Herospin Casino Privacy Policy

At Herospin Casino, we are deeply committed to protecting the personal data and privacy of every player who visits our platform. This Herospin Casino privacy policy outlines how we collect, use, store, and safeguard your personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). Where applicable, we also align our practices with the General Data Protection Regulation (GDPR). Understanding our approach to data protection and information security empowers you to make informed decisions about your interactions with Herospin Casino.

1. Data Controller Identity

Herospin Casino is operated by a company registered in Curaçao, licensed by the Government of Curaçao. As the data controller, we are responsible for determining the purposes and means of data processing relating to our players' user data. For all privacy-related matters, you may contact our dedicated Data Protection Officer (DPO) at [email protected]. Our support team is also reachable at [email protected] for general inquiries.

2. Personal Data We Collect

Herospin Casino data collection practices are designed to gather only the information necessary to provide you with a safe, personalised, and compliant gaming experience. We collect the following categories of personal data:

2.1 Identification and Contact Information

Full name and date of birth
Residential address and postcode
Email address and mobile phone number
Username and password (stored in encrypted form)
Nationality and country of residence

2.2 Financial Information

Payment method details (card numbers are tokenised; we do not store full card data)
Transaction history, deposit amounts, and withdrawal requests
Bank account or e-wallet identifiers used for PayID, Skrill, Neteller, and similar methods
Cryptocurrency wallet addresses for Bitcoin, Ethereum, and Litecoin transactions

2.3 Gaming Activity Data

Game sessions, bet amounts, win/loss records, and game preferences
Bonus and free spin usage linked to promotional offers
VIP programme level (Bronze, Silver, Gold, Platinum, Diamond) and cashback history
Responsible gambling tool usage (deposit, bet, loss, and session limits; self-exclusion records)

2.4 Technical and Device Data

IP address and approximate geolocation
Browser type, device model, and operating system
Session timestamps, page visits, and navigation paths on herospinscasino-au.com
Cookies and similar tracking technologies (see Section 6)

2.5 Communication Data

Live chat transcripts and email correspondence with our support team
Feedback, complaints, and survey responses
Marketing preferences and opt-in/opt-out records

2.6 Sensitive Information

Where required by law, Herospin Casino may process sensitive personal information such as identity verification documents (passport, driver's licence) and proof of address. This is strictly limited to KYC/AML compliance purposes and is handled with the highest standards of data security and confidentiality.

2.7 Data from Third Parties

We may receive personal data from third-party sources including payment processors, identity verification providers, fraud prevention services, and publicly available databases used for AML screening.

3. How We Collect Your Data

Herospin Casino collects user data through the following methods:

Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
Automated collection: Technical data gathered automatically when you browse our website, including via cookies and server logs.
Third-party collection: Data received from payment providers, affiliate partners, and regulatory databases.

4. Purposes of Data Processing

The Herospin Casino data processing activities serve clear and lawful purposes, each supported by a valid legal basis under the Australian Privacy Act and GDPR where applicable:

Purpose	Legal Basis	Data Categories
Account registration and management	Contract performance	Identification, contact, financial
Providing gaming and payment services	Contract performance	Gaming activity, financial, technical
KYC/AML legal compliance	Legal obligation	Identification, financial, sensitive
Fraud prevention and platform security	Legitimate interest	Technical, financial, communication
Responsible gambling programme	Legal obligation / Legitimate interest	Gaming activity, communication
Marketing and promotional communications	Consent	Contact, communication
Service improvement and analytics	Legitimate interest	Technical, gaming activity
Customer support	Contract performance	All applicable categories

5. Cookie Policy

The Herospin Casino cookie policy governs the use of cookies and similar technologies on our website. Cookies are small text files stored on your device when you visit herospinscasino-au.com. They help us provide a seamless and personalised experience while maintaining data security.

