Spingranny Privacy Policy

Spingranny is operated by Ceshiroza SRL, a Costa Rica-registered company holding gaming licence ALSI-202408027-FI2 issued by the Gaming Board of Anjouan, Union of the Comoros. This page sets out what personal data we collect from players and site visitors, the purposes for which we process it, who we share it with, how long we keep it, and what rights you hold over it. Ceshiroza SRL is not UK-licensed; data processing is governed by the operator’s own data-handling commitments and the terms of the Anjouan licence, with disputes subject to Costa Rican jurisdiction.

On this page
  1. What information we collect
  2. How we use your information
  3. Who we share data with
  4. Data retention
  5. Your rights
  6. Contact us

What information we collect

We collect personal data across several categories depending on how you interact with the site. Account registration data includes your name, date of birth, residential address, email address, and phone number. KYC verification data includes copies of government-issued identity documents, proof of address, and payment-method documentation requested before your first withdrawal or at any point where regulatory or fraud-prevention checks require it. We also collect gameplay data covering deposits, withdrawals, bets placed, session times, and game choices, as well as device and network data such as your IP address, browser type, operating system, and device identifiers. Cookies and similar technologies are used for site functionality, session management, and analytics.

How we use your information

We process your data to provide the service: creating and maintaining your account, processing deposits and withdrawals, and enabling gameplay across casino, live casino, and sportsbook products. We use identity and transaction data to meet our obligations under the Anjouan licence, including age verification, KYC checks, anti-money laundering monitoring, and fraud prevention, the last of which involves third-party identity and fraud-prevention providers. Customer support queries are handled using account and session data relevant to the issue raised. Where you have opted in, we may use your contact details to send marketing communications, which you can withdraw at any time.

Who we share data with

We share personal data with licensed payment processors to handle deposits and withdrawals, and with third-party identity verification and fraud-prevention providers as part of our KYC and AML programme. Data may be disclosed to the Gaming Board of Anjouan or to law enforcement and regulatory bodies where we are legally required to do so. Customer data is treated as confidential and is not sold to third parties.

Data retention

We retain personal data for five years after a player stops using the service, in line with the operator’s published compliance commitments and applicable anti-money laundering requirements. Certain categories of data, such as transaction records and identity verification documents, may be kept for the full retention period regardless of account status. After the retention period expires, data is deleted or anonymised.

Your rights

You have the following rights over the personal data we hold about you:

  • Access: you can request a copy of the personal data we hold about you.
  • Rectification: you can ask us to correct inaccurate or incomplete data.
  • Erasure: you can request deletion of your data, subject to our retention obligations under applicable law and the Anjouan licence.
  • Restriction: you can ask us to limit how we process your data in certain circumstances.
  • Objection: you can object to processing carried out on the basis of legitimate interests, including direct marketing.
  • Portability: you can request your data in a structured, machine-readable format where processing is based on consent or contract.

To exercise any of these rights, contact us using the details below.

Contact us

Privacy queries can be directed to our support team by email at [email protected] , with replies provided within one business day. No dedicated Data Protection Officer is named for this operator; all data-related requests are handled through the support address above.