Venturing into online gaming offers excitement, but it also raises questions about what happens to your personal information. At PiperSpin Casino, we believe understanding data protection should feel like a conversation, not a law exam. Whether you’re spinning the reels for the first time or joining our affiliate programme, knowing how your data is collected, used, and safeguarded builds the trust every great gaming experience depends on. This guide walks you through the essentials of our data protection policies in plain language, with a clear focus on the rights and responsibilities that matter to players and partners in Spain. We are focused on full transparency, and this is your starting point for feeling secure every time you visit us.
What a Data Protection Policy Entails
Many new users believe a data protection policy is just another page of fine print they can skip. It is essentially a pledge. At its core, this policy details precisely what data we collect, the reasons we require it, and how we protect it. For an online casino like PiperSpin Casino, that means outlining everything from the email address you use to sign up to the identity documents mandated by Spanish legislation. The policy also describes who we share information with, like payment processors or regulatory authorities, and under what strict conditions. By reading it, you gain a clear map of your own rights and our obligations. We see this document not as a shield for the business, but as a tool that empowers you to make informed decisions about your privacy while enjoying our platform.
The Core Principles We Follow
Each choice we take about your data relies on a few essential principles. Compliance with the law means we handle exclusively personal information when we possess a valid legal reason, such as satisfying a contract with you or following anti-money laundering regulations. Fairness and transparency oblige us to tell you upfront what happens to your data, never concealing details in complicated jargon. Restriction of purpose ensures we collect data for specific, explicit reasons, like managing a withdrawal, and never reuse it for unrelated marketing without your clear consent. Minimization of data keeps us focused on collecting only what is necessary. These principles are not abstract ideals; they are the practical rules that shape our daily operations and safeguard every member of the PiperSpin Casino community.
The Application of Data Protection to iGaming
The online gaming industry handles highly confidential categories of information, which makes strong data protection non-negotiable. Beyond basic contact details, we process monetary transfers, identification papers, and at times behavioural data that helps us promote responsible gambling. In Spain, operators like PiperSpin Casino must also follow particular regulations from the Dirección General de Ordenación del Juego (DGOJ) on top of the General Data Protection Regulation (GDPR). This twofold tier of oversight means our policies are designed to meet demanding benchmarks that secure both your privacy and the reliability of the gaming environment. Understanding this context helps you see why we require certain documents during account verification. It is not bureaucracy, but a legal safeguard for everyone involved.
Security Measures That Protect Your Data
Robust policies count for little without strong security behind them. At PiperSpin Casino, we implement a layered approach to protect your personal and economic information from unauthorized access, change, or loss. Our platform utilises industry-standard encryption protocols, including TLS (Transport Layer Security), to guard data during sending between your device and our servers. We also maintain stringent access controls within our company, guaranteeing that only approved personnel with a genuine business need can see confidential information. Periodic security audits, vulnerability scans, and penetration testing assist us spot and address potential weaknesses before they can be abused. While no online system can guarantee absolute invulnerability, our continuous investment in security technology and staff training shows our dedication to maintaining your data safe.
Information Sharing In Our Affiliate Programme
Our affiliate programme is built on partnerships that are built on trust, and data protection lies at the heart of that relationship. When you sign up as an affiliate, we share only the information required to track referrals, calculate commissions, and maintain the integrity of the programme. This generally includes as.com a unique affiliate ID, aggregated performance statistics, and, in some cases, pseudonymised data about referred players. We never expose sensitive player details to affiliates, and we require every partner to adhere to strict data processing terms. Understanding these boundaries is essential for both new and experienced affiliates who want to promote PiperSpin Casino responsibly while staying fully compliant with Spanish and EU privacy regulations.
What Affiliates Need to Know
As an affiliate, you serve as an independent promoter, not as a data controller for player information. You will have access to a dashboard showing clicks, registrations, and commission earnings, but you will not see individual player identities, payment details, or contact information. This separation is purposeful and legally required. If your promotional activities involve collecting any personal data yourself, for example, through a mailing list, you bear full responsibility for complying with the GDPR and LOPDGDD for that data. We recommend every affiliate provide their own clear privacy policy and obtain proper consent before gathering any user information. Our team provides guidance to help you meet these expectations from day one.
DPA
Before you start earning commissions, we require all affiliates to enter into a Data Processing Agreement (DPA) where applicable. This contract defines the scope, duration, and purpose of any data handling that touches our systems. It mandates that you implement appropriate technical and organisational measures to protect information, report any data breaches without delay, and assist us in responding to data subject requests if your actions affect our obligations. The DPA also prevents you from using shared data for any purpose beyond the agreed campaign tracking. We keep these agreements straightforward and transparent, reflecting our commitment to making compliance accessible even for those new to affiliate marketing in the regulated Spanish market.
