Entering online gaming offers excitement, but it also raises questions about what happens to your personal information. At más detalles, we feel understanding data protection should resemble a conversation, not a law exam. If you are spinning the reels for the first time or joining our affiliate programme, knowing how your data is collected, used, and safeguarded creates the trust every great gaming experience depends on. This guide takes you through the essentials of our data protection policies in plain language, with a clear focus on the rights and responsibilities that matter to players and partners in Spain. We are committed to full transparency, and this is your starting point for feeling secure every time you visit us.
Frequently Asked Questions
Do you keep my payment details on your systems?
Full credit card numbers and CVV codes are not stored on our systems. PCI-DSS compliant third-party gateways, which specialise in secure financial handling, process all payment transactions. We only keep tokenised references and transaction amounts required for your account history and dispute resolution. This approach minimises risk and aligns with strict industry security standards.
Is it possible to request full deletion of my account and data?
Yes, you can request account closure and data erasure at any time. We will remove all personal data that we do not have a legal obligation to retain. Please be aware that anti-money laundering laws in Spain oblige us to keep certain records, such as transaction logs and identity verification documents, for a defined period even after account closure. We will provide a clear explanation of what must be retained and the duration.
How long do you retain my personal data?
How long we retain data varies based on the data category and the purpose of its collection. Typically, your account information is kept for the length of your relationship with us, plus an additional five years following your last activity to satisfy legal obligations. Information gathered for marketing is stored until you revoke your consent. After the relevant retention period expires, we securely delete or anonymise your information.
Data Sharing Within Our Affiliate Programme
Our affiliate programme is founded on partnerships that are built on trust, and data protection lies at the heart of that relationship. When you sign up as an affiliate, we share only the information required to track referrals, calculate commissions, and maintain the integrity of the programme. This usually includes a unique affiliate ID, aggregated performance statistics, and, in some cases, pseudonymised data about referred players. We never expose sensitive player details to affiliates, and we require every partner to adhere to strict data processing terms. Understanding these boundaries is crucial for both new and experienced affiliates who want to promote PiperSpin Casino responsibly while staying fully compliant with Spanish and EU privacy regulations.
What Affiliates Need to Know
As an affiliate, you act as an independent promoter, not as a data controller for player information. You will have access to a dashboard showing clicks, registrations, and commission earnings, but you will not see individual player identities, payment details, or contact information. This separation is intentional and legally required. If your promotional activities involve collecting any personal data yourself, for example, through a mailing list, you bear full responsibility for complying with the GDPR and LOPDGDD for that data. We recommend every affiliate provide their own clear privacy policy and obtain proper consent before gathering any user information. Our team provides guidance to help you meet these expectations from day one.

Data Processing Agreements
Before you start earning commissions, we require all affiliates to enter into a Data Processing Agreement (DPA) where applicable. This contract defines the scope, duration, and purpose of any data handling that touches our systems. It mandates that you implement appropriate technical and organisational measures to protect information, report any data breaches without delay, and assist us in responding to data subject requests if your actions affect our obligations. The DPA also prohibits you from using shared data for any purpose beyond the agreed campaign tracking. We keep these agreements simple and transparent, reflecting our commitment to making compliance accessible even for those new to affiliate marketing in the regulated Spanish market.
What a Data Protection Policy Actually Covers
Many newcomers assume a data protection policy is just another page of fine print they can skip. It is essentially a pledge. Fundamentally, this policy details precisely what data we collect, why we need it, and how we safeguard it. For an internet casino such as PiperSpin Casino, that means outlining everything from the email address you use to sign up to the identity documents mandated by Spanish legislation. The policy also describes who we share information with, including payment processors or oversight bodies, and under what rigorous terms. By going through it, you obtain a clear picture of your rights and our duties. We view this document not as a defense for the company, but as a resource that enables you to make educated choices about your privacy while enjoying our platform.
The Core Principles We Follow
All determinations we arrive at regarding your data is based on a few core principles. Lawfulness means we deal solely with personal information when we have a valid legal reason, such as satisfying a contract with you or complying with anti-money laundering regulations. Impartiality and transparency demand us to tell you upfront what happens to your data, never hiding details in complicated jargon. Limitation of use ensures we collect data for specific, explicit reasons, like handling a withdrawal, and never redirect it for unrelated marketing without your clear consent. Data minimisation keeps us focused on obtaining only what is necessary. These principles are not abstract ideals; they are the practical rules that define our daily operations and shield every member of the PiperSpin Casino community.
