Herospin Casino Privacy Policy

At Herospin Casino, safeguarding your personal data is a cornerstone of everything we do. This Herospin Casino privacy policy document explains in plain language what personal information we collect, why we collect it, how it is used and stored, and what privacy rights you hold as an Australian player. We are committed to full compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as the General Data Protection Regulation (GDPR) where applicable to players in other jurisdictions. Whether you are registering a new account, making a deposit, or simply browsing our site, Herospin Casino data protection standards apply at every step of your journey with us.

1. Who We Are – Data Controller Identity

Herospin Casino is operated by a company incorporated and registered in Curaçao, operating under a licence granted by the Government of Curaçao. As the entity that determines the purposes and means of processing your personal data, we act as the data controller for all information collected through our website at herospincasino-australia.com.

If you have any questions about this privacy policy or about how your user data is handled, you may contact our dedicated Data Protection Officer (DPO) at any time:

• Email: [email protected]
• General support: [email protected]
• Live chat: available 24/7 via the website

2. Personal Data We Collect

Herospin Casino data collection is carried out only to the extent necessary for the lawful operation of our services. Below is a detailed breakdown of the categories of personal information we may hold about you.

2.1 Identification and Contact Information

• Full legal name, date of birth, and gender
• Residential address, city, state, postcode, and country
• Email address and phone number
• Copies of government-issued identity documents (passport, driver's licence) required for KYC verification

2.2 Financial Information

• Payment method details (e.g., card type, last four digits, PayID reference, e-wallet identifiers)
• Deposit and withdrawal transaction records
• Bank account or cryptocurrency wallet addresses where applicable

2.3 Gaming Activity Data

• Game sessions, bets placed, wins, losses, and bonus usage history
• Responsible gambling settings (deposit limits, session limits, cooling-off periods, self-exclusion elections)
• VIP programme tier and cashback entitlements

2.4 Technical and Device Data

• IP address, device type, operating system, and browser version
• Cookies, session tokens, and similar tracking technologies
• Log files recording your interactions with our platform

2.5 Communication Data

• Records of live-chat conversations and email correspondence with our support team
• Feedback, complaints, and dispute resolution records
• Marketing preference choices and opt-in / opt-out status

2.6 Sensitive Information

We do not intentionally collect sensitive information as defined under Australian law (e.g., health, racial or ethnic origin, religious beliefs) unless it is volunteered by you in the context of a responsible gambling request or a complaint. Where such information is provided, it will be handled with the highest level of confidentiality and will not be used for any other purpose.

2.7 Data Received from Third Parties

We may receive personal information about you from third parties such as identity-verification providers, payment processors, anti-fraud services, and affiliate partners. All third-party data sharing arrangements are governed by strict contractual data-protection clauses.

3. How We Collect Your Data

Herospin Casino collects user data through several channels:

• Registration form: when you create your account on herospincasino-australia.com
• KYC verification: when you submit identity documents before your first withdrawal
• Transactions: when you make deposits or request withdrawals via any supported payment method
• Gameplay: automatically generated data each time you launch a game or interact with a live dealer table
• Cookies and tracking technologies: via your browser when you visit our website (see Section 6 for our full cookie policy)
• Customer support interactions: when you contact us via live chat or email
• Third-party partners: identity bureaus, payment providers, and fraud-detection services

4. Purposes and Legal Basis for Data Processing

Every instance of data processing at Herospin Casino rests on a defined lawful basis. The table below outlines our primary processing purposes and their corresponding legal grounds.

Where we rely on consent as the legal basis — for example, for marketing emails or optional analytical cookies — you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

5. Data Security at Herospin Casino

Herospin Casino data security is built on industry-leading technical and organisational measures designed to protect your personal information against unauthorised access, disclosure, alteration, or destruction.

5.1 Technical Safeguards

• 256-bit SSL/TLS encryption: all data transmitted between your device and our servers is protected by military-grade encryption
• Firewalls and intrusion detection systems: our infrastructure is protected by multiple layers of network security
• Data encryption at rest: sensitive fields in our databases are encrypted separately to minimise exposure risk
• RNG certification: our random number generators are independently certified, ensuring game integrity alongside player data integrity

5.2 Organisational Safeguards

• Strict role-based access controls — only authorised personnel can access user data
• Regular staff training on information security and data-handling obligations
• Vendor due-diligence processes to ensure third-party processors meet our data protection standards
• Documented incident-response procedures in the event of a data breach

Despite these measures, no system is completely impenetrable. We encourage you to use a strong, unique password and to enable any two-factor authentication features available on your account. If you suspect unauthorised access, please contact us immediately at [email protected].

