spinwd Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by spinwd through our website, mobile applications, customer support channels, and any other services we provide. It covers data collected from residents of Indonesia who access our gaming platform for live casino entertainment, sports betting, slot games, and related services.

spinwd operates under international data protection standards and complies with applicable Indonesian privacy regulations. We process personal data lawfully, fairly, and transparently, collecting only the information necessary to provide our services, comply with legal obligations, and enhance your gaming experience.

This Privacy Policy should be read in conjunction with our Terms & Conditions, Responsible Gaming Policy, and any other policies referenced on our website. If you have questions about how we handle your personal information, please contact our Data Protection Officer at [email protected].

2. Information We Collect

spinwd collects several categories of personal information to operate our gaming platform, process transactions, verify your identity, prevent fraud, and comply with legal requirements. The types of data we collect include:

2.1 Account Registration Information

When you create an account with spinwd, we collect identification and contact details including:

• Personal Identifiers: Full legal name, date of birth, gender, nationality, and Indonesian National Identity Card (KTP) number or passport number
• Contact Information: Email address, mobile phone number, residential address including city and postal code
• Account Credentials: Username, password (stored in encrypted format), and security questions/answers
• Verification Documents: Copies of identification documents, proof of address (utility bills or bank statements), and selfie photographs for identity verification

2.2 Financial and Transaction Data

To process deposits and withdrawals, we collect payment information including:

• Payment Method Details: Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay), and associated account holder names
• Transaction History: Deposit amounts, deposit dates and times, withdrawal requests, withdrawal processing status, payment method used for each transaction
• Financial Verification: Source of funds documentation when required for large transactions or suspicious activity investigations

We do not store complete credit card numbers or CVV codes. Payment processing is handled through secure, PCI-DSS compliant third-party payment processors who encrypt and protect your financial data.

2.3 Gaming Activity and Behavioral Data

We collect information about your gaming activities to provide services, detect fraud, and comply with regulatory requirements:

• Betting History: Games played, bet amounts, bet types (sports bets, casino bets, slot spins), bet timestamps, game outcomes, winnings and losses
• Account Activity: Login times, session durations, pages visited, features used, promotional offers claimed, bonus wagering progress
• Communication Records: Live chat transcripts with customer support, email correspondence, support ticket history

2.4 Technical and Device Information

We automatically collect technical data when you access our platform:

• Device Information: Device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, device identifiers
• Network Data: IP address, internet service provider, geographic location (country, city), time zone settings
• Usage Data: Clickstream data, page load times, error logs, feature interactions, navigation paths through the website
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies, and tracking pixels (see Section 9 for detailed cookie policy)

2.5 Marketing and Communication Preferences

We collect information about your communication preferences including email subscription status, SMS marketing consent, preferred language (Indonesian or English), notification preferences, and promotional interests based on your gaming activity.

3. How We Use Your Information

spinwd uses your personal information for the following legitimate business purposes:

3.1 Service Provision and Account Management

• Creating and maintaining your gaming account
• Processing deposits, withdrawals, and other financial transactions
• Providing access to games, betting markets, and platform features
• Calculating and crediting winnings to your account balance
• Managing bonuses, promotions, and loyalty programs
• Providing customer support and responding to inquiries

3.2 Identity Verification and Fraud Prevention

• Verifying your age to ensure compliance with 21+ requirements
• Confirming your identity through KYC (Know Your Customer) procedures
• Detecting and preventing fraudulent transactions and account abuse
• Identifying duplicate accounts and bonus abuse patterns
• Investigating suspicious betting patterns or collusion
• Complying with anti-money laundering (AML) regulations

3.3 Legal and Regulatory Compliance

• Fulfilling legal obligations under Indonesian law and international gaming regulations
• Responding to court orders, subpoenas, and government requests
• Maintaining records required by gaming authorities and financial regulators
• Reporting suspicious transactions to relevant authorities when required
• Enforcing our Terms & Conditions and investigating violations

3.4 Platform Improvement and Analytics

• Analyzing user behavior to improve website functionality and user experience
• Testing new features and gaming products
• Optimizing platform performance and page load speeds
• Conducting market research and player satisfaction surveys
• Generating aggregate statistical reports (anonymized data only)

3.5 Marketing and Communications

• Sending promotional emails about new games, bonuses, and special offers (with your consent)
• Delivering personalized recommendations based on your gaming preferences
• Notifying you of account activity, transaction confirmations, and security alerts
• Communicating important updates to policies, terms, or platform features

4. Legal Basis for Processing

spinwd processes your personal data based on the following legal grounds:

4.1 Contractual Necessity

Processing is necessary to fulfill our contract with you under the Terms & Conditions, including account creation, transaction processing, game provision, and customer support services.

4.2 Legal Obligation

Processing is required to comply with legal obligations including age verification, identity confirmation, anti-money laundering regulations, tax reporting requirements, and regulatory inquiries.

4.3 Legitimate Interests

Processing is necessary for our legitimate business interests including fraud prevention, security monitoring, platform improvement, analytics, and direct marketing, provided these interests do not override your fundamental rights and freedoms.

4.4 Consent

For certain processing activities such as marketing communications, cookies, and location tracking, we obtain your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

5. Data Sharing and Disclosure

spinwd does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to assist with platform operations:

• Payment Processors: Banks, e-wallet providers, and payment gateways to process deposits and withdrawals (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay)
• Game Providers: Software studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and others to deliver gaming content
• Identity Verification Services: Third-party KYC providers to verify identification documents and prevent fraud
• Customer Support Tools: Live chat platforms, ticketing systems, and communication tools
• Analytics and Tracking: Web analytics services to understand user behavior and improve our platform
• Cloud Hosting: Secure server infrastructure providers to host our platform and databases

All service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with applicable data protection laws.

