Spingranny Privacy Policy

Spingranny is operated by Ceshiroza SRL, a Costa Rica-registered company holding gaming licence ALSI-202408027-FI2 issued by the Gaming Board of Anjouan, Union of the Comoros. This page describes the personal data we collect from players and site visitors, the purposes for which we process it, and the rights available to you. Ceshiroza SRL is not established in Canada and does not hold a provincial gaming licence; data processing is conducted under the operator’s own data-handling commitments and the terms of the Anjouan authorisation.

What information we collect

We collect personal data across several categories depending on how you interact with the site. Account registration data includes your name, date of birth, residential address, email address, and phone number. Identity verification (KYC) requires copies of a government-issued photo ID, proof of address, and where applicable a copy of the payment method used. Gameplay data covers deposits, withdrawals, bets placed, session durations, and game selections. We also collect device and network data, including IP address, browser type, operating system, and device identifiers. Cookies and similar technologies record session state, language preferences, and aggregated analytics.

How we use your information

We process personal data to provide the service: creating and maintaining your account, processing deposits and withdrawals, and enabling gameplay. We use identity and transaction data to meet our regulatory obligations under the Anjouan licence, including age verification, anti-money laundering checks, and transaction monitoring. Device and session data supports security monitoring and fraud prevention. Where you have opted in, we use your contact details to send promotional communications; you may withdraw that consent at any time through your account settings or by contacting support.

We share personal data with licensed payment processors to handle deposits and withdrawals, and with third-party identity verification providers to complete KYC checks as required under our AML obligations. Data may be disclosed to the Gaming Board of Anjouan, Union of the Comoros (licence ALSI-202408027-FI2) and to law enforcement or other authorities when we are legally required to do so. We do not sell personal data to third parties.

Data retention

We retain account and transaction records for five years after a player’s account becomes inactive or is closed, in line with the operator’s documented anti-money laundering and regulatory requirements. Certain data categories, such as identity verification documents, may be held for the same period to satisfy KYC obligations. Once the applicable retention period expires, data is deleted or anonymised.

Your rights

You have the following rights in relation to the personal data we hold about you:

Access: you may request a copy of the personal data we hold.
Rectification: you may ask us to correct inaccurate or incomplete data.
Erasure: you may request deletion of your data, subject to any retention obligations we are required to meet.
Restriction: you may ask us to limit how we process your data in certain circumstances.
Objection: you may object to processing carried out on the basis of legitimate interests.
Portability: where processing is based on consent or contract, you may request your data in a structured, machine-readable format.

To exercise any of these rights, contact us using the details below. We will respond within a reasonable period and in any event within 30 days.

Contact us

Privacy queries and data rights requests can be sent to [email protected] . No dedicated Data Protection Officer is named in our current documentation; the support team handles all privacy-related correspondence and will escalate internally where required.