Privacy Policy

Last Updated: May 2026

1. Who We Are

Duff Spin (accessible at duff-spin.uk.net) is operated by the licensed company holding the Curaçao gaming licence under which this platform is registered (the "Operator"). In this Privacy Policy, "we", "us", and "our" refer to the Operator. We act as the data controller for personal data processed in connection with your use of Duff Spin.

Our Data Protection Officer (DPO) can be reached at [email protected]. You may contact the DPO with any queries, requests, or concerns regarding the use of your personal data.

2. Data We Collect

We collect personal data in the following categories:

2.1 Account Registration Data

When you create an account, we collect your full name, date of birth, residential address, email address, telephone number, and username. This data is necessary to create and manage your account, verify your eligibility to play (18+), and comply with our licensing obligations.

2.2 Identity Verification (KYC) Data

To comply with anti-money-laundering regulations and responsible gambling obligations, we collect copies of government-issued identity documents (passport, UK driving licence, or national ID), proof of address documents (utility bills, bank statements), and payment method verification documents. This data is retained for a minimum of five years following account closure in accordance with legal requirements.

2.3 Financial Data

We process payment card numbers (stored in tokenised form by our payment processors), transaction histories, deposit and withdrawal records in GBP, and bonus activity. Cryptocurrency wallet addresses and transaction hashes are recorded for crypto deposits and withdrawals.

2.4 Gameplay Data

We record session timestamps, games played, bet amounts, win and loss records, and responsible gambling tool usage. This data is used for regulatory compliance, responsible gambling monitoring, and platform improvement.

2.5 Technical Data

We collect IP addresses, device identifiers, browser type and version, operating system, and referring URLs. This data is used for fraud detection, security monitoring, and analytics.

3. How We Use Your Data

We use your personal data to:

• Create and manage your Duff Spin account
• Process GBP and crypto deposits and withdrawals
• Verify your identity and age (KYC) as required by law
• Detect and prevent fraud, money laundering, and other illegal activity
• Monitor for problem gambling indicators and apply responsible gambling measures
• Comply with our Curaçao gaming licence obligations
• Communicate with you about your account, bonuses, and platform updates
• Improve platform performance and user experience

4. Your Rights

As a data subject, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your data (subject to legal retention obligations)
• Right to restriction: Request that we limit processing of your data in certain circumstances
• Right to data portability: Request your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests

To exercise any of these rights, email [email protected]. We will respond within one calendar month. For complex requests, we may extend this by up to two additional months with advance notice.

5. Cookies

Duff Spin uses cookies and similar tracking technologies to operate the platform, remember your session, and analyse traffic patterns. Strictly necessary cookies cannot be disabled. Analytics and marketing cookies can be managed through the cookie consent banner displayed on your first visit. For full details of cookies used, see our cookie notice.

6. Data Retention

Account data is retained for the duration of your account and for a minimum of five years following account closure, in line with AML legal requirements. Transaction records are retained for five years. Technical logs are retained for up to 12 months. Where retention is based solely on your consent, you may request deletion at any time.

7. Third-Party Sharing

We share data only with: payment processors (for GBP and crypto transactions), game providers (for game access), KYC and identity verification services, fraud detection partners, and regulatory or law enforcement bodies where legally required. We do not sell personal data. All third parties operate under data processing agreements.

8. Contact

For all privacy and data protection queries, contact our DPO at [email protected]. For general support: [email protected]. For compliance matters: [email protected].