Last updated: July 2026
Every online casino depends on data. Registration, identity verification, payments — each step generates personal information. This page explains to players in Switzerland what data SpinEmpire typically collects, for what purposes it is processed, who may access it and what rights you hold as a user. The full privacy policy published on the platform is the binding document; this summary is intended to make it easier to read without replacing it.
Three categories apply. First, registration information: full name, date of birth, email address, phone number (optional) and residential address in Switzerland. This data is supplemented by verification documents — an official identity document such as a passport or Swiss identity card, proof of address and, in some cases, a selfie to confirm identity.
The second category is generated during gameplay: deposit and withdrawal history in CHF, bonus activations, game history including rounds and stakes. Third, technical data from each visit to the site — IP address, browser type, operating system, pages visited and session timestamps. The operator's full policy lists precisely what is retained.
The primary purpose is account management: authentication at login, payment processing, bonus management and customer support. Without this processing, a functional player account would be impossible. Data is also used to prevent fraud — identity verification before the first withdrawal, monitoring of unusual transactions and enforcement of the single-account rule.
Legal compliance represents another use: fulfilment of anti-money laundering obligations, reporting to the Curaçao gaming authority, tax obligations and cooperation with law enforcement where required. Marketing communications — promotional emails, SMS, push notifications — fall into a category with an opt-out option; unsubscribing does not affect account access. Data is also used in anonymised form to improve platform performance and game recommendations.
Like virtually every online gaming platform, SpinEmpire uses cookies. Some are technically necessary — without session cookies, no one would remain logged in. Others remember preferences such as language and currency, assist with fraud detection or collect anonymised analytics data via tools such as Google Analytics.
It is possible to restrict cookies in your browser settings; certain features such as staying logged in may be affected as a result. Third-party cookies are limited to analytical purposes. Control rests entirely with the user, via browser preferences or the cookie notice displayed on the site.
SpinEmpire does not sell personal data. Information is shared only where necessary: payment providers receive what is required to process transactions in CHF; identity verification services access verification documents; the Curaçao Gaming Control Board receives data for regulatory compliance purposes; hosting, email and analytics providers operate under data protection agreements.
Judicial authorities may request data in the context of a subpoena or ongoing investigation. As the operator is structured internationally, processing may take place outside Switzerland. No sharing with unrelated third parties for commercial purposes is covered by a serious privacy policy.
Connections to the platform use 256-bit SSL encryption; credentials and documents are never transmitted in plain text. AES-256 encryption protects data at rest. Internally, access follows a need-to-know principle, with multi-factor authentication for staff and regular access audits. Intrusion detection systems and real-time anomaly monitoring are in place, complemented by regular penetration testing.
Retention periods vary by data type: account data is kept for the period of activity and five years after closure; payment data for seven years; game history for three years; device and IP address data for one year. Marketing data is deleted within 30 days of unsubscription. Your own contribution matters too — a strong password and a locked device protect your account better than any policy.
You may request a copy of all personal data held about you within 30 days. Inaccurate information can be corrected. Where no legal retention obligation applies, deletion is possible — generally after account closure. You may also request your data in a portable format (CSV or JSON) and unsubscribe from marketing communications at any time.
All requests should be sent to [email protected] — include "Privacy Request" in the subject line and send from your registered email address. Responses are provided within 15 days. Unsubscribing from marketing emails can also be done directly via the unsubscribe link in any promotional message.
