Privacy Policy

This Privacy Policy applies to the Zumospin website at zumospin.co and to all services offered through it, including the casino, the sportsbook, your player account and customer support. It describes how we handle personal information, which means any information that identifies you or could reasonably be linked to you.

We process personal information in line with the privacy laws that apply to the operator and to our customers, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) where applicable. By using our services you acknowledge that your information will be handled as described here. Please read this policy together with our Terms and Conditions and Cookie Policy.

The organization responsible for your personal information is [Operator legal name], registered in [Country of incorporation] under number [Company registration number], with its registered address at [Registered address].

The operator decides why and how your information is processed and is accountable for compliance with this policy. Questions about privacy, or requests to exercise your rights, can be sent to support@zumospin.co with “Privacy” in the subject line.

We collect information you give us, information generated when you use our services, and information we receive from third parties such as identity verification and payment providers. The main categories are:

• Personal and contact data — name, date of birth, address, email address and phone number.
• Identity documents — copies of ID and proof of address provided for verification.
• Payment information and transaction history — deposits, withdrawals and the payment methods used.
• Gaming activity — bets, game rounds, results and responsible gambling settings.
• Geolocation — your approximate location, derived from your IP address and other signals.
• Device data — device type, browser, operating system, IP address and similar technical details.
• Communications — messages you send to support and our replies.

We only collect what we need for the purposes described in this policy.

When you register, we collect your name, email address, date of birth, residential address, phone number and password. Your password is stored as a one-way hash and is never visible to our staff. We also record your account preferences, such as language, time zone, marketing choices and limits.

We use account information to create and run your account, to communicate with you about it, to confirm that you are eligible to gamble and to apply the responsible gambling settings you choose.

To meet know-your-customer (KYC) and anti-money laundering (AML) obligations, we verify your identity, age and address. This may involve copies of government-issued ID, proof of address, proof of ownership of a payment method and, in some cases, information on the source of your funds.

We may use specialist verification providers to check your details against official and commercial databases. Documents are stored securely, access is restricted to authorised staff, and they are kept only for as long as the law requires. We do not use identity documents for marketing.

When you deposit or withdraw, we record the amount, date, method, status and a reference for each transaction. Full card numbers are handled by our payment processors under payment card industry security standards; we keep only the information needed to identify the method, such as the last four digits and expiry date.

Transaction history is used to process payments, keep your balance accurate, apply deposit limits, prevent fraud, meet AML reporting obligations and answer your questions about payments.

We record every bet and game round linked to your account, including the stake, the selection or game, the odds where relevant, the result and the time. We also keep a record of your limits, cooling-off periods and self-exclusion.

This information is used to settle bets, resolve disputes, comply with regulatory reporting, detect fraud or collusion, and identify signs of potentially harmful gambling so that we can offer support.

When you visit the site, we automatically collect technical details such as your IP address, browser type and version, operating system, screen size, language settings and the pages you view. We may also generate a device identifier to recognize your device on later visits.

Device information helps us keep the site secure, detect multiple accounts and suspicious logins, fix technical problems and adapt the site to your screen.

Gambling laws depend on where you are, so we need to know your location when you register, log in and play. We determine it mainly from your IP address. Where the law or our authorisation requires, we may use additional location checks, which we will ask for your permission to use.

Location data is used to decide whether our services can be offered to you, to block access from unsupported areas and to prevent fraud. We do not use precise location for advertising.

We use cookies and similar technologies to keep you logged in, remember your choices, measure how the site is used and, with your consent, support marketing. Essential cookies are always on; all other categories are optional.

Full details of each category, typical retention periods and how to change your choices are in our Cookie Policy.

With your consent, we use analytics tools to understand how visitors use the site: which pages are popular, where people leave and which features cause difficulty. Wherever possible, analytics data is aggregated or pseudonymised and IP addresses are shortened.

We use these insights to improve navigation, performance and content. You can switch analytics cookies off at any time through Cookie Settings.

To run our services we work with trusted providers, including:

• game studios and live casino providers, who receive the data needed to run a game session;
• sports data and odds providers;
• payment processors and banks;
• identity verification and fraud prevention services;
• hosting, email and customer support platforms;
• analytics and, with consent, advertising partners.

These providers may only use your information to deliver their service to us, under contracts that require appropriate security and confidentiality.

We do not sell your personal information. We share it only where needed: with the service providers described above; with regulators, law enforcement or courts where the law requires it; with financial institutions to process payments and meet AML obligations; and with professional advisers such as auditors and lawyers.

If the business or part of it is sold or restructured, personal information may be transferred to the new owner, who must continue to protect it in line with this policy.

The operator and some of our service providers are located outside your province or outside Canada, so your information may be stored and processed in other countries. Those countries may have privacy laws that differ from Canadian law.

When we transfer information, we use contractual and technical safeguards to ensure it receives a level of protection comparable to that required in Canada. Authorities in those countries may be able to access the information under their own laws.

We keep personal information only for as long as we need it for the purposes described here or as required by law. Account, identity, transaction and gaming records are generally kept for the duration of your account and for a period afterwards set by AML, tax and gambling regulations.

Self-exclusion records are kept for at least the length of the exclusion so that we can honour it. Support messages and marketing preferences are kept for shorter periods. When information is no longer needed, it is securely deleted or anonymised.

Depending on the law that applies to you, you may have the right to:

• ask whether we hold information about you and request a copy;
• ask us to correct information that is inaccurate or incomplete;
• withdraw consent for optional processing such as marketing or analytics;
• ask us to delete information we no longer have a legal reason to keep;
• complain to a privacy regulator, such as the Office of the Privacy Commissioner of Canada.

To make a request, email support@zumospin.co from your registered address. We may need to confirm your identity first. Some information, such as records required for AML purposes, cannot be deleted until the legal retention period ends.

We protect personal information with measures appropriate to its sensitivity, including HTTPS encryption, hashed passwords, access controls, staff confidentiality obligations and regular security reviews. Identity documents and payment data receive the strictest controls.

No system is completely secure, so please help us by choosing a strong, unique password and keeping it private. If we become aware of a breach that creates a real risk of significant harm, we will notify you and the relevant authorities as required by law.

For any question about this policy or your personal information, write to support@zumospin.co or use the contact form. Postal enquiries can be sent to [Operator legal name], [Registered address], [Country of incorporation].

We may update this policy when our services, our providers or the law change. The latest version is always published on this page. If we make a significant change, we will let you know by email or through a notice in your account before it takes effect.