Herospin Casino Privacy Policy

At Herospin Casino, your privacy is not an afterthought — it is a core principle woven into every aspect of our operations. This Herospin Casino privacy policy explains in plain language how we collect, use, store and protect your personal data when you visit herospincasino-aus.com or use any of our services. We are committed to full compliance with the Australian Privacy Act 1988, the Australian Privacy Principles (APPs), and the General Data Protection Regulation (GDPR) where applicable. Whether you are a new player discovering our 4,000+ game catalogue or a loyal VIP member enjoying cashback rewards, this document tells you exactly what personal information we hold about you, why we hold it, and what your privacy rights are.

1. Who Is the Data Controller?

Herospin Casino is operated by a company registered in Curaçao and licensed by the Government of Curaçao. As the data controller, we are responsible for determining the purposes and means of data processing carried out on this platform. All questions relating to Herospin Casino data protection should be directed to our dedicated Data Protection Officer (DPO):

• E-mail: [email protected]
• Support e-mail: [email protected]
• Response time: within 30 calendar days of receipt

2. What Personal Data We Collect

Herospin Casino collects only the personal data that is necessary to deliver a secure, compliant and enjoyable gaming experience. Below is a comprehensive overview of the categories of personal information we may hold about you.

2.1 Identification and Contact Data

• Full legal name and date of birth
• Residential address (street, city, postcode, state, country)
• E-mail address and phone number
• Government-issued ID documents (passport, driver's licence, Medicare card — collected during KYC verification)

2.2 Financial Data

• Payment method details (partial card numbers, e-wallet identifiers, crypto wallet addresses)
• Deposit and withdrawal history
• Transaction amounts and timestamps
• Source of funds documentation (where required by AML obligations)

2.3 Gaming Activity Data

• Game sessions, bet amounts, win/loss records
• Bonus usage and wagering progress
• VIP level and loyalty point history
• Responsible gambling tool settings (deposit limits, session limits, self-exclusion status)

2.4 Technical and Device Data

• IP address and approximate geolocation
• Browser type, operating system, and device identifiers
• Cookie data and session tokens
• Log files generated by your interaction with the site

2.5 Communication Data

• Live chat transcripts and e-mail correspondence with our support team
• Survey responses and feedback submissions
• Marketing preferences and consent records

2.6 Sensitive Data

In limited circumstances — for example, to verify a responsible gambling self-exclusion request or to process a hardship claim — we may handle sensitive information as defined under the Australian Privacy Act 1988. We will always obtain explicit consent before collecting such data.

2.7 Data Received from Third Parties

We may receive user data from payment processors, identity verification agencies, fraud-prevention partners and advertising networks. This data is handled in accordance with the same standards set out in this privacy policy.

3. How We Collect Your Personal Information

Herospin Casino gathers personal information through several channels:

1. Direct collection: when you register an account, complete KYC verification, make a deposit or withdrawal, or contact customer support.
2. Automated collection: via cookies, web beacons, pixel tags and server logs as you browse the site.
3. Third-party sources: from payment providers, identity verification bureaus and fraud-detection services.
4. Publicly available sources: social media profiles or public registers, where permitted by law.

4. Why We Process Your Data — Purposes and Legal Basis

Every act of data processing at Herospin Casino is grounded in a lawful basis. The table below summarises our primary processing purposes and the corresponding legal grounds under both the Australian Privacy Principles and the GDPR.

5. Herospin Casino Cookie Policy

This section constitutes the Herospin Casino cookie policy and explains how we use cookies and similar tracking technologies on herospincasino-aus.com. A cookie is a small text file placed on your device when you visit our site. Cookies are integral to delivering a smooth, personalised experience and to understanding how our platform is used.

5.1 Types of Cookies We Use

You may manage or withdraw your consent to non-essential cookies at any time via our cookie-consent banner or your browser settings. Please note that disabling essential cookies may affect your ability to log in and access certain features. Our Herospin Casino cookie policy is reviewed annually to ensure it remains current.

