At Herospin Casino, protecting your personal data is a core commitment. This Herospin Casino privacy policy explains how we collect, process, store and safeguard your personal information when you use our platform at herospinau.com. Our approach to data protection is governed by the Australian Privacy Act 1988, the Australian Privacy Principles (APPs), and the General Data Protection Regulation (GDPR) where applicable to our international operations. By registering and using Herospin Casino, you acknowledge that you have read and understood this privacy policy.
1. Data Controller Identity
Herospin Casino is operated by a company registered in Curaçao and licensed by the Government of Curaçao. As the data controller, we are responsible for determining how your personal data is used and ensuring appropriate information security measures are in place. For all data protection enquiries, you may contact our Data Protection Officer at [email protected]. Our DPO is committed to upholding your privacy rights and ensuring compliance with all applicable privacy legislation.
2. Personal Data We Collect
Herospin Casino collects various categories of personal information to deliver a safe, compliant, and personalised gaming experience. Our data collection practices are transparent and limited to what is necessary for the purposes outlined in this policy.
2.1 Categories of Personal Information
| Category | Examples |
|---|---|
| Identification data | Full name, date of birth, nationality, government-issued ID |
| Contact data | Email address, phone number, residential address |
| Financial data | Payment method details, transaction history, withdrawal requests |
| Gaming activity data | Bets placed, games played, session durations, win/loss records |
| Technical data | IP address, browser type, device identifiers, operating system |
| Communication data | Live chat transcripts, email correspondence, support tickets |
| Sensitive data | Responsible gambling disclosures (processed with explicit consent) |
| Third-party data | Data received from payment providers, identity verification services |
2.2 Methods of Data Collection
We collect your user data through the following methods:
- Direct collection — information you provide during registration, KYC verification, or when contacting support
- Automated collection — technical data gathered via cookies, log files, and analytics tools as you navigate herospinau.com
- Third-party sources — data received from payment processors, fraud prevention services, and identity verification providers
- Gaming activity — data generated automatically through your use of our 4,000+ game catalogue
3. Purposes of Data Processing
Herospin Casino data processing activities are conducted for clearly defined and lawful purposes. We do not use your personal data for any purpose incompatible with those listed below.
3.1 Primary Processing Purposes
- Account management — creating, maintaining, and administering your player account
- Service provision — enabling access to games, bonuses, promotions, and payment services
- Legal compliance — fulfilling KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations required by our Curaçao licence
- Security and fraud prevention — detecting and preventing fraudulent transactions and account misuse
- Responsible gambling — monitoring gaming behaviour and applying limits, cooling-off periods, or self-exclusion where appropriate
- Communication — sending transactional notifications, promotional offers (where consented), and service updates
- Improvement — analysing user data to enhance platform performance, game selection, and the overall player experience
3.2 Legal Basis for Processing
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Contract performance |
| KYC and AML checks | Legal obligation |
| Marketing communications | Consent (withdrawable at any time) |
| Fraud detection and security | Legitimate interest |
| Responsible gambling monitoring | Legitimate interest / consent |
| Platform analytics and improvement | Legitimate interest |
4. Cookie Policy
The Herospin Casino cookie policy governs how we use cookies and similar tracking technologies on herospinau.com. Cookies are small text files stored on your device that help us provide a better, more personalised experience. You can manage your cookie preferences through your browser settings or via our consent management tool displayed upon your first visit.
4.1 Types of Cookies Used
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential cookies | Enable core site functionality — login sessions, security tokens | Session / up to 1 year |
| Analytical cookies | Track site performance, page views, and user behaviour patterns | Up to 2 years |
| Functional cookies | Remember your preferences — language, currency, display settings | Up to 1 year |
| Marketing cookies | Serve relevant promotional content and track campaign performance | Up to 2 years |
Essential cookies cannot be disabled as they are required for the site to function. All other cookie categories require your consent and may be withdrawn at any time without affecting your ability to use Herospin Casino.
5. Sharing Personal Data with Third Parties
Herospin Casino does not sell or rent your personal information to third parties. We may share your user data only in the following circumstances and with appropriate safeguards in place:
- Payment providers — PayID, Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, Bitcoin, Ethereum, Litecoin, and bank transfer partners require access to financial data to process deposits and withdrawals
- Regulatory authorities — We may disclose personal data to government authorities, regulators, or law enforcement when required by applicable law or our Curaçao licence obligations
- Identity verification partners — KYC service providers assist us in verifying player identities before processing first withdrawals
- Technology partners — Game providers such as Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming, and others may receive limited technical data to facilitate gameplay
- Fraud prevention services — Third-party security specialists help us detect and prevent fraudulent activity on the platform
All third-party partners engaged by Herospin Casino are contractually bound to maintain appropriate data security standards and to use your personal information solely for the agreed purpose.
6. International Data Transfers
As Herospin Casino operates internationally, your personal data may be transferred to and processed in countries outside Australia. Where such transfers occur, we implement appropriate safeguards including Standard Contractual Clauses (SCCs), adequacy decisions, or other legally recognised transfer mechanisms. Herospin Casino data protection standards apply regardless of where your user data is processed, ensuring consistent information security across all jurisdictions.
7. Data Security Measures
Herospin Casino takes data security extremely seriously. We deploy a multi-layered approach to protect your personal information against unauthorised access, disclosure, alteration, or destruction.
7.1 Technical Security Measures
- 256-bit SSL/TLS encryption — all data transmitted between your device and herospinau.com is encrypted using industry-standard 256-bit Secure Socket Layer technology
- Firewall protection — advanced firewalls monitor and control incoming and outgoing network traffic
- Intrusion detection systems — real-time monitoring for suspicious activity and potential security threats
- RNG certification — our Random Number Generator is independently certified, ensuring fair gaming and the integrity of player data
- Access controls — strict role-based access ensures only authorised personnel can access personal data
- Data pseudonymisation — where appropriate, personal information is pseudonymised to reduce risk in the event of a breach
7.2 Organisational Security Measures
- Regular staff training on data protection and privacy best practices
- Internal privacy audits and security assessments conducted periodically
- Data breach response procedures aligned with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988
- Vendor due diligence to ensure third-party partners maintain equivalent information security standards
8. Data Storage and Retention Periods
Herospin Casino data storage practices are designed to retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | 5 years after account closure | AML/KYC legal obligations |
| Financial transaction records | 7 years | Australian tax and AML compliance |
| Gaming activity data | 3 years after account closure | Responsible gambling monitoring |
| Communication records | 2 years | Dispute resolution and quality assurance |
| Technical/log data | 12 months | Security and fraud investigation |
| Marketing consent records | Until consent is withdrawn | Compliance with consent obligations |
Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with our data storage procedures.
9. Your Privacy Rights
Herospin Casino fully respects your privacy rights under the Australian Privacy Principles and, where applicable, the GDPR. As a player at Herospin Casino, you are entitled to exercise the following rights regarding your personal information:
- Right of access — request a copy of the personal data we hold about you
- Right to correction — ask us to correct inaccurate or incomplete personal information
- Right to deletion — request erasure of your personal data where it is no longer necessary for the purposes for which it was collected (subject to legal retention obligations)
- Right to restriction — ask us to restrict the data processing of your personal information in certain circumstances
- Right to data portability — receive your personal data in a structured, machine-readable format
- Right to object — object to data processing based on legitimate interest, including direct marketing
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these privacy rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within 30 days. In complex cases, this period may be extended by a further 60 days, with notice provided.
10. Supervisory Authority — OAIC
If you believe that Herospin Casino has not adequately addressed your data protection concern, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC). The OAIC is Australia's independent national regulator for privacy and freedom of information.
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
We encourage you to contact us directly first at [email protected] so we can work to resolve any concern promptly. Herospin Casino is committed to handling all privacy complaints fairly and transparently.
11. Responsible Gambling and Privacy
Herospin Casino processes certain personal data specifically to support responsible gambling. We monitor gaming activity patterns to identify potential signs of problem gambling and may use this user data to apply protective measures. Our responsible gambling tools include:
- Deposit limits — daily, weekly, and monthly
- Bet and loss limits — configurable to suit your budget
- Session time limits — automated reminders and session caps
- Cooling-off periods — 24h, 48h, 7 days, or 30 days
- Self-exclusion — 6 months, 1 year, 5 years, or permanent exclusion
Data processed for responsible gambling purposes is treated with the highest level of confidentiality and is not used for marketing or any other commercial purpose.
12. Updates to This Privacy Policy
Herospin Casino reserves the right to update this privacy policy at any time to reflect changes in our practices, legal requirements, or the services we offer. When material changes are made, we will notify registered players by email to the address on their account and display a prominent notice on herospinau.com. We encourage you to review this Herospin Casino privacy policy periodically to stay informed about how we protect your personal data. Continued use of our platform following notification of changes constitutes acceptance of the updated privacy policy.
13. Contact Us
For any questions, concerns, or requests relating to your personal information or this privacy policy, please reach out to Herospin Casino through the following channels:
- Email (Privacy/DPO): [email protected]
- General support email: [email protected]
- Live chat: Available 24/7 via herospinau.com
Our support team is available around the clock to assist with general enquiries, while our Data Protection Officer handles all data protection and privacy rights matters with a guaranteed response within 30 days.
Frequently Asked Questions — Herospin Casino Privacy Policy
What personal data does Herospin Casino collect?
Herospin Casino collects identification, contact, financial, gaming activity, technical, and communication personal data, as well as data from third-party partners such as payment processors and identity verification services.
How does Herospin Casino use cookies?
The Herospin Casino cookie policy covers four types of cookies: essential, analytical, functional, and marketing. Essential cookies are always active; others require your consent and can be managed through your browser or our consent tool.
Is my data shared with third parties?
Herospin Casino shares personal information only with payment providers, identity verification services, game providers, and regulatory authorities when legally required. We never sell your user data.
How long does Herospin Casino store my data?
Retention periods vary by category. Account and identity data is kept for 5 years post-closure; financial records for 7 years. After the applicable period, all personal data is securely deleted. Full details are in Section 8 of this privacy policy.
How do I exercise my privacy rights?
Contact our DPO at [email protected] to exercise your privacy rights, including access, correction, deletion, restriction, portability, objection, or withdrawal of consent. We respond within 30 days.
What security measures protect my data at Herospin Casino?
Herospin Casino data security includes 256-bit SSL/TLS encryption, firewall protection, intrusion detection systems, RNG certification, and strict access controls. We also conduct regular internal audits and staff data protection training to maintain the highest standards of information security.
Can I withdraw my consent for data processing?
Yes. Where data processing is based on your consent — such as for marketing communications — you may withdraw it at any time by contacting [email protected] or updating your account preferences. Withdrawal does not affect processing that occurred prior to your withdrawal.
Who is the supervisory authority for privacy complaints in Australia?
The Office of the Australian Information Commissioner (OAIC) is the supervisory authority overseeing privacy compliance in Australia. If you feel your privacy rights have not been respected by Herospin Casino, you may lodge a complaint at www.oaic.gov.au. We encourage you to contact us first so we can resolve the matter directly.