This Privacy Policy explains how SpinPolo, operated by Win Top Ltd, collects, uses, stores, and shares your personal data when you use our web platform. It applies fully to all players residing in the United Kingdom. Please read it carefully so you understand your rights and our responsibilities.

What We Collect and Why

When you create an account with us, we ask for information such as your full name, date of birth, email address, and chosen payment details. This is not collected out of routine — we need it to verify your identity, process deposits and withdrawals securely, and meet our obligations under anti-money laundering and responsible gambling requirements. During transaction processing, your payment provider may pass us additional data, such as partial card details or wallet identifiers, solely to complete and record the transaction accurately.

We also collect technical data automatically as you browse the site. This includes your IP address, browser type, device type, and session activity logs. We use this information to keep the platform running securely, detect unusual or potentially fraudulent behaviour, and ensure the site functions correctly across different browsers and connection types. Cookies are used for session management and to remember your preferences between visits; they do not store sensitive financial information.

How We Protect and Share Your Data

Your data is protected using 256-bit SSL encryption across all connections to our web platform. Information is held on secure servers with strictly controlled internal access — only personnel who have a clear operational need to view your data are permitted to do so. We do not sell your personal information to third parties, and we do not use it for advertising purposes outside of SpinPolo.

There are limited circumstances in which we share your data externally. Payment gateways require certain details to process your transactions. Identity verification services may receive your documents when we carry out Know Your Customer checks. Where required by law or by a regulatory authority, we may also be obliged to disclose data to the relevant body. In each case, data is shared only to the extent necessary and under appropriate confidentiality obligations.

We retain your personal data for as long as your account remains active. Following account closure or a prolonged period of inactivity, we keep your records for the minimum period required by our licensing obligations and applicable law. Once that retention period has passed, your data is securely deleted or anonymised.

You have the right to request a copy of the personal data we hold about you, ask us to correct any inaccuracies, or request the removal of your data where we are no longer legally required to retain it. To exercise any of these rights, please contact us through the support channels available on our website. We will respond within a reasonable timeframe and, where we cannot fulfil a request in full, we will explain why.

If we make any material changes to this Privacy Policy, we will notify you by posting an updated version on this page. We encourage you to review it periodically. Continued use of the platform following any update constitutes your acknowledgement of the revised terms.