6. Sharing Your Personal Data with Third Parties

Herospin Casino does not sell your personal data to third parties. We share user data only where necessary and always under strict confidentiality agreements or legal obligations:

• Payment providers: Skrill, Neteller, Paysafecard, Neosurf, Bitcoin/Ethereum/Litecoin processors and banking partners receive transaction data strictly to process your payments.
• Identity verification agencies: Third-party KYC and AML providers receive ID documents to fulfil our regulatory obligations.
• Regulatory authorities: We may disclose personal information to Australian or international regulatory and law-enforcement bodies when legally required.
• Technology and analytics partners: Providers of cloud hosting, fraud detection, customer support software and analytics tools may process data on our behalf under binding data-processing agreements.
• Game providers: Studios such as Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt and Microgaming may receive anonymised session data to ensure game integrity.

7. International Data Transfers

Given the global nature of online gaming, your personal data may be transferred to, and processed in, countries outside Australia. Herospin Casino ensures that any international transfer of user data is protected by appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the relevant authority
• Binding corporate rules where applicable
• Adequacy decisions recognising equivalent data protection standards

All international transfers are conducted in compliance with APP 8 of the Australian Privacy Act 1988, which requires us to take reasonable steps to ensure overseas recipients handle your personal information in accordance with the APPs.

8. Information Security and Data Storage

Herospin Casino data security is maintained through a multi-layered technical and organisational framework. We take information security seriously and have implemented the following measures to safeguard your personal data:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers
• AES-256 encryption for sensitive data at rest
• Enterprise-grade firewalls and intrusion detection systems
• Role-based access controls limiting staff access to personal information
• Regular penetration testing and security audits conducted by independent specialists
• RNG certification by accredited independent laboratories to guarantee fair play
• Mandatory KYC verification before the first withdrawal to prevent identity fraud

Despite these robust measures, no system is entirely immune to risk. We encourage you to use a strong, unique password for your Herospin Casino account and to enable two-factor authentication where available. In the unlikely event of a data security breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within the timeframes required by law.

8.1 Data Storage Locations

Data storage at Herospin Casino utilises secure, industry-certified data centres. Our primary servers are located within the European Economic Area and in jurisdictions offering equivalent protection standards. Backups are encrypted and stored in geographically separate locations to ensure business continuity.

9. Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes described in this privacy policy or to comply with legal and regulatory obligations. The key retention periods are as follows:

After the relevant retention period expires, your personal data is securely deleted or anonymised so that it can no longer be linked to you.

10. Your Privacy Rights

Herospin Casino recognises and respects the privacy rights afforded to you under the Australian Privacy Act 1988 and, where applicable, the GDPR. These privacy rights include:

10.1 Right of Access

You have the right to request a copy of the personal data we hold about you. We will respond to valid access requests within 30 days at no charge (subject to reasonable exceptions under the APPs).

10.2 Right to Correction

If any of your personal information is inaccurate, incomplete or out of date, you may request that we correct it. You can update basic account details directly in your player profile or contact [email protected] for more complex corrections.

10.3 Right to Deletion ("Right to Be Forgotten")

In certain circumstances you may request the deletion of your personal data. We will assess your request against our legal obligations — for example, we are required to retain KYC and financial records for regulatory purposes even after account closure.

10.4 Right to Restriction of Processing

You may ask us to restrict data processing in situations such as when you contest the accuracy of your data or when processing is unlawful but you prefer restriction over deletion.

10.5 Right to Data Portability

Where processing is based on your consent or a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used and machine-readable format.

10.6 Right to Object

You have the right to object to data processing based on legitimate interests, including profiling for direct marketing. Once you object to marketing processing, we will cease all marketing communications immediately.

10.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing e-mails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, click the "Unsubscribe" link in any marketing e-mail or contact [email protected].

To exercise any of the above privacy rights, please e-mail [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and fulfil it within 30 days.

11. Supervisory Authority — OAIC

If you believe that Herospin Casino has not handled your personal information in accordance with the Australian Privacy Act 1988, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au
• Phone: 1300 363 992
• Postal address: GPO Box 5218, Sydney NSW 2001

We encourage you to contact us first at [email protected] so that we have the opportunity to resolve your concern directly before a formal complaint is made.

