Reef Spins Privacy Policy

This Privacy Policy explains how personal information may be handled when a person visits Reef Spins, sends an enquiry or uses an available account-related feature. It should be read with the Cookie Policy and Terms and Conditions.

The policy covers information handled through Reef Spins pages. A payment provider, game supplier or external support service may collect information under its own privacy policy when its service is opened or used.

The amount of information collected depends on the feature used. A person who only reads a public page normally provides less information than someone who contacts support, registers or completes an account check.

• Contact details such as name, email address and mobile number.
• Age, date of birth and location or country information.
• Account identifiers, settings and communication preferences.
• Payment references, currency, transaction status and method type.
• Verification status and documents requested for identity or security checks.
• Support messages, complaints and records of action taken.
• Device, browser, IP address, language and technical logs.
• Page activity, referring page and interaction information where permitted.

Information can be provided directly through a form, account field, verification process, transaction or support message. Technical information can also be created automatically when a browser requests a page, a security control operates or a cookie remembers a permitted preference.

Information may be received from a payment, identity, fraud-prevention or game service when needed to complete a requested function, verify a result or protect an account. Reef Spins does not require visitors to send sensitive documents through an ordinary email unless a secure approved process specifically requests them.

• To deliver pages, account functions and requested support.
• To check age, identity, account ownership and payment eligibility.
• To process, reconcile and investigate transactions.
• To prevent fraud, account takeover, misuse and technical attacks.
• To maintain records of consent, limits, exclusions and complaints.
• To improve accessibility, performance and page organisation.
• To send service notices and permitted communications.
• To meet applicable legal, regulatory and dispute-handling obligations.

Personal information should be limited to what is reasonably needed for the relevant purpose.

Commercial email or text messages should be sent only where the recipient has provided the required consent or another permitted basis applies. A marketing message should identify the sender and provide a clear way to unsubscribe.

An unsubscribe request does not prevent necessary service, security, payment or account-closure messages. Marketing preferences can be changed without making another deposit or providing additional sensitive information.

Personal information is not made public simply because it has been provided to Reef Spins. It may be disclosed only where reasonably required for a described purpose, with consent, or where permitted or required by applicable law.

• Hosting, security and technical service providers.
• Payment and transaction-processing providers.
• Identity, age and fraud-prevention services.
• Game or platform services needed to verify activity.
• Professional advisers and dispute-resolution services.
• Authorities where a valid legal requirement applies.

Online services can use infrastructure or specialist providers located in more than one country. As a result, information may be processed or stored outside the visitor’s location. The destination can depend on the feature, provider and technical route in use.

Where cross-border handling occurs, reasonable contractual, organisational and security measures should be used as required by applicable privacy rules. A visitor can ask for more information about the handling relevant to a specific request.

Information is retained only for as long as reasonably necessary for the purpose for which it was collected, account security, dispute handling and applicable record-keeping requirements. Different records can have different retention periods.

When information is no longer required, it should be deleted, anonymised or placed beyond ordinary use where practical. A deletion request may not remove a record that must be retained for security, fraud prevention, a dispute or another valid legal reason.

Reasonable technical and organisational safeguards are used to reduce the risk of unauthorised access, alteration, loss or disclosure. No internet transmission or storage system can be guaranteed completely secure.

Visitors also protect their information by using a private password, updating their device and browser, checking the website address, avoiding shared payment details and reporting suspicious account activity promptly.

Depending on the applicable privacy rules and the nature of the record, a person may request access to personal information, correction of inaccurate details, deletion, restriction, objection or information about how the data has been used.

A request should identify the account or contact method involved and describe the information concerned. Identity may need to be confirmed before personal information is released or changed. A reason will be provided where a request cannot be completed in full.

Reef Spins gambling-related content and account features are intended for adults aged 18 and over. A minor should not register, deposit or provide identity information. If information appears to belong to a person under 18, the account or request may be restricted while the issue is reviewed.

A parent or guardian who believes a minor has supplied personal information can contact support with enough detail to locate the record. Do not send the minor’s full identity documents through an ordinary email unless securely requested.

Send a privacy question, access request or complaint to [email protected] with “Privacy” in the subject line. Explain the concern, the relevant page or account feature and the outcome requested. Do not include a password or full payment card number.

The request will be reviewed and may require identity confirmation. If a response does not resolve the matter, the person may have the right to contact the privacy authority or dispute service available in their location.

This policy may be updated when information-handling practices, website functions or applicable requirements change. The date at the top of the page identifies the current published version.

A material change may also be communicated through an appropriate website or account notice. Continued use after an update is subject to the revised policy, but a new purpose that requires consent will not rely solely on silent continued browsing.