Spirit Casino Privacy Policy
Controller, Recipients, Cookies and Retention
The controller of your personal data is Dama N.V., Scharlooweg 39, Willemstad, Curaçao, the operator of Spirit Casino. Data goes to named recipients only where a task needs it. Visa, Mastercard, Apple Pay and MiFinity receive transaction details to process deposits and withdrawals, and crypto transfers in Bitcoin, Ethereum, Litecoin and Bitcoin Cash are recorded on the public ledger of each network. Game studios including Pragmatic Play, NetEnt, Play’n GO, Evolution Gaming, Iconic21 and Live Vegas receive a session identifier and technical data to run the game, and never your identity documents or payment details. Identity checks are carried out by our verification team and by service providers engaged by Dama N.V. for that purpose.
| Cookie category | What it does | Can you switch it off |
|---|---|---|
| Strictly necessary | Keeps your login session and secures the cashier | No |
| Functional | Remembers your cookie choice and display settings | Yes, in your browser |
| Analytics | Measures page performance and errors | Yes, in your browser or through the cookie notice |
To opt out of non-essential cookies, clear them in your browser settings or refuse them on the cookie notice. Account data is kept while your account is open. After closure, verification and transaction records are kept for five years to meet anti-money-laundering obligations, and other data is deleted or anonymised once no reason to keep it remains. Access to personal data inside Dama N.V. is limited to staff who need it for support, verification or compliance work, and passwords are stored as hashes, not as readable text.
Rights You Can Exercise
You may ask us for access to the data we hold about you, for correction of inaccurate details, for deletion, for restriction of processing, to object to processing based on our legitimate interest, and to receive your data in a portable format. Write to [email protected] from your registered address, and we will confirm your identity before acting. We answer within 30 days. Deletion cannot cover records we are required to keep, such as verification files and transaction history. If we refuse a request for that reason, we explain the decision in writing and delete everything that is not covered by the retention rule.
Reasons We Process Your Data and What Allows It
We process data only for defined purposes, each with its own legal basis.
| Purpose | Data used | Legal basis |
|---|---|---|
| Running your account and payments | Registration and payment data | Contract |
| Identity checks and anti-money-laundering | KYC documents, address proof | Legal obligation |
| Fraud prevention and platform security | IP address, device data, logs | Legitimate interest |
| Responsible gambling tools and monitoring | Limits, session and deposit history | Legal obligation and legitimate interest |
| Promotional emails | Email address, preferences | Consent, withdrawable at any time |
Complaints and Data Transfers Abroad
You may lodge a complaint about how we handle your data with the supervisory authority where you live. For Australian players that is the Office of the Australian Information Commissioner. We ask you to write to us first, so that we can try to resolve the matter directly. Dama N.V. is established in Curaçao, so your data is processed outside Australia. Data is encrypted in transit with SSL, and payment and game providers are bound by contractual data protection obligations. Data leaves Curaçao only for a named service, such as processing a MiFinity withdrawal or starting a live table with Evolution Gaming.
Categories of Personal Data
We collect five kinds of data. Registration data covers your name, date of birth, email address, residential address and a hashed password. Payment data covers the method used, amounts, dates and crypto wallet addresses. Verification data covers images of your Australian driver’s licence, passport or Medicare card and a utility bill or bank statement. Technical data covers your IP address, device type, browser and access logs. Play data covers game history, bonus status and the limits you set.
Contacting Us About Your Data
Send personal data requests to [email protected] with the subject Data request, from the email address registered on your account. State what you want: access, correction, deletion, restriction, objection or a portable copy. Do not attach identity documents unless we ask for them, and never send your password.