6. Cookie Policy

The Herospin Casino cookie policy governs our use of cookies and similar technologies on herospincasino-australia.com. Cookies are small text files stored on your device that help us deliver a better, more personalised experience.

6.1 Types of Cookies We Use

You can manage your cookie preferences at any time via our Cookie Preference Centre, accessible from the footer of our website. You may also configure your browser to block or delete cookies; however, disabling essential cookies may impair your ability to use our services. Our cookie policy is reviewed and updated periodically to reflect changes in applicable law and our own practices.

7. Sharing Your Personal Data with Third Parties

Herospin Casino does not sell your personal data to third parties. We may, however, share user data with carefully selected third parties in the following circumstances:

7.1 Payment Providers

When you make a deposit or request a withdrawal, your financial details are shared with the relevant payment service provider (e.g., Visa, Mastercard, Skrill, Neteller, PayID, Neosurf, Paysafecard, or cryptocurrency networks). These providers process your payment data under their own privacy frameworks, which comply with PCI-DSS and applicable financial regulations.

7.2 Identity Verification and AML Partners

KYC and Anti-Money Laundering checks require us to share certain personal information with accredited identity-verification bureaus. This is a legal obligation under our operating licence and applicable anti-money laundering legislation.

7.3 Regulatory and Law Enforcement Authorities

We may disclose your personal data to government bodies, regulators, courts, or law enforcement agencies where we are legally required to do so or where disclosure is necessary to prevent fraud, protect our legal rights, or assist in an investigation.

7.4 Technology and Service Partners

We work with a range of technology providers — including game studios such as Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming, Yggdrasil, Hacksaw Gaming, and others — as well as IT hosting, customer-support software, and analytics providers. These entities act as data processors under our instruction and are bound by strict data-processing agreements.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, personal data held by Herospin Casino may be transferred to the relevant successor entity. You will be notified of any such transfer and of any material changes to this privacy policy in advance.

8. International Data Transfers

Because Herospin Casino is operated from Curaçao and uses technology partners based in various countries, your personal data may be transferred to and processed in jurisdictions outside Australia. When such transfers occur, we ensure an adequate level of protection is in place through one or more of the following mechanisms:

• Standard contractual clauses approved by the relevant supervisory authority
• Binding corporate rules where applicable
• Adequacy decisions recognising the receiving country's data-protection framework
• Your explicit consent where required by law

We will never transfer your personal information to a country that does not provide an appropriate level of data protection comparable to Australian standards.

9. Data Retention and Storage

Herospin Casino data storage practices are guided by the principle of minimisation: we retain your personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law.

Once the applicable retention period has expired, your data is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and research purposes without affecting your privacy rights.

10. Your Privacy Rights

As an Australian resident, you benefit from a comprehensive set of privacy rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where the GDPR applies, additional rights are also available. Herospin Casino is committed to facilitating the exercise of all applicable rights promptly and without undue delay.

10.1 Summary of Your Privacy Rights

• Right of Access: you may request a copy of the personal data Herospin Casino holds about you
• Right to Correction: you may ask us to correct inaccurate or incomplete personal information
• Right to Deletion (Right to be Forgotten): you may request erasure of your personal data where it is no longer necessary, subject to overriding legal obligations
• Right to Restriction of Processing: you may request that we limit how we use your user data in certain circumstances
• Right to Data Portability: where processing is based on consent or contract, you may request your data in a structured, machine-readable format
• Right to Object: you may object to data processing carried out on the basis of legitimate interests, including direct marketing
• Right to Withdraw Consent: where we rely on consent as the legal basis for processing, you may withdraw it at any time
• Right to Complain: you have the right to lodge a complaint with the relevant supervisory authority

10.2 How to Exercise Your Rights

To exercise any of your privacy rights, please contact our Data Protection Officer at [email protected] or via live chat. We will respond to your request within 30 days in line with our obligations under the Australian Privacy Act. In complex cases, we may extend this period by a further 60 days and will notify you accordingly.

