Venturing into online gaming is exciting, but it also brings up questions about what happens to your personal information https://piperspinscasino.es/legal-and-affiliates/. At PiperSpin Casino, we feel understanding data protection should feel like a conversation, not a law exam. Whether you are spinning the reels for the first time or joining our affiliate programme, knowing how your data is collected, used, and safeguarded creates the trust every great gaming experience depends on. This guide explains the essentials of our data protection policies in plain language, with a clear focus on the rights and responsibilities that matter to players and partners in Spain. We are committed to full transparency, and this is your starting point for feeling secure every time you visit us.
What a Data Protection Policy Actually Covers
Many newcomers assume a data protection policy is just another page of fine print they can skip. It truly is a commitment. At its core, this policy clarifies exactly what information we collect, why we need it, and how we keep it safe. For an internet casino such as PiperSpin Casino, that means detailing everything from the email address you use to register to the verification documents required by Spanish law. The policy also outlines who we share data with, such as payment processors or regulatory bodies, and under what strict conditions. By going through it, you obtain a clear picture of your rights and our duties. We view this document not as a defense for the company, but as an instrument that helps you make knowledgeable decisions about your privacy while playing on our platform.
The Core Principles We Follow
Every decision we make regarding your data is based on a few core principles. Compliance with the law means we only process personal information when we hold a valid legal reason, such as satisfying a contract with you or following anti-money laundering regulations. Equity and transparency oblige us to tell you upfront what happens to your data, never obscuring details in complicated jargon. Restriction of purpose ensures we collect data for specific, explicit reasons, like processing a withdrawal, and never redirect it for unrelated marketing without your clear consent. Data reduction keeps us focused on obtaining only what is necessary. These principles are not abstract ideals; they are the practical rules that define our daily operations and shield every member of the PiperSpin Casino community.
How Data Protection Applies to iGaming
The internet gambling sector handles particularly sensitive categories of information, which makes robust data security non-negotiable. Beyond fundamental personal data, we handle financial transactions, identity verification documents, and sometimes behavioral information that supports our efforts for responsible gambling. In Spain, operators like PiperSpin Casino must also adhere to specific directives from the Dirección General de Ordenación del Juego (DGOJ) on top of the General Data Protection Regulation (GDPR). This double level of oversight means our policies are crafted to meet strict criteria that secure both your privacy and the reliability of the gaming environment. Understanding this context helps you see why we require particular files during account verification. It is no mere red tape, but a regulatory shield for everyone involved.
Information Sharing In Our Affiliate Programme
Our affiliate programme is built on partnerships that thrive on trust, and data protection lies at the heart of that relationship. When you sign up as an affiliate, we share only the information strictly necessary to track referrals, calculate commissions, and maintain the integrity of the programme. This typically includes a unique affiliate ID, aggregated performance statistics, and, in some cases, pseudonymised data about referred players. We never disclose sensitive player details to affiliates, and we require every partner to adhere to strict data processing terms. Understanding these boundaries is vital for both new and experienced affiliates who want to promote PiperSpin Casino responsibly while staying fully compliant with Spanish and EU privacy regulations.
Key Information for Affiliates
As an affiliate, you serve as an independent promoter, not as a data controller for player information. You will have access to a dashboard showing clicks, registrations, and commission earnings, but you will not see individual player identities, payment details, or contact information. This separation is deliberate and legally required. If your promotional activities involve collecting any personal data yourself, for example, through a mailing list, you bear full responsibility for complying with the GDPR and LOPDGDD for that data. We recommend every affiliate post their own clear privacy policy and obtain proper consent before gathering any user information. Our team provides guidance to help you satisfy these expectations from day one.
Data Handling Contracts
Before you start earning commissions, we require all affiliates to enter into a Data Processing Agreement (DPA) where applicable. This contract defines the scope, duration, and purpose of any data handling that touches our systems. It mandates that you implement appropriate technical and organisational measures to protect information, report any data breaches without delay, and assist us in responding to data subject requests if your actions affect our obligations. The DPA also prevents you from using shared data for any purpose beyond the agreed campaign tracking. We keep these agreements simple and transparent, reflecting our commitment to making compliance accessible even for those new to affiliate marketing in the regulated Spanish market.
Your Entitlements Under Spanish and EU Law
As a user or affiliate based in Spain, you are safeguarded by some of the world’s most robust data privacy laws. The GDPR and the Spanish Organic Law on Data Protection and Digital Rights (LOPDGDD) give you a set of binding rights over your personal information. We have arranged our internal processes to make using these rights simple, not a bureaucratic maze. If you want to see what data we hold, correct an error, or request deletion, our support team is prepared to handle your request quickly and without unnecessary friction. Being aware of these rights converts you from a passive user into an active participant in your own privacy protection, and we advise every newcomer to make themselves familiar with the tools available.