How We Gather and Utilize Your Data
Openness about data collection starts with understanding the multiple ways information arrives at us. We obtain data via direct interactions, automated systems, and trusted third parties, consistently with a clear purpose attached. When you sign up, we require data like your name, date of birth, and address to authenticate your identity and ensure you meet the legal age requirement. If you participate in our affiliate programme, we obtain business information to administer commissions and uphold our partnership. Every piece of data carries a clear function, be it handling a deposit, issuing a withdrawal confirmation, or improving our website’s performance. We under no circumstances sell your personal information to external marketers, and we strictly limit internal access to staff who need it to support you.
Data You Supply Personally
The bulk of the data we keep originates directly from you through forms, chats, and account settings. This includes registration details, payment method information, and any documents you provide for Know Your Customer (KYC) checks, like a passport or utility bill. When you get in touch with our support team, we store a record of that conversation to handle issues effectively and improve our service. If you opt into marketing communications, we note your preferences to deliver only pertinent offers, and you can adjust these settings at any time. We regard all directly provided information as confidential, using it exclusively to offer the services you have asked for and to fulfill our legal obligations under Spanish gambling regulations.
Information Collected Without Manual Input
As with most modern websites, PiperSpin Casino uses automated tools to collect certain technical data when you navigate our pages. This encompasses your IP address, device type, browser version, and how you interact with our games and features. We use cookies and similar technologies to remember your preferences, ensure your session secure, and examine site traffic. This automatic collection helps us detect potential fraud, including unusual login patterns, and allows us to tailor your experience without undermining your privacy. You can manage cookie settings through your browser, though deactivating essential ones may impact site functionality. We constantly ask for consent for non-essential tracking in line with Spanish e-privacy rules.
Your Entitlements Under Spanish and EU Law
As a player or affiliate based in Spain, you are protected by some of the world’s most stringent data privacy laws. The GDPR and the Spanish Organic Law on Data Protection and Digital Rights (LOPDGDD) grant you a set of enforceable rights over your personal information. We have arranged our internal processes to make asserting these rights straightforward, not a bureaucratic maze. Regardless of you want to see what data we hold, correct an error, or request deletion, our support team is trained to handle your request quickly and without unnecessary friction. Knowing these rights transforms you from a passive user into an active participant in your own privacy protection, and we urge every newcomer to acquaint with the tools available.
Viewing, Rectification, and Portability
You have the right to ask for a copy of the personal data we process about you at any time. This access right lets you verify that we are handling your information lawfully. If you spot an inaccuracy, the right to rectification enables you to have incomplete or incorrect data corrected without undue delay. The right to data portability implies you can receive certain information in a structured, commonly used format and even transfer it to another service provider where technically feasible. For example, you could request a machine-readable file of your transaction history. To exercise any of these rights, simply contact our Data Protection Officer through the channels listed on our website, and we will respond within the legally mandated timeframe.
Removal, Restriction, and Objection
In specific circumstances, you can ask us to delete your personal data, often called the right to be forgotten. This is relevant, for instance, when the data is no longer necessary for the purpose we collected it, or if you withdraw consent and no other legal ground for processing exists. Please note that legal obligations, such as anti-money laundering record-keeping, may require us to retain certain information for a set period. You also have the right to restrict processing while a dispute over data accuracy or lawfulness is resolved, and the right to object to processing based on legitimate interests, including profiling for direct marketing. We honour all valid objections and never penalise you for exercising these fundamental rights.
Common Queries
Are my payment data saved on your servers?
We do not store full credit card numbers or CVV codes on our systems https://piperspinscasino.es/legal-and-affiliates/. PCI-DSS compliant third-party gateways, which specialise in secure financial handling, process all payment transactions. We only keep tokenised references and transaction amounts required for your account history and dispute resolution. This strategy lowers risk and adheres to strict security standards in the industry.
Can I request the complete deletion of my account and data?
You can request account closure and data deletion at any time. We will remove all personal data that we do not have a legal obligation to retain. Be advised that Spanish anti-money laundering laws mandate that we keep certain records, like transaction logs and identity verification documents, for a defined duration even after your account is closed. We will provide a clear explanation of what must be retained and the duration.
How long do you retain my personal data?
How long we retain data varies based on the data category and the purpose of its collection. Typically, your account information is kept for the length of your relationship with us, plus an additional five years following your last activity to satisfy legal obligations. Information gathered for marketing is stored until you revoke your consent. Once the applicable retention period ends, we securely delete or anonymise your data.