Please note that certain rights may be limited where the data is required to fulfil a legal obligation — for example, AML records that must be retained for a statutory period cannot be deleted on request before that period expires.

11. Supervisory Authority – OAIC

If you are not satisfied with how Herospin Casino has handled your personal data or responded to your complaint, you have the right to escalate the matter to the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

For players in the European Economic Area, the relevant supervisory authority is determined by your country of residence.

12. Responsible Gambling and Data

Herospin Casino is firmly committed to responsible gambling. The personal data you provide when setting responsible gambling limits — including deposit limits, bet limits, loss limits, session limits, cooling-off periods (24 hours, 48 hours, 7 days, or 30 days), and self-exclusion elections (6 months, 1 year, 5 years, or permanent) — is processed exclusively for the purpose of protecting your wellbeing. This data is treated with a heightened level of confidentiality and will never be used for marketing purposes.

13. Children's Privacy

Our services are strictly for individuals aged 18 and over. Herospin Casino does not knowingly collect personal data from anyone under the age of 18. If we become aware that a minor has provided us with personal information, we will take immediate steps to delete that data and close the account. If you believe a minor has registered, please notify us at [email protected].

14. Changes to This Privacy Policy

We may update this Herospin Casino privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or regulatory guidance. When we make material changes, we will notify you by email (to the address associated with your account) and/or by displaying a prominent notice on our website. The "last updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this privacy policy periodically to stay informed about how we protect your personal data.

15. Contact Us

For all matters relating to Herospin Casino data protection, privacy rights, or information security, please reach out through any of the following channels:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• Live Chat: 24/7 via herospincasino-australia.com

Frequently Asked Questions (FAQ)

What personal data does Herospin Casino collect?

Herospin Casino personal data collection covers identification details (name, date of birth, address), contact information (email, phone), financial data (payment method details, transaction history), gaming activity logs, and technical data (IP address, device information, cookies). We collect only what is necessary for providing our services and meeting our legal obligations.

How does Herospin Casino protect my personal information?

Herospin Casino data security relies on 256-bit SSL/TLS encryption for all data in transit, encryption at rest for sensitive database fields, advanced firewalls, and strict internal access controls. Our team undergoes regular information security training, and all third-party processors are vetted to ensure they meet our data protection standards.

What is the Herospin Casino cookie policy?

The Herospin Casino cookie policy covers four categories of cookies: essential (always active), analytical, functional, and marketing. You can manage non-essential cookie preferences via our Cookie Preference Centre at any time. Declining marketing cookies will not affect your ability to play our 4,000+ games or access your account.

Can I request deletion of my personal data?

Yes. Under both the Australian Privacy Act and the GDPR, you have the right to request erasure of your personal data. Submit your request to [email protected]. Note that certain records — particularly financial and KYC data — must be retained for statutory periods (typically 5–7 years) and cannot be deleted before those periods expire.

Who can I contact if I have a privacy complaint?

In the first instance, please contact our Data Protection Officer at [email protected]. If your concern is not resolved to your satisfaction, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992. Herospin Casino cooperates fully with the OAIC and any other competent supervisory authority.

Does Herospin Casino share my data with third parties?

Herospin Casino never sells your personal information. We share user data only with payment providers, KYC/AML verification services, technology partners (under strict data-processing agreements), and regulatory authorities where legally required. All third-party data sharing is governed by confidentiality obligations and data protection contractual clauses.

How long does Herospin Casino retain my data?

Herospin Casino data storage retention periods range from 13 months for analytical cookie data up to 7 years for financial transaction records mandated by AML legislation. Account registration data is kept for the duration of your account plus 5 years after closure. Once the applicable period expires, data is securely deleted or anonymised.

What are my rights regarding data portability?

Where processing of your personal data is based on your consent or on a contract with you, you have the right to receive your data in a structured, commonly used, machine-readable format. To exercise this right, contact our DPO at [email protected]. Herospin Casino will fulfil your portability request within 30 days.

Your trust is the foundation of our relationship at Herospin Casino. This comprehensive privacy policy reflects our unwavering commitment to data protection, information security, and full respect for your privacy rights as an Australian player. We treat every piece of personal data entrusted to us with the highest degree of confidentiality, and we continuously review and strengthen our practices to keep pace with evolving legal standards and technological best practices. If you ever have questions or concerns about Herospin Casino privacy practices, our team is here to help — around the clock, every day of the year.