Viewing, Rectification, and Portability
You have the right to request a copy of the personal data we process about you at any time. This access right allows you to verify that we are handling your information lawfully. If you spot an inaccuracy, the right to rectification enables you to have incomplete or incorrect data corrected without undue delay. The right to data portability means you can receive certain information in a structured, commonly used format and even transfer it to another service provider where technically feasible. For example, you could request a machine-readable file of your transaction history. To assert any of these rights, simply contact our Data Protection Officer through the channels listed on our website, and we will respond within the legally mandated rtve.es timeframe.
Deletion, Restriction, and Objection
In specific circumstances, you can ask us to delete your personal data, often called the right to be forgotten. This is relevant, for instance, when the data is no longer necessary for the purpose we collected it, or if you withdraw consent and no other legal ground for processing exists. Please note that legal obligations, such as anti-money laundering record-keeping, may require us to retain certain information for a set period. You also have the right to restrict processing while a dispute over data accuracy or lawfulness is resolved, and the right to object to processing based on legitimate interests, including profiling for direct marketing. We uphold all valid objections and never penalise you for exercising these fundamental rights.
Protection Systems That Safeguard Your Data
Robust policies count for little without robust security behind them. At PiperSpin Casino, we use a tiered approach to shield your confidential and economic information from illegal access, change, or loss. Our platform uses widely accepted encryption protocols, including TLS (Transport Layer Security), to guard data during sending between your device and our servers. We also keep rigorous access controls within our organisation, guaranteeing that only authorised personnel with a genuine business need can view confidential information. Routine security audits, vulnerability scans, and penetration testing aid us identify and fix potential weaknesses before they can be used. While no online system can promise absolute invulnerability, our continuous investment in security technology and staff training demonstrates our dedication to keeping your data safe.
How We Collect and Use Your Data
Transparency about data collection starts with understanding the different ways information reaches us. We obtain data via direct engagement, automatic tools, and trusted third parties, consistently with a clear purpose attached. When you sign up, we request data like your name, date of birth, and address to authenticate your identity and ensure you meet the legal age requirement. If you participate in our affiliate programme, we collect business information to handle commissions and uphold our partnership. Every piece of data has a defined role, be it handling a deposit, dispatching a withdrawal confirmation, or improving our website’s performance. We never sell your personal information to outside advertisers, and we strictly limit internal access to employees who need it to support you.
Details You Submit In Person
The majority of the data we hold comes directly from you via forms, chats, and account settings. This covers registration details, payment method information, and any documents you upload for Know Your Customer (KYC) checks, like a passport or utility bill. When you reach out to our support team, we keep a record of that conversation to address issues effectively and enhance our service. If you choose marketing communications, we note your preferences to dispatch only relevant offers, and you can change these settings at any time. We handle all directly supplied information as confidential, using it exclusively to deliver the services you have sought and to satisfy our legal obligations under Spanish gambling regulations.
Information Collected Automatically
As with most modern websites, PiperSpin Casino uses automatic systems to obtain certain technical data when you navigate our pages. This encompasses your IP address, device type, browser version, and how you engage with our games and features. We use cookies and analogous methods to recall your preferences, maintain your session secure, and evaluate site traffic. This automated gathering helps us identify potential fraud, including unusual login patterns, and allows us to tailor your experience without jeopardizing your privacy. You can adjust cookie settings through your browser, though disabling essential ones may influence site functionality. We consistently request consent for non-essential tracking in accordance with Spanish e-privacy rules.
Frequently Asked Questions
Are my payment data saved on your servers?
Full credit card numbers and CVV codes are not stored on our systems. PCI-DSS compliant third-party gateways, which specialise in secure financial handling, process all payment transactions. Tokenised references and transaction amounts needed for your account history and dispute resolution are the only items retained in our records. This approach minimises risk and aligns with strict industry security standards.
May I ask for the complete removal of my account and data?
Yes, you can request account closure and data erasure at any time. All personal information we are not legally obliged to keep will be deleted. Note that anti-money laundering regulations in Spain require us to retain specific records, including transaction logs and identity verification documents, for a set period even after account closure. We will transparently outline what records are kept and their retention period.
What is the retention period for my personal data?
How long we retain data varies based on the data category and the purpose of its collection. As a rule, we retain your account information for as long as you are a customer, plus five years after your last activity to meet legal requirements. Information gathered for marketing is stored until you revoke your consent. Once the applicable retention period ends, we securely delete or anonymise your data.
