Personal data collected

• Identity and contact details: full name, username, date of birth, address, email, telephone number.
• Verification documents: ID copies, proof of address, and source-of-funds or source-of-wealth information where required by law.
• Account and usage information: login history, games played, bets placed, limits and safer gambling interactions, session logs.
• Transactions: deposits, withdrawals, payment method tokens and limited billing information processed by payment partners.
• Technical and device data: IP address, browser and device identifiers, operating system, app version, cookies, approximate location.
• Communications: support chats, emails, calls, and verification notes.
• Regulatory checks: sanctions and PEP screenings, self-exclusion status (GAMSTOP), affordability assessments and fraud risk indicators.

Why this information is collected

• To create and manage accounts and verify age and identity.
• To provide the online services and process payments securely.
• To promote safer gambling and meet responsible gambling duties.
• To prevent fraud, detect misuse, and comply with anti-money laundering and counter-terrorist financing laws.
• To operate, maintain, and improve websites, apps, and customer support.
• To meet reporting and record-keeping duties under the UK Gambling Commission licence conditions.

Protection measures

• TLS encryption in transit and encryption or tokenisation of payment information.
• Role-based access controls, least-privilege permissions, and multi-factor authentication for sensitive systems.
• Network segmentation, logging and monitoring, vulnerability management, and regular security testing.
• Supplier due diligence, written data processing agreements, and transfer safeguards for international processing.
• Data minimisation, pseudonymisation where appropriate, staff training, and incident response procedures.

Legal compliance and user rights

• The operator complies with UK GDPR, the Data Protection Act 2018, PECR, and applicable UK Gambling Commission requirements.
• Users have the right to access, correct, delete, restrict, and port their personal data, and to object to certain processing.
• Users may withdraw consent at any time for activities based on consent, such as direct marketing.
• Users may complain to the Information Commissioner’s Office (ICO). Guidance and contact details are available at ico.org.uk or by calling 0303 123 1113.

How to exercise rights

• Contact the Data Protection Officer at [email protected].
• A response will be provided within one month, or within an additional two months for complex requests. Identity verification may be required.

How personal information is used

• Account set-up and management, including age and identity checks.
• Processing deposits and withdrawals through PCI DSS compliant payment providers.
• Providing and operating the services, including customer support and troubleshooting.
• Safer gambling measures, such as limits, reality checks, interventions, and self-exclusion administration.
• Security, fraud prevention, sanctions screening, and anti-money laundering compliance.
• Analytics and service improvement to understand performance and enhance reliability.
• Personalising on-site experience and content preferences.
• Marketing by email, SMS, or notifications only where the user has provided consent, and subject to opt-out at any time.

Lawful bases for processing

• Contract: to provide the account and deliver requested services.
• Legal obligation: compliance with gambling, financial crime, tax, and consumer protection laws.
• Legitimate interests: security, analytics, and service improvement balanced against user rights.
• Consent: marketing communications, certain cookies, and optional features.

Automated decision-making

• Certain checks may use automated systems, such as affordability or fraud screening. Users can request human review, express a view, or contest a decision where it produces legal or similarly significant effects.

Access, correction, and deletion

• Users can review and update certain account details in profile settings.
• Requests for access, correction, deletion, restriction, or portability can be made to [email protected].
• Deletion is subject to statutory retention periods required for gambling and financial record-keeping.
• The operator may request identification to protect the user’s information before acting on a request.

Timeframes and process

• A response is usually provided within one month. Complex or multiple requests may take up to two further months.
• If a request is manifestly unfounded or excessive, a reasonable fee may be charged or the request may be refused with reasons.

Security checks and payments

• By using Prestige Spin, the user consents to security checks, identity and age verification, sanctions and PEP screening, affordability assessments where required, and the processing of payment data by authorised providers and credit reference agencies for these purposes.

• The services are intended for users aged 18 and over only.
• Age cannot be confirmed without appropriate documents. Verification is required before withdrawals and may occur at any time.
• If a minor’s data is found on the system, the account will be closed and information deleted where permitted by law. Certain records may be retained where legally required for crime prevention and regulatory reporting.
• Parents or guardians may contact [email protected] to request deletion. Proof of identity and relationship will be required.

• Personal information may be processed in other countries where technology or compliance partners operate, including cloud hosting, payments, identity verification, analytics, and customer support providers.
• Using the site constitutes consent to such transfers for the purposes described in this document.
• Safeguards are applied, including adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, and technical and organisational measures.
• All partners are bound by confidentiality and data protection obligations, and are subject to oversight and audit where appropriate.

• This disclaimer clarifies how the policy applies and may affect the scope of certain rules where permitted by law.
• The policy takes effect when the user accepts it through signature, electronic acceptance, or continued access to the services.
• If any term of this policy conflicts with mandatory law, the law prevails. If a provision is invalid, the remainder continues in effect.
• The operator may update this policy to reflect legal or operational changes. The latest version on the website applies from the date of publication.

• Cookies are small files stored on the device that help remember settings and understand how users interact with the websites and apps.
• They are used for statistics, behaviour analysis, personalisation, and service improvement. Some cookies are strictly necessary for security and core functions.
• Analytics and advertising cookies operate only where the user has provided consent through the cookie banner. Preferences can be changed at any time.
• Cookie retention is up to 1 year unless a shorter period is required. Users can manage cookies via browser settings, though some features may not function without necessary cookies.

• Using Prestige Spin signifies full acceptance of this Privacy Policy and agreement to the processing described.
• The current version published on this page prevails over any prior versions.
• Continued use after updates indicates acceptance of the updated policy. The effective date will be shown on this page.

• Personal information may be shared with third parties for lawful purposes: regulators and law enforcement, courts and dispute resolution bodies, payment providers, identity and age verification services, credit reference agencies, fraud prevention agencies, self-exclusion schemes such as GAMSTOP, analytics providers, and IT hosting or support vendors.
• Some third parties act as processors under instruction. Others act as independent controllers, for example certain payment providers and credit reference agencies, and they apply their own privacy notices.
• Where a list of specific partners is provided on the site, it explains the purpose and scope of sharing. If not listed, the user will be informed of the purpose and scope before sharing where required by law.
• Providing information to use the services constitutes consent to transfer data to relevant third parties for the stated purposes, subject to applicable legal bases and user rights.

• The site may contain links to external websites or services that have their own privacy policies.
• The operator is not responsible for how those websites handle personal data.
• Users should review the privacy and security practices of any external website before providing personal information.