GDPR Policy

Introduction

This GDPR Policy explains how Spintowin.bet collects, processes, stores, and protects personal data in accordance with the General Data Protection Regulation (GDPR). It also outlines what rights users have and how they may exercise those rights.

This document should be read together with our Privacy Policy, which provides broader information about data handling and general practices.

What Personal Data We Collect

Spintowin.bet collects only the minimum amount of personal data necessary for the functioning of the website. We do not collect bank details, identity documents, KYC information, payment data, or any sensitive categories of personal information.

We may process the following types of data:

Voluntarily provided data

• Email address, only if the user submits it through a contact form for communication purposes.

Automatically collected technical data

(Collected through cookies or analytics tools, aggregated and anonymous.)

• IP region or approximate geolocation
• Device type
• Browser information
• General usage data
• Cookie identifiers (non-personal)

Anonymous or aggregated data

• Statistical data for site optimization and security

Legal Basis for Processing (GDPR Articles 6–7)

We process user data only under the lawful bases permitted by the GDPR:

• Legitimate interests
  Security monitoring, fraud prevention, service improvement, and site optimization.
• User consent
  Applicable when users voluntarily submit their email through the contact form. Consent can be withdrawn at any time.
• Compliance with legal obligations
  If required by applicable EU or local regulations.

No other legal bases are used.

How We Use the Collected Data

We use personal and non-personal data strictly for the purposes listed below:

• analytics and performance improvement
• prevention of abuse or harmful activity
• security monitoring
• optimization of website features
• affiliate attribution (no personal data involved)
• communication with users who have contacted us voluntarily

We do not use collected data for automated decision-making or profiling.

Cookies & Tracking (GDPR-Compliant)

Spintowin.bet uses cookies that fall into the following categories:

• Essential cookies — required for core website functionality.
• Analytics cookies — aggregated statistics used to improve performance.
• Functional cookies — optional settings such as language preferences.

We explain in detail how cookies work in our Cookie Policy.

Users can disable cookies in their browser settings at any time.

We may use third-party tools such as:

• Google Analytics (aggregated statistics)
• Cloudflare (security and anti-bot protection)

No tracking cookies collect personal data.

Data Storage & Security

We apply technical and organizational security measures to protect data, including:

• encrypted connections (HTTPS)
• firewall and CDN protection
• restricted access to stored information
• secure hosting environments

Although no platform can guarantee absolute security, we follow industry-standard measures required under the GDPR.

Only aggregated analytics data and voluntary email submissions may be stored.

How Long We Store Data

Data is retained only for as long as necessary:

• Analytics data: stored in aggregated form and deleted according to the retention rules of the analytics provider.
• Email communications: deleted as soon as they are no longer needed for correspondence or support.

We do not keep user data longer than required for the purpose for which it was collected.

User Rights Under GDPR

Under the GDPR, users have the following rights:

• Right to access — request a copy of personal data we hold
• Right to rectification — correct inaccurate information
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent at any time (if consent is the processing basis)
• Right to lodge a complaint with an EU data protection authority

To exercise any of these rights, users may contact us via email or the contact form (details provided below).

Spintowin.bet processes only minimal data, so fulfilling user rights is straightforward.

Data Transfers Outside the EU

Some analytics or security tools may process anonymous technical data on servers outside the EU. These transfers follow GDPR-compliant safeguards such as:

• Standard Contractual Clauses (SCCs)
• Certified protection frameworks
• Industry-standard security obligations

Spintowin.bet does not transfer personal data to third parties for advertising or profiling purposes.

Affiliate partners do not receive personal data under any circumstances.

Third-Party Services

We may use carefully selected service providers, including:

• Google Analytics (aggregated statistics)
• Cloudflare (security and anti-bot protection)

These services operate under their own privacy policies and do not receive personal user data from us.

Affiliate platforms may receive anonymous referral identifiers only.

Breach Notification Policy

If a data breach involving personal data occurs, Spintowin.bet will notify affected users and supervisory authorities as required by the GDPR.
Since we store minimal personal data, the probability of a high-risk breach is low.

We do not share personal data with advertisers, partners, or external organizations.

Contact for GDPR Requests

Users may submit GDPR requests or questions to:

contact@spintowin.bet

Alternatively, a request can be made through the website’s contact form.