12. Responsible Gambling and Data Processing

Herospin Casino is committed to responsible gambling, and this commitment is inseparable from our approach to data collection and data processing. We use your gaming activity data to identify potential problem-gambling behaviour and to administer the following tools:

• Deposit limits — daily, weekly and monthly caps
• Bet and loss limits — to prevent runaway losses
• Session time limits — reminders and automatic logouts
• Cooling-off periods — 24 hours, 48 hours, 7 days, or 30 days
• Self-exclusion — 6 months, 1 year, 5 years, or permanent

Data processed for responsible gambling purposes is kept strictly separate from marketing data. Players who are self-excluded will not receive any promotional communications from Herospin Casino for the duration of their exclusion.

13. Children's Privacy

Herospin Casino services are strictly for players aged 18 years and over. We do not knowingly collect personal data from minors. If we discover that a player under the age of 18 has provided us with personal information, we will immediately close the account, refund any deposits and delete all associated data. If you believe a minor has registered on our platform, please contact [email protected] immediately.

14. Changes to This Privacy Policy

Herospin Casino reserves the right to update this privacy policy at any time to reflect changes in our data-processing practices, legal requirements or business operations. When we make material changes, we will:

• Post the updated Herospin Casino privacy policy on this page with a revised "Last Updated" date
• Send an e-mail notification to registered players for significant changes
• Display a prominent notice on the homepage for at least 30 days

Your continued use of Herospin Casino after the effective date of any changes constitutes your acceptance of the updated privacy policy. We encourage you to review this page periodically to stay informed about how we protect your personal data.

Frequently Asked Questions — Herospin Casino Privacy

Does Herospin Casino sell my personal data to third parties?

No. Herospin Casino personal data is never sold to third parties. We share user data only with carefully selected partners (such as payment processors and KYC providers) under strict confidentiality obligations, and only to the extent necessary to deliver our services or comply with legal requirements.

How does Herospin Casino protect my data security?

Herospin Casino data security is built on 256-bit SSL/TLS encryption, enterprise firewalls, role-based access controls and regular independent security audits. All financial transactions are encrypted end-to-end, and your account credentials are stored using industry-standard hashing algorithms. Our commitment to information security means your data is protected at every layer.

What cookies does Herospin Casino use?

Our Herospin Casino cookie policy covers four types of cookies: essential, analytical, functional and marketing. You can manage your cookie preferences at any time via the consent banner. Disabling non-essential cookies will not prevent you from accessing the casino, although some personalisation features may be limited.

How long does Herospin Casino keep my personal information?

Retention periods depend on the type of data. Account and identity records are kept for the lifetime of your account plus 7 years to satisfy AML regulatory requirements. Gaming logs are retained for 5 years, and support communications for 3 years. After the applicable retention period, all personal information is securely deleted or anonymised.

How do I exercise my privacy rights?

To exercise your privacy rights — including access, correction, deletion or portability of your personal data — e-mail our Data Protection Officer at [email protected]. We will acknowledge your request within 5 business days and provide a full response within 30 days.

What is the lawful basis for Herospin Casino data processing?

Herospin Casino relies on four legal bases for data processing: contract performance (account and payment services), legal obligation (KYC/AML and responsible gambling compliance), legitimate interests (fraud prevention and service improvement), and consent (marketing communications and optional cookies). You may withdraw consent at any time.

Who can I contact if I have a privacy complaint?

In the first instance, please contact [email protected]. If you are not satisfied with our response, you have the right to lodge a formal complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. The OAIC is the supervisory authority responsible for data protection in Australia and can investigate complaints about potential breaches of the Australian Privacy Act 1988.

This Herospin Casino privacy policy was last reviewed and updated in 2025. By creating an account or continuing to use herospincasino-aus.com, you acknowledge that you have read, understood and agreed to the data collection, data processing and data storage practices described herein. Herospin Casino thanks you for your trust and remains committed to upholding the highest standards of privacy, confidentiality and information security for all Australian players.