This Privacy Policy explains how Spin Kong, operated by Win Top Ltd, collects, uses, stores, and protects your personal data. It applies fully to all players residing in the United Kingdom. Please read it carefully so you understand how your information is handled when you use our web platform.

What We Collect and Why

When you create an account with us, we collect personal information such as your full name, date of birth, email address, and chosen payment details. This information is necessary to verify your identity, process deposits and withdrawals, and comply with our obligations under applicable licensing and anti-money laundering requirements. During transaction processing, we may also collect financial data — including payment method references and transaction amounts — to ensure that funds are handled accurately and securely on your behalf.

We also collect identity verification data where required. This may include copies of government-issued identification documents or proof of address. We do not collect more than is reasonably necessary for these purposes, and we do not use your personal data for unsolicited marketing without your explicit consent.

How We Protect and Share Your Data

Your data is protected using 256-bit SSL encryption across all interactions on our web platform. Information is stored on secure servers with restricted internal access, meaning only personnel with a legitimate operational need are permitted to view your records. We take reasonable technical and organisational measures to guard against unauthorised access, accidental loss, or unlawful processing of your personal information.

We share your data only in strictly limited circumstances. Payment gateways require transaction data to process your deposits and withdrawals. Identity verification services may receive relevant personal details to confirm your eligibility to hold an account. Where required by law or by our licensing authority, we may also disclose information to regulatory bodies. We do not sell your personal data to third parties, and any external parties who process data on our behalf are required to handle it in a manner consistent with this policy.

Following account closure or a period of inactivity, we retain your data for as long as is required by our regulatory and legal obligations. Once that retention period has elapsed, your records are securely deleted or anonymised in line with standard data management practice.

You have the right to request access to the personal data we hold about you, to ask us to correct any inaccuracies, or to request the removal of your account data where no legal obligation requires us to retain it. To exercise any of these rights, please contact us through our support channels. We will respond to all valid requests within a reasonable timeframe and in accordance with applicable data protection standards.

If we make material changes to this Privacy Policy, we will notify you through our web platform or by email to the address registered on your account. We encourage you to review this page periodically so that you remain informed about how we handle your information. Continued use of the platform following any update constitutes your acknowledgement of the revised policy.