Privacy Policy

Last updated: 11.01.2026

VelvetSpinsCasino.online (“Velvet Spins”, “we”, “us”, or “our”) is committed to protecting your privacy and handling your personal information in a lawful, fair, and transparent manner.

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website velvetspinscasino.online (the “Website”) and our online gambling services (the “Services”).

For the purposes of applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”) where it applies, Velvet Spins is the data controller of your personal data.

By registering an account, accessing, or using our Services, you:

Confirm that you have read and understood this Privacy Policy; and
Provide your consent to the processing of your personal data as described here, in addition to any processing that is necessary for us to comply with our legal obligations (including gambling, anti‑money laundering and countering financing of terrorism (“AML/CFT”) laws in New Zealand and other applicable jurisdictions) and to perform the contract for the provision of gambling services.

If you do not agree with this Privacy Policy, please do not use our Website or Services.

Information We Collect

We collect and process different categories of personal data about you, which may include:

Personal Identification Details

Full name
Date of birth and age confirmation
Residential address and country of residence
Nationality
Government-issued identification numbers (where permitted/required by law)
Username and account IDs

Contact Details

Email address
Telephone number
Postal/physical address
Communication preferences

Account & Transaction Information

Account registration details
Login and account activity logs
Deposit and withdrawal history
Wagering, game play, and bet history
Bonus use and loyalty program participation
Payment methods used (e.g., card type, partial card numbers, wallet identifiers – never full card data where prohibited)

Financial and Verification (KYC) Data

To meet AML/CFT and responsible gambling obligations, we may request:

Copies of identification documents (e.g., passport, ID card, driver’s licence)
Proof of address (e.g., utility bills, bank statements)
Proof of source of funds or source of wealth (e.g., payslips, tax statements, company ownership documents)
Results of screening against sanctions, politically exposed person (“PEP”), and adverse media lists

Correspondence and Customer Support

Records of communications with you by email, live chat, or other channels
Support tickets and internal notes relating to your queries or complaints
Recordings and transcripts of calls or chats (if applicable and where permitted by law)

Technical and Usage Information

Collected automatically when you interact with the Website:

IP address and approximate geolocation (country/region)
Device identifiers (e.g., device ID, browser type and version, operating system)
Log-in timestamps and session duration
Referral URLs and traffic source information
Clickstream and interaction data (pages visited, links clicked, game sessions)

Marketing and Preference Information

Marketing channel preferences (email, SMS, push notifications, etc.)
Opt-in / opt-out records
Responses to promotions, campaigns, surveys, and feedback forms

We do not intentionally collect personal data from persons under the legal age for gambling in New Zealand or in the player’s jurisdiction. If we discover you are underage, we will close your account and delete or anonymise your personal data, subject to any legal retention requirements.

How We Use Your Information

We process your personal data for the following purposes and based on the following legal grounds:

Provision of Gambling Services (Contract Performance)

Setting up and managing your user account
Processing deposits, bets, wins, and withdrawals
Providing access to games and related services
Verifying your identity to ensure you are eligible to use our Services
Communicating with you about account administration and service-related matters

Compliance with Legal and Regulatory Obligations

We are required by New Zealand law and, where applicable, by EU/EEA and other regulations to:

Conduct KYC and customer due diligence checks
Monitor and report suspicious transactions for AML/CFT purposes
Ensure compliance with responsible gambling obligations (e.g., self-exclusion, wager limits, affordability checks when applicable)
Maintain statutory records and cooperate with regulators, law enforcement, tax authorities, and other competent bodies

Fraud Prevention, Security, and Risk Management

Detecting and preventing fraud, money laundering, bonus abuse, account takeover, and other unlawful activities
Monitoring gameplay and transaction patterns for irregular activity
Securing our systems, applications, and networks
Enforcing our Terms and Conditions

Customer Support and Service Improvement

Handling your requests, complaints, and feedback
Analysing service usage to improve the Website, user experience, and our product offering
Conducting internal reporting, analytics, and performance measurement (on an aggregated or pseudonymised basis where possible)

Research and Statistical Analysis

Compiling statistics on player behaviour, product performance, and market trends
Developing new features, games, and promotions
Conducting responsible gambling research (where possible using pseudonymised or aggregated data)

Providing you with news about promotions, bonuses, tournaments, and new products
Tailoring marketing offers based on your account and gameplay behaviour
Running surveys, contests, and loyalty programmes

You can object to, or withdraw consent for, marketing communications at any time as described in the “Marketing Communication” section below.

Marketing Communication

We may use your contact details and preference information to send:

Promotional emails or SMS
In-site messages and push notifications
Information on new games, bonuses, tournaments, and special offers

Legal Basis

We rely on:

Your explicit consent (e.g., ticking a box on registration or in your account settings); or
Our legitimate interest in promoting our Services to existing customers, where permitted by applicable law.

How to Opt-Out

You can manage your marketing preferences at any time by:

Using the “unsubscribe” link in marketing emails;
Following opt-out instructions in SMS messages; or
Contacting us at [email protected].

Opting out of marketing does not affect service-related communications (e.g., account, security, or legal notices).

