Privacy Policy
This Privacy Policy explains how hellspin, as operated exclusively via hellspinz.com, collects, uses, stores, and protects the personal information of players and site visitors from Australia. By using our services as of 1 January 2025, you agree to the terms outlined below.
Who We Are
OBSERVE: The operator of hellspinz.com is Chestoption Sociedad de Responsabilidad Limitada, a company registered in Costa Rica (Reg. No.: 3-102-876612).
EXPAND: Operational responsibilities may also involve associated entities, including TechSolutions Group N.V. (Curacao license 8048/JAZ, prolongated through 2025) for online gambling service provision.
REFLECT: For privacy matters, you may contact our Data Protection Officer (DPO) via email at [email protected] (contact subject to update as official mailbox is assigned). For official correspondence, communications must reference hellspinz.com and address "Attention: Data Protection Officer".
Legal address: Chestoption Sociedad de Responsabilidad Limitada, Costa Rica, Registration No. 3-102-876612.
What Personal Data We Collect
OBSERVE: We collect diverse categories of data to fulfil legal and service obligations:
- Personal identification data: Full name, address, date of birth, email address, phone number, proof of ID and residence as required by regulatory authorities and Know Your Customer (KYC) obligations.
- Account information: Username, password (encrypted), account history and preferences.
- Payment data: Bank account details, credit/debit card information, payment processor data, transaction history, and payout records (as required for Anti-Money Laundering, AML, and transactional purposes).
- Technical data: IP address, device details, browser type, operating system, connection timestamps, activity logs, and geolocation data (where permitted).
- Behavioral data: Gaming/betting history, session duration, navigation patterns, page clicks, bet values, and in-platform interactions.
- Cookies & tracking data: Data collected via session, persistent, and third-party cookies or similar technologies (see "Cookies & Tracking Technologies" below).
Legal Basis for Processing
- User Consent: We process certain data (e.g., marketing preferences, optional features) based on your explicit consent, which can be withdrawn at any time. Consent is also required for the use of optional cookies and for international data transfers outside Australia.
- Contract Fulfilment: Processing is necessary for providing you with gambling services on hellspinz.com, managing player accounts, processing payments, securing and validating transactions, and administering user support.
- Legal Obligations: We are legally required to process specific information to comply with AML/CTF laws, KYC verification, tax or financial reporting to regulators (Curaçao Gaming Authority, AU authorities as applicable).
- Legitimate Interests: We may process your data to improve our services, ensure IT security, prevent fraud, support responsible gambling, and undertake anonymized analytics where such purposes do not override your fundamental rights.
Protective Clause: Where processing is based on legitimate interest and not governed by other legal requirements, you retain the right to object at any time.
Regional Compliance Note: This approach ensures full alignment with the Australian Privacy Principles (APPs) and the Privacy Act 1988 (Cth), as well as relevant gambling regulations.
Purpose of Processing
- Service delivery: To enable account registration, provide online gambling/betting/gaming services, and deliver customer support through hellspinz.com.
- Regulatory compliance: To verify player identity and age, meet KYC/AML standards, and cooperate with lawful authorities.
- Payments: To process deposits, withdrawals, tax withholding, and refund requests.
- Improvement & Analytics: To analyze gameplay and website usage for enhancing service quality, developing new features, and personalizing user experience.
- Marketing communications: Subject to consent, to provide updates about promotions, new features, and responsible gambling resources.
- Fraud & Security: To detect and prevent misuse, secure transactions, and maintain system integrity.
Disclosure & Sharing
- Payment processors & banks: Personal and financial data may be shared with authorised payment providers and financial institutions for payment processing and validation.
- Third-party service providers: Data may be shared with KYC, IT security, customer support, and analytics service providers, only under contractual confidentiality and data protection obligations.
- Regulatory authorities: Data may be disclosed to regulators, law enforcement or competent authorities (Curaçao Gaming Authority, AU regulators where applicable) when required by law.
- Affiliates and business partners: Information may be shared with affiliate marketers and advertising networks solely upon your explicit consent and always in compliance with applicable AU laws.
Protective Clause: No personal data is sold to third parties for unrelated or unauthorized purposes. Overseas recipients must agree to uphold confidentiality and data protection standards equivalent to those required under AU law.
International Transfers
OBSERVE: As hellspinz.com operates globally with technical infrastructure in Curaçao, Costa Rica, and Cyprus, your data may be transferred to secure servers located outside Australia, including within the European Economic Area (EEA) and other approved jurisdictions.
EXPAND: Such transfers occur:
- To group companies and service providers in Curaçao, Costa Rica, Cyprus, and other locations supporting regulatory, payment, or technical operations.
- When required for secure backup, lawful reporting, or maintenance purposes.
REFLECT: All such transfers are protected by one or more of the following:
- Standard Contractual Clauses (SCCs) per the European Commission and recognized by the OAIC as ensuring adequate protection.
- Contractual safeguards, regular assessments of recipient data protection standards, and binding internal data transfer policies.
- Data minimization, encryption, and access controls.
Regional Compliance Note: All international transfers conform to the Australian Privacy Principles (APP 8), ensuring your rights and protections travel with your data.
Data Retention
- Personal and account data: Retained for a maximum of 5 years after account closure or final transaction as mandated by KYC, AML, and tax laws unless legal requirements or ongoing disputes necessitate longer retention.
- Payment records: Maintained for at least 7 years for regulatory reporting and anti-fraud purposes.
- Cookies/tracking data: Stored in accordance with the cookie type and consent, typically not exceeding 2 years.
- Deletion criteria: Data is erased once processing purpose has expired, upon verified user request, or when storage is not legally required. Residual data may be retained in backups for cybersecurity or audit compliance for up to one additional year.
Your Rights
- Access: You may request a copy of your personal data held by hellspinz.com at any time.
- Correction: You have the right to correct inaccurate or incomplete data on your account or in our systems.
- Deletion: You may request erasure of your data, subject to overriding legal/regulatory retention obligations.
- Restriction: You may request that processing of your data be restricted pending verification or resolution of a query.
- Objection: You have the right to object to processing for direct marketing or data processing based on legitimate interests.
- Portability: You may request your data in portable electronic format for transfer to another service provider.
- Marketing consent withdrawal: You may withdraw consent for direct marketing at any time via account settings or by emailing [email protected].
Procedural Step: All requests should be submitted via the official contact email or designated web form (when available). We commit to respond within 30 days, subject to applicable verification requirements.
Cookies & Tracking Technologies
- Session cookies: Temporarily store user authentication and navigation details; deleted when browser is closed. Functional and essential for secure, efficient site operation.
- Persistent cookies: Remain on your device for set periods (up to 2 years), supporting user preferences, login convenience, and site personalization.
- Third-party cookies: Used by analytics and marketing partners (e.g., Google Analytics, affiliate platforms) to assess usage trends and optimize advertising, only with your consent.
Management: You can control or disable cookies via your browser settings or, where available, through the hellspinz.com user dashboard. Restricting cookies may limit access to certain features.
Regional Compliance Note: Due to AU ePrivacy and consent regime, non-essential cookies are subject to granular opt-in consent.
Data Security
- Technical measures: Data is transmitted via SSL-encrypted channels at all times. Stored records are encrypted using industry-standard algorithms (AES-256 or equivalent), and card/banking details use tