This Privacy Policy explains how Spin Kong, operated by Win Top Ltd, collects, uses, stores, and protects your personal data when you use our web platform. It applies fully to all players residing in the United Kingdom. Please read it carefully so that you understand your rights and how we handle your information.

What We Collect and Why

When you create an account with us, we collect personal information such as your full name, date of birth, email address, postal address, and payment details. This information is necessary to verify your identity, process deposits and withdrawals, and comply with our obligations under applicable licensing and anti-money laundering requirements. During transaction processing, we also receive data from payment gateways and identity verification services — for example, confirmation that the card or e-wallet used belongs to you. We do not collect more information than is reasonably required to fulfil these purposes.

We also gather technical data as you browse our web platform. This includes your IP address, browser type, device type, session duration, and page interaction logs. Cookies are used to keep your session active, remember your preferences, and maintain the security and functionality of the platform. You can manage cookie preferences through your browser settings, though disabling certain cookies may affect how the platform behaves for you.

How We Protect and Share Your Data

All data transmitted between your browser and our servers is protected using 256-bit SSL encryption. Your personal information is stored on secure servers with access restricted to authorised personnel only. We do not sell your data to third parties, and we do not share it for marketing purposes.

There are limited circumstances in which we may share your data with external parties. These include payment processors who facilitate your transactions, identity and age verification providers who confirm your eligibility to play, and regulatory or law enforcement authorities where we are legally required to disclose information. In each case, data is shared only to the extent necessary and subject to appropriate confidentiality obligations.

We retain your personal data for as long as your account remains active. Following account closure or a period of inactivity, we retain records for as long as required by our licensing authority and applicable financial regulations. Once the mandatory retention period has passed, your data is securely deleted or anonymised.

You have the right to access the personal data we hold about you, request corrections if any information is inaccurate, and ask us to delete your data where there is no legal obligation for us to retain it. To exercise any of these rights, please contact us through our customer support channel and we will respond within a reasonable timeframe. If you feel your data rights have not been respected, you may raise a concern with the relevant data protection authority in your jurisdiction.

We may update this Privacy Policy from time to time to reflect changes in our practices or regulatory requirements. When material changes are made, we will notify you via the contact details registered to your account or through a notice on our web platform. Continued use of the platform following such notification constitutes your acknowledgement of the updated policy.