5.2 Legal Requirements and Law Enforcement

We may disclose your information when required by law or to protect our legal rights:

• In response to court orders, subpoenas, or legal processes
• To comply with regulatory inquiries from gaming authorities or financial regulators
• To investigate and prevent fraud, money laundering, or other illegal activities
• To protect the safety and security of spinwd, our users, or the public
• To enforce our Terms & Conditions and investigate violations

5.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity as part of the transaction. You will be notified via email and prominent website notice of any change in ownership or use of your personal data.

5.4 Aggregate and Anonymized Data

We may share aggregate statistical information that does not identify individual users with business partners, advertisers, or the public. For example, we might report that "500,000 Indonesian players wagered on EPL matches this month" without revealing individual betting activity.

6. Data Security and Protection

spinwd implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

6.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest is encrypted using AES-256 encryption.
• Secure Authentication: Passwords are hashed using bcrypt with unique salts. Multi-factor authentication is available for enhanced account security.
• Firewall Protection: Advanced firewalls and intrusion detection systems monitor network traffic for suspicious activity.
• Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments quarterly.
• Secure Payment Processing: PCI-DSS Level 1 compliant payment infrastructure ensures credit card and financial data protection.

6.2 Organizational Security Measures

• Access Controls: Employee access to personal data is restricted based on job role and necessity. Access logs are maintained and audited.
• Staff Training: All employees undergo data protection and security awareness training.
• Confidentiality Agreements: Staff and contractors sign confidentiality agreements prohibiting unauthorized data disclosure.
• Incident Response: We maintain a data breach response plan to quickly address security incidents and notify affected users.

6.3 User Responsibilities

While we implement robust security measures, you also play a crucial role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication if offered
• Log out after each session, especially on shared devices
• Monitor your account for suspicious activity and report concerns immediately
• Keep your contact information up to date to receive security alerts

7. Data Retention and Deletion

spinwd retains your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

7.1 Retention Periods

Data Category	Retention Period	Reason
Account Information	Duration of account + 5 years	Legal compliance, fraud prevention
Transaction Records	7 years	Tax reporting, AML regulations
Betting History	5 years	Regulatory requirements, dispute resolution
Customer Support Logs	3 years	Service improvement, legal defense
Marketing Preferences	Until consent withdrawn	Respect user preferences
Website Analytics	26 months	Platform optimization

7.2 Account Closure and Data Deletion

When you close your account, we will delete or anonymize your personal information in accordance with the retention schedule above, except for data we are legally required to maintain. You can request account closure by contacting our support team at [email protected].

Some information may be retained in aggregate, anonymized form for statistical analysis and regulatory reporting without identifying you personally. Backup copies stored for disaster recovery purposes are deleted in accordance with our backup retention schedule (typically 90 days).

8. Your Privacy Rights

Under Indonesian data protection laws and international privacy standards, you have the following rights regarding your personal information:

8.1 Right of Access

You have the right to request a copy of the personal information we hold about you. You can access most of your data directly through your account dashboard. For additional information, contact [email protected]. We will respond within 30 days and provide data in a structured, commonly used, machine-readable format.

8.2 Right to Rectification

You can update incorrect or incomplete personal information through your account settings or by contacting customer support. We will correct inaccurate data promptly upon verification of the correct information.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data in certain circumstances, such as when data is no longer necessary for its original purpose, you withdraw consent, or you object to processing. This right is subject to legal retention requirements and legitimate business needs.

8.4 Right to Restriction of Processing

You can request that we limit how we use your data in specific situations, such as when you contest data accuracy or object to processing. During restriction, we will store the data but not actively use it without your consent.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and transmit it to another service provider. This applies to data you provided based on consent or contract.

8.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

8.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

8.8 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] with your full name, account username, and specific request. We may require identity verification before processing your request. We will respond within 30 days and will not charge fees unless requests are manifestly unfounded or excessive.

9. Cookies and Tracking Technologies

spinwd uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content.

9.1 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality including login sessions, account authentication, and security features. These cannot be disabled.
• Performance Cookies: Collect anonymous information about how visitors use our site, helping us improve performance and fix errors.
• Functionality Cookies: Remember your preferences such as language selection, display settings, and game favorites.
• Targeting/Advertising Cookies: Track your browsing activity to deliver relevant promotional offers and personalized recommendations.

9.2 Managing Cookie Preferences

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies may prevent you from accessing certain features of spinwd. Refer to your browser's help documentation for specific instructions on managing cookies.

10. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or external services. spinwd is not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies only to information collected by spinwd.

11. Children's Privacy

spinwd services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21. If we discover that a minor has provided personal information, we will immediately delete their account, void all transactions, and remove their data from our systems. Parents or guardians who believe their child has provided information to spinwd should contact us immediately at [email protected].

12. International Data Transfers

spinwd primarily serves Indonesian residents and stores data on servers located within secure data centers. However, some service providers and game studios may be located outside Indonesia. When we transfer personal data internationally, we implement appropriate safeguards including standard contractual clauses, encryption, and data processing agreements to ensure your data receives equivalent protection.

13. Changes to This Privacy Policy

spinwd reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or business operations. We will notify you of material changes through email, prominent website notice, or notification upon login. The "Last Updated" date at the top of this policy indicates when the most recent changes were made.

Continued use of spinwd services after policy changes constitutes acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

14. Contact Information and Complaints

If you have questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact us:

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Indonesian data protection authority or other relevant supervisory body in your jurisdiction.