The Application of Data Protection to iGaming
The digital casino field handles especially delicate categories of information, which makes robust data security non-negotiable. Beyond basic contact details, we manage monetary transfers, identity verification documents, and at times behavioural data that assists in encouraging responsible gambling. In Spain, companies like PiperSpin Casino must also adhere to certain guidelines from the Dirección General de Ordenación del Juego (DGOJ) on top of the General Data Protection Regulation (GDPR). This dual layer of oversight means our policies are crafted to meet demanding benchmarks that secure both your privacy and the soundness of the gaming environment. Understanding this context helps you see why we require specific paperwork during account verification. It is not just administrative procedure, but a legal protection for everyone involved.
Security Measures That Safeguard Your Data
Robust policies count for little without robust security backing them. At PiperSpin Casino, we employ a multi-layered approach to shield your private and financial information from unauthorized access, modification, or loss. Our platform employs widely accepted encryption protocols, including TLS (Transport Layer Security), to guard data during transfer between your device and our servers. We also keep stringent access controls within our company, guaranteeing that only authorized personnel with a valid business need can access confidential information. Periodic security audits, vulnerability scans, and penetration testing aid us spot and fix potential weaknesses before they can be exploited. While no online system can guarantee absolute invulnerability, our ongoing investment in security technology and staff training demonstrates our devotion to keeping your data safe.
Your Rights Under Spanish and EU Law
As a player or affiliate located in Spain, you are covered by some of the world’s most stringent data privacy laws. The GDPR and the Spanish Organic Law on Data Protection and Digital Rights (LOPDGDD) grant you a set of actionable rights over your personal information. We have arranged our internal processes to make exercising these rights simple, not a bureaucratic maze. Whether you want to see what data we hold, correct an error, or request deletion, our support team is equipped to handle your request quickly and without unnecessary friction. Knowing these rights transforms you from a passive user into an active participant in your own privacy protection, and we urge every newcomer to make themselves familiar with the tools available.
Access, Rectification, and Portability
You have the right to request a copy of the personal data we process about you at any time. This access right enables you to verify that we are handling your information lawfully. If you spot an inaccuracy, the right to rectification allows you to have incomplete or incorrect data corrected without undue delay. The right to data portability implies you can receive certain information in a structured, commonly used format and even transfer it to another service provider where technically feasible. For example, you could request a machine-readable file of your transaction history. To assert any of these rights, simply contact our Data Protection Officer through the channels listed on our website, and we will respond within the legally mandated timeframe.
Removal, Restriction, and Objection
In specific circumstances, you can ask us to delete your personal data, often called the right to be forgotten. This is relevant, for instance, when the data is no longer necessary for the purpose we collected it, or if you withdraw consent and no other legal ground for processing exists. Please note that legal obligations, such as anti-money laundering record-keeping, may require us to retain certain information for a set period. You also have the right to restrict processing while a dispute over data accuracy or lawfulness is resolved, and the right https://es.wikipedia.org/wiki/Club_Atl%C3%A9tico_Central_C%C3%B3rdoba_(Santiago_del_Estero) to object to processing based on legitimate interests, including profiling for direct marketing. We uphold all valid objections and never penalise you for exercising these fundamental rights.
How We Gather and Utilize Your Data
Clarity about data collection starts with understanding the different ways data arrives at us. We collect data through direct engagement, automatic tools, and trusted third parties, constantly with a specific goal attached. When you create an account, we request information like your name, date of birth, and address to verify your identity and guarantee you meet the legal age requirement. If you join our affiliate programme, we obtain business information to manage commissions and maintain our partnership. Every piece of data carries a defined role, whether it involves handling a deposit, dispatching a withdrawal confirmation, or enhancing our website’s performance. We do not ever sell your personal information to external marketers, and we rigorously restrict internal access to personnel who require it to assist you.
Data You Supply In Person
Most of the data we keep originates directly from you via forms, chats, and account settings. This encompasses registration details, payment method information, and any documents you provide for Know Your Customer (KYC) checks, including a passport or utility bill. When you contact our support team, we store a record of that conversation to address issues promptly and better our service. If you choose marketing communications, we note your preferences to deliver only pertinent offers, and you can change these settings at any time. We treat all personally submitted information as confidential, using it exclusively to provide the services you have sought and to satisfy our legal obligations under Spanish gambling regulations.
Details Gathered Autonomously
Similar to most modern websites, PiperSpin Casino uses automated technologies to collect certain technical data when you navigate our pages. This includes your IP address, device type, browser version, and how you interface with our games and features. We use cookies and analogous methods to recall your preferences, ensure your session secure, and evaluate site traffic. This autonomous data capture helps us detect potential fraud, including unusual login patterns, and allows us to customize your experience without compromising your privacy. You can manage cookie settings through your browser, though turning off essential ones may affect site functionality. We always request consent for non-essential tracking in compliance with Spanish e-privacy rules.