• Professional advisers such as auditors and lawyers, strictly on a need-to-know basis.

Your Rights Over Data

You control your personal data. Send any request to our Data Protection Officer at [email protected] and we will respond within one month, extending by two further months only for complex cases, and we will tell you if we do.

• Access: get a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete records, such as a misspelled name.
• Erasure: ask us to delete data we no longer need, subject to regulatory retention duties.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest, including profiling.
• Withdrawal of consent: opt out of marketing or optional cookies at any time.
• Complaint: escalate to the Information Commissioner's Office (ico.org.uk) or your local data protection authority.

Contacting our DPO

Our Data Protection Officer answers privacy questions, handles subject-access requests and reviews every data-sharing agreement. Write to [email protected] or reach our support team any hour via 24/7 live chat or [email protected], and we will route your message internally.

Cookies and Tracking

We use strictly necessary cookies to keep your session and balance working, plus optional analytics and marketing cookies that load only after you accept them in the consent banner. You can change your choices at any time from the cookie settings link in the footer. Full details, including a complete list of cookies and their lifespans, sit on our dedicated Cookies Policy page.

How We Protect Your Data

All traffic between your device and our servers travels over TLS encryption, and payment details are tokenised so card numbers never sit in our databases in readable form. Access to player data is role-based: fewer than a dozen trained staff can open KYC documents, every access is logged, and those logs are reviewed each month.

• AES-256 encryption for stored documents and database backups.
• Two-factor authentication mandatory for all administrative accounts.
• Quarterly penetration tests by an external security firm.
• Isolated staging environments so no real player data is used in testing.

If a breach happens

If a breach risks your rights, we notify the relevant supervisory authority within 72 hours of confirming it and inform affected players without undue delay, describing what happened, what data was involved and what we have done about it. Our incident response team tests this procedure twice a year against realistic scenarios.

Frequently asked questions

Does Hawaiispins Casino sell my personal data?

No. We never sell player data. We share it only with payment processors, verification providers, our regulator and suppliers who need it to run the service, always under strict data-processing agreements.

How do I request a copy of my data?

Email [email protected] from your registered address asking for a subject-access request. We send a full copy of the personal data we hold within one month, at no charge.

Why do you keep my transaction records after I close my account?

Anti-money-laundering rules require us to retain transaction and KYC records for at least five years after account closure. After that period we delete or anonymise them.

Can I stop marketing emails and still play?

Yes. Withdraw consent in your account settings or click the unsubscribe link in any email. Marketing stops immediately and your account, gameplay and withdrawals are unaffected.