5.1 Types of Cookies We Use

Essential Cookies

These cookies are strictly necessary for the website to function. They enable core features such as account login, session management, and security checks. You cannot opt out of essential cookies without affecting site functionality.

Analytical Cookies

Analytical cookies allow us to understand how players interact with our platform. We use tools such as Google Analytics to measure page visits, session duration, and navigation patterns. This data is aggregated and anonymised to inform service improvements.

Functional Cookies

Functional cookies remember your preferences, such as language settings, preferred payment methods, and game filters, so you enjoy a more tailored experience on each visit to Herospin Casino.

Marketing Cookies

With your consent, marketing cookies track your browsing behaviour across websites to deliver targeted advertisements relevant to your interests. You may withdraw consent for marketing cookies at any time through our cookie policy management centre or your browser settings.

5.2 Managing Your Cookie Preferences

You can manage cookie preferences at any time via the cookie consent banner displayed on your first visit or through your browser settings. Note that disabling certain cookies may limit the functionality of some features on our platform.

6. Sharing Your Data with Third Parties

Herospin Casino does not sell your personal data to third parties. However, we may share user data with carefully vetted partners in the following circumstances:

6.1 Payment Providers

We share necessary financial personal information with payment processors including Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, and cryptocurrency payment gateways. These providers are bound by their own strict data protection and information security obligations.

6.2 Regulatory and Legal Authorities

We are required by law to share user data with regulatory bodies, law enforcement agencies, and tax authorities when legally compelled to do so. This includes compliance with AML/CFT obligations and court orders.

6.3 Technology and Service Partners

We share relevant personal data with:

Game providers (including Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming, Yggdrasil, Hacksaw Gaming, Push Gaming, Spribe, Red Tiger, Nolimit City, and Relax Gaming) for game delivery
Identity verification services for KYC compliance
Fraud prevention and cybersecurity firms
IT infrastructure and cloud hosting providers
Customer support platform operators

All third-party service providers are contractually required to maintain appropriate data security measures and use your personal information solely for the specified purpose.

6.4 Affiliate Partners

If you arrived at Herospin Casino via an affiliate link, we may share limited data (such as registration confirmation) with the referring affiliate for commission tracking. No sensitive personal data is shared with affiliates.

7. International Data Transfers

As Herospin Casino operates globally, your personal data may be transferred to and processed in countries outside Australia. When such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs), adequacy decisions, or equivalent legal frameworks, to maintain the same level of data protection as required under Australian law.

8. Data Security

Herospin Casino data security is maintained through a comprehensive suite of technical and organisational measures. We take information security seriously and have implemented industry-leading protections for all user data:

256-bit SSL/TLS encryption for all data transmitted between your device and our servers
End-to-end encryption for sensitive personal data stored in our databases
Advanced firewall systems to prevent unauthorised access
RNG (Random Number Generator) certification by independent laboratories
Regular security audits and penetration testing
Strict access controls — only authorised personnel may access personal information
Mandatory KYC verification before the first withdrawal to prevent identity fraud
Continuous monitoring for suspicious activity and data breaches

Despite these measures, no system is entirely immune to risk. In the unlikely event of a data breach affecting your personal data, Herospin Casino will notify affected players and relevant authorities in accordance with applicable law.

9. Data Retention and Storage

Herospin Casino data storage practices follow a clear retention schedule aligned with legal obligations and operational needs. We retain personal data only for as long as necessary:

Data Category	Retention Period	Reason
Account and identification data	Duration of account + 5 years	Legal obligation (AML/KYC)
Transaction records	7 years after transaction	Tax and financial regulation
Gaming activity records	Duration of account + 2 years	Responsible gambling compliance
Communication data	3 years after last interaction	Customer service and dispute resolution
Marketing preferences	Until consent withdrawn	Consent-based processing
Technical/log data	12 months	Security and fraud prevention

Upon expiry of the retention period, personal data is securely deleted or anonymised. Herospin Casino data storage facilities are located in secure, access-controlled environments.

