Spingranny Privacy Policy

Spingranny is operated by Ceshiroza SRL, a Costa Rica-registered company holding gaming licence ALSI-202408027-FI2 issued by the Gaming Board of Anjouan, Union of the Comoros. This page describes the personal data we collect from players and site visitors, the purposes for which we process it, and the rights available to individuals whose data we hold. Ceshiroza SRL is not established in the United Kingdom and does not hold a UK Gambling Commission licence; this policy reflects the operator’s own data-handling commitments and applicable Costa Rican law rather than UK GDPR or the Data Protection Act 2018.

What information we collect

We collect personal data across several categories depending on how you interact with the site. Account registration data includes your name, date of birth, residential address, email address, and phone number. KYC verification data includes copies of government-issued identity documents, proof of address, and payment-method documentation collected before your first withdrawal. We also collect gameplay data covering deposits, withdrawals, bets placed, session times, and game selections, as well as device and network data such as IP address, browser type, operating system, and device identifiers. Cookies and similar technologies are used for site functionality, session management, and analytics.

How we use your information

We process personal data to provide the service: creating and maintaining your account, processing deposits and withdrawals, and enabling gameplay across casino, live casino, and sportsbook products. We use identity and payment data to meet our regulatory obligations under licence ALSI-202408027-FI2, including age verification, KYC checks, anti-money laundering monitoring, and transaction review. Device and session data supports fraud detection and account security. Where you have opted in, we may use your contact details to send marketing communications, which you can withdraw at any time.

We share personal data with licensed payment processors to handle deposits and withdrawals, and with third-party identity verification and fraud-prevention providers to fulfil our KYC and AML obligations. Data may be disclosed to the Gaming Board of Anjouan, Union of the Comoros, as our licensing regulator, and to law enforcement or other authorities where we are legally required to do so. We do not sell personal data to third parties.

Data retention

We retain personal data for five years after a player stops using the service, in line with the operator’s published compliance commitments and anti-money laundering requirements. Certain records, including identity verification documents and transaction logs, may be kept for the full retention period regardless of account status. When the retention period expires, data is deleted or anonymised.

Your rights

You have the right to request a copy of the personal data we hold about you. You may ask us to correct inaccurate or incomplete data. You can request erasure of your data where no legal obligation requires us to retain it. You have the right to restrict or object to certain processing activities. Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. To exercise any of these rights, contact us using the details in the section below.

Contact us

Privacy queries and data subject requests can be sent to [email protected] , where replies are provided within one business day. For account closure requests, you may also write to [email protected] . No dedicated Data Protection Officer is named for this operator; all privacy correspondence is handled through the support team.