Obtaining Personal Information

We collect personal data from the following sources:

Directly from you when you register an account, use our Services, contact support, or participate in promotions.
Automatically through your use of the Website, via cookies and similar technologies (see “Cookie Policy” below).
From third-party service providers, including:
Payment service providers and banks
Identity verification and KYC providers
Credit reference and fraud prevention agencies, where applicable
Game providers and platform partners
From public sources and sanctions/PEP databases, when required for AML/CFT and due diligence purposes.

Data Recipients

Your personal data may be accessed only by those who require it to perform their professional duties, including:

Customer support and account management teams
Payments and finance staff
Compliance, risk, and AML/CFT officers
Fraud prevention and security teams
IT, product, and technical support staff
Legal and regulatory affairs personnel
Senior management with a legitimate business need

All such personnel are subject to confidentiality obligations and internal data protection policies.

Releasing Data to Third Parties

We may share your information with third parties in the following circumstances, always under appropriate data protection safeguards and contractual arrangements:

Service Providers and Business Partners

Payment processors and banking partners for deposits, withdrawals, and chargeback handling
Game and platform providers to enable access to games and gameplay functionality
Identity verification, KYC, and AML service providers
Fraud prevention agencies and analytics providers
IT hosting, cloud, and security service providers
Marketing and communications providers (e.g., email and SMS platforms)

These third parties may only process your data in accordance with our instructions and for the specific purposes described in this Policy.

Legal and Regulatory Authorities

We may disclose your data where required by law or where we have a good-faith belief that such disclosure is necessary to:

Comply with a legal obligation, court order, or regulatory request
Comply with AML/CFT, tax, or gambling regulatory requirements
Protect the rights, property, or safety of Velvet Spins, our customers, or the public
Assist law enforcement in the investigation of suspected criminal activity

Corporate Transactions

In connection with any merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring or successor entity, subject to this Privacy Policy and applicable data protection laws.

Where your personal data is transferred outside New Zealand, the EU/EEA, or your country of residence, we will ensure that adequate safeguards are in place (such as standard contractual clauses, or equivalent measures) as required by GDPR or other relevant laws.

Data Retention

We will retain your personal data only for as long as necessary for the purposes outlined in this Privacy Policy or as required by law.

For AML/CFT and gambling compliance purposes, we typically retain your core account and transactional data for at least five (5) years following the closure of your account or the date of your last transaction, whichever is later, or for the period mandated by applicable law.
Certain records may be kept longer where there is an ongoing investigation, legal claim, or regulatory requirement.

After the applicable retention period:

We will either securely delete your personal data, or
Irreversibly anonymise it so that it can no longer be linked to you.

Subject to legal and regulatory obligations, you have the right to request erasure of your personal data once the mandatory retention period has expired. See “Your Rights & Contacting Us” below.

Security of Your Data

We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include, but are not limited to:

Secure ID/password and authentication processes for your account
Encryption of data in transit (e.g., TLS/SSL) and, where appropriate, at rest
Firewalls, intrusion detection, and access control systems
Segregation of duties and role-based access to personal data
Regular security testing, monitoring, and vulnerability management
Staff training on data protection, security, and AML/CFT obligations
Incident response and breach notification procedures in line with applicable laws

You are responsible for maintaining the confidentiality of your account credentials. Do not share your password with anyone and notify us immediately at [email protected] if you suspect unauthorised access to your account.

Your Rights & Contacting Us

Subject to applicable law (including GDPR where it applies), you have the following rights in relation to your personal data:

Right of access – to obtain confirmation whether we process your data and to receive a copy of the personal data we hold about you.
Right to rectification – to request correction of inaccurate or incomplete personal data.
Right to erasure – to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, and when we are not required by law to retain it.
Right to restriction of processing – to request a temporary restriction of processing under certain circumstances.
Right to data portability – to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller where technically feasible.
Right to object – to object to processing based on our legitimate interests, including profiling, and to object to direct marketing at any time.
Right to withdraw consent – where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, or if you have questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

If we have appointed a Data Protection Officer (DPO), you may also contact the DPO using the same email address, and your request will be forwarded appropriately.

You also have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the country where you live, work, or where an alleged infringement of data protection laws took place.

Our Website uses cookies and similar technologies to enhance your experience and to provide our Services effectively.

What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device and store certain information about your preferences or past actions.

Types of Cookies We Use

Essential (Strictly Necessary) Cookies

Required for the operation of the Website and core functions (e.g., logging in, maintaining sessions, security).
Without these cookies, the Services you request cannot be provided.
These cookies cannot be switched off in our systems, but you may be able to block them in your browser; however, the Website may then not function properly.

Functional Cookies

Enable enhanced functionality and personalisation, such as remembering your language preferences or game favourites.
May be set by us or by third-party providers whose services we use on our pages.
If you do not allow these cookies, some or all of these services may not function properly.

Advertising and Analytics Cookies

Used to deliver relevant advertisements, measure the effectiveness of marketing campaigns, and understand how users interact with the Website.
May collect pseudonymised information about your visits, such as pages viewed and links clicked.
May be set by us or carefully selected third-party partners.

Managing Cookies

You can manage or disable cookies through your browser settings. Please note:

Disabling certain cookies may impact the functionality and performance of the Website.
For more information on cookies and how to manage them, consult your browser’s help section.

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. Any material changes will be posted on this page with an updated “Last updated” date. Continued use of the Website after such changes will constitute your acceptance of the updated Policy.