Stepping into online gaming can be thrilling, but it also brings up questions about what happens to your personal information. At PiperSpin Casino, we believe understanding data protection should resemble a conversation, not a law exam. Whether you are spinning the reels for the first time or joining our affiliate programme, knowing how your data is collected, used, and safeguarded establishes the trust every great gaming experience depends on. This guide takes you through the essentials of our data protection policies in plain language, with a clear focus on the rights and responsibilities that matter to players and partners in Spain. We are focused on full transparency, and this is your starting point for feeling secure every time you visit us.
What a Data Protection Policy Really Includes
Many newcomers assume a data protection policy is merely another section of legal text they can ignore. It is really a promise. Fundamentally, this policy clarifies exactly what information we collect, why we need it, and how we protect it. For an internet casino such as PiperSpin Casino, that means specifying everything from the email address you use for registration to the identity documents mandated by Spanish legislation. The policy also describes who we share information with, including payment processors or oversight bodies, and under what stringent circumstances. By reading it, you gain a clear map of your own rights and our obligations. We view this document not as a defense for the company, but as a tool that empowers you to make informed decisions about your privacy while enjoying our platform.
The Fundamental Principles We Adhere To
Each choice we take regarding your data relies on a few foundational principles. Lawfulness means we deal solely with personal information when we possess a valid legal reason, such as fulfilling a contract with you or complying with anti-money laundering regulations. Equity and transparency oblige us to tell you upfront what happens to your data, never obscuring details in complicated jargon. Restriction of purpose ensures we gather data for specific, explicit reasons, like handling a withdrawal, and never repurpose it for unrelated marketing without your clear consent. Data reduction keeps us focused on gathering only what is necessary. These principles are not abstract ideals; they are the practical rules that shape our daily operations and shield every member of the PiperSpin Casino community.
The Application of Data Protection to iGaming
The internet gambling sector handles especially delicate categories of information, which makes solid privacy safeguards non-negotiable. Beyond basic contact details, we manage financial transactions, identification papers, and at times behavioral information that assists in encouraging responsible gambling. In Spain, providers like PiperSpin Casino must also follow particular regulations from the Dirección General de Ordenación del Juego (DGOJ) on top of the General Data Protection Regulation (GDPR). This dual layer of oversight means our policies are structured to meet strict criteria that protect both your privacy and the reliability of the gaming environment. Understanding this context allows you to understand why we request certain documents during account verification. It is not bureaucracy, but a legal safeguard for everyone involved.
How We Collect and Employ Your Details
Transparency about data collection begins with knowing the multiple ways details reaches us. We obtain data by means of direct contact, automatic tools, and trusted third parties, always with a defined objective attached. When you create an account, we require information like your name, date of birth, and address to authenticate your identity and ensure you meet the legal age requirement. If you enroll in our affiliate programme, we gather business information to handle commissions and maintain our partnership. Any piece of data has a clear function, be it processing a deposit, sending a withdrawal confirmation, or enhancing our website’s performance. We do not ever sell your personal information to outside advertisers, and we tightly control internal access to personnel who have a need for it to assist you.
Details You Provide Directly
The majority of the data we hold originates directly from you by way of forms, chats, and account settings. This includes registration details, payment method information, and any documents you upload for Know Your Customer (KYC) checks, such as a passport or utility bill. When you get in touch with our support team, we retain a record of that conversation to handle issues effectively and better our service. If you choose marketing communications, we register your preferences to send only appropriate offers, and you can adjust these settings at any time. We regard all directly supplied information as sensitive, using it only to deliver the services you have sought and to meet our legal obligations under Spanish gambling regulations.
Data Collected Without Manual Input
Similar to most modern websites, PiperSpin Casino uses automated technologies to collect certain technical data when you navigate our pages. This includes your IP address, device type, browser version, and how you engage with our games and features. We use cookies and analogous methods to recall your preferences, ensure your session secure, and evaluate site traffic. This automated gathering helps us spot potential fraud, including unusual login patterns, and allows us to customize your experience without undermining your privacy. You can manage cookie settings through your browser, though deactivating essential ones may impact site functionality. We always ask for consent for non-essential tracking in accordance with Spanish e-privacy rules.
Information Sharing Across Our Affiliate Programme
Our affiliate programme relies on partnerships that are built on trust, and data protection lies at the heart of that relationship. When you join as an affiliate, we share only the information required to track referrals, calculate commissions, and maintain the integrity of the programme. This usually includes a unique affiliate ID, aggregated performance statistics, and, in some cases, pseudonymised data about referred players. We never expose sensitive player details to affiliates, and we require every partner to adhere to strict data processing terms. Understanding these boundaries is crucial for both new and experienced affiliates who want to promote PiperSpin Casino responsibly while staying fully compliant with Spanish and EU privacy regulations.