10. Your Privacy Rights

Herospin Casino privacy rights for Australian players are protected under the Privacy Act 1988 and the Australian Privacy Principles. Where GDPR applies, additional rights may be available. You have the right to:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete personal information.
Deletion: Request erasure of your personal data where it is no longer necessary for its original purpose (subject to legal retention obligations).
Restriction: Request that we limit the data processing of your personal information in certain circumstances.
Portability: Request a structured, machine-readable copy of your personal data (GDPR right).
Objection: Object to processing based on legitimate interests or for direct marketing purposes.
Withdrawal of consent: Withdraw consent for consent-based processing (such as marketing emails) at any time.

To exercise any of your privacy rights, contact our Data Protection Officer at [email protected]. We will respond to your request within 30 days. Identity verification may be required before we can fulfil your request to protect the confidentiality of your account.

11. Supervisory Authority — OAIC

If you believe that Herospin Casino has not handled your personal data in accordance with the Australian Privacy Act 1988, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC). The OAIC is Australia's national regulator for privacy and freedom of information.

Website: www.oaic.gov.au
Phone: 1300 363 992
Online complaint form: Available on the OAIC website

We encourage you to contact us first at [email protected] so we can resolve your concern directly before escalating to the OAIC.

12. Data Protection Officer

Herospin Casino has appointed a Data Protection Officer responsible for overseeing compliance with this Herospin Casino privacy policy and applicable data protection laws. You can contact the DPO directly:

Email: [email protected]
Response time: Within 5 business days for routine inquiries; within 72 hours for urgent privacy concerns

13. Children's Privacy

Herospin Casino does not knowingly collect personal data from individuals under the age of 18. Our platform is strictly for adult players only. If we become aware that a minor has provided personal information, we will immediately delete such data and close the account. If you believe a minor has registered on our platform, please contact [email protected] immediately.

14. Updates to This Privacy Policy

This Herospin Casino privacy policy may be updated periodically to reflect changes in our data processing practices, legal requirements, or business operations. When significant changes are made, we will notify registered players by email or via a prominent notice on herospinscasino-au.com. We encourage you to review this page regularly to stay informed about how we protect your personal data. The date of the most recent revision will always be displayed at the top of this page.

15. Frequently Asked Questions

Does Herospin Casino sell my personal data?

No. Herospin Casino does not sell, rent, or trade your personal data to any third party for marketing purposes. Your user data is shared only with essential service providers under strict data protection agreements.

How does Herospin Casino use cookies?

The Herospin Casino cookie policy covers four types of cookies: essential, analytical, functional, and marketing. Essential cookies are always active; you can manage preferences for others through our cookie consent tool or browser settings.

How can I access my personal data?

To exercise your privacy rights and request access to the personal information we hold about you, email our DPO at [email protected]. We will respond within 30 days.

Is my financial data secure at Herospin Casino?

Yes. Herospin Casino data security relies on 256-bit SSL/TLS encryption, advanced firewalls, and tokenised payment processing. We do not store full card numbers, and all financial personal data is encrypted at rest and in transit.

What happens to my data when I close my account?

Upon account closure, Herospin Casino data storage practices require us to retain certain records for legally mandated periods (typically 5–7 years for financial and KYC records). Other personal data is securely deleted once the retention period expires.

How do I withdraw consent for marketing communications?

You can withdraw consent for marketing emails and push notifications at any time by clicking the unsubscribe link in any marketing email, adjusting your account notification settings, or contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before you opted out.

Does Herospin Casino comply with Australian privacy law?

Yes. The Herospin Casino privacy policy is designed to comply with the Australian Privacy Act 1988 and all 13 Australian Privacy Principles. We are also mindful of GDPR requirements for players who may be covered by that regulation. Data protection is a core commitment at Herospin Casino, and we continually review our practices to ensure ongoing information security and confidentiality.