Key Information for Affiliates
As an affiliate, you act as an independent promoter, not as a data controller for player information https://piperspinscasino.es/legal-and-affiliates/. You will have access to a dashboard showing clicks, registrations, and commission earnings, but you will not see individual player identities, payment details, or contact information. This separation is purposeful and legally required. If your promotional activities involve collecting any personal data yourself, for example, through a mailing list, you bear full responsibility for complying with the GDPR and LOPDGDD for that data. We recommend every affiliate post their own clear privacy policy and obtain proper consent before gathering any user information. Our team provides guidance to help you satisfy these expectations from day one.
DPA
Before you start earning commissions, we require all affiliates to enter into a Data Processing Agreement (DPA) where applicable. This contract defines the scope, duration, and purpose of any data handling that touches our systems. It mandates that you implement appropriate technical and organisational measures to protect information, report any data breaches without delay, and assist us in responding to data subject requests if your actions affect our obligations. The DPA also prevents you from using shared data for any purpose beyond the agreed campaign tracking. We keep these agreements straightforward and transparent, reflecting our commitment to making compliance accessible even for those new to affiliate marketing in the regulated Spanish market.
Security Measures That Safeguard Your Data
Strong policies mean little without solid security backing them. At PiperSpin Casino, we use a layered approach to shield your private and financial information from unauthorised access, modification, or loss. Our platform employs industry-standard encryption protocols, including TLS (Transport Layer Security), to protect data during transfer between your device and our servers. We also maintain strict access controls within our organisation, guaranteeing that only authorised personnel with a valid business need can view confidential information. Periodic security audits, vulnerability scans, and penetration testing help us spot and fix potential weaknesses before they can be exploited. While no online system can ensure absolute invulnerability, our constant investment in security technology and staff training reflects our dedication to keeping your data safe.
Your Rights Under Spanish and EU Law
As a participant or affiliate based in Spain, you are protected by some of the world’s most stringent data privacy laws. The GDPR and the Spanish Organic Law on Data Protection and Digital Rights (LOPDGDD) grant you a set of enforceable rights over your personal information. We have organized our internal processes to make using these rights uncomplicated, not a bureaucratic maze. Whether you want to see what data we hold, correct an error, or request deletion, our support team is equipped to handle your request swiftly and without unnecessary friction. Knowing these rights changes you from a passive user into an active participant in your own privacy protection, and we advise every newcomer to make themselves familiar with the tools available.
Retrieval, Rectification, and Portability
You have the right to demand a copy of the personal data we process about you at any time. This access right allows you to verify that we are handling your information lawfully. If you spot an inaccuracy, the right to rectification enables you to have incomplete or incorrect data corrected without undue delay. The right to data portability means you can receive certain information in a structured, commonly used format and even transfer it to another service provider where technically feasible. For example, you could request a machine-readable file of your transaction history. To assert any of these rights, simply contact our Data Protection Officer through the channels listed on our website, and we will respond within the legally mandated timeframe.
Removal, Restriction, and Objection
In specific circumstances, you can ask us to delete your personal data, often called the right to be forgotten. This is relevant, for instance, when the data is no longer necessary for the purpose we collected it, or if you withdraw consent and no other legal ground for processing exists. Please note that legal obligations, such as anti-money laundering record-keeping, may require us to retain certain information for a set period. You also have the right to restrict processing while a dispute over data accuracy or lawfulness is resolved, and the right to object to processing based on legitimate interests, including profiling for direct marketing. We honour all valid objections and never penalise you for exercising these fundamental rights.
Frequently Asked Questions
Are my payment data saved on your servers?
Our systems do not retain complete credit card numbers or CVV codes. Payment transactions are handled by PCI-DSS compliant third-party gateways focused on secure financial processing. We only keep tokenised references and transaction amounts required for your account history and dispute resolution. This approach minimises risk and aligns with strict industry security standards.
Can I request the complete deletion of my account and data?
You can request account closure and data deletion at any time. We will remove all personal data that we do not have a legal obligation to retain. Be advised that Spanish anti-money laundering laws mandate that we keep certain records, like transaction logs and identity verification documents, for a defined duration even after your account is closed. We will provide a clear explanation of what must be retained and the duration.
How long do you retain my personal data?
How long we retain data varies based on the data category and the purpose of its collection. Generally, we keep your account information for the duration of your relationship with us plus a period of five years after your last activity to comply with legal obligations. Data collected for marketing purposes is kept until you withdraw consent. After the relevant retention https://es.wikipedia.org/wiki/Anexo:XXXVIII_edici%C3%B3n_de_los_Premios_Goya period expires, we securely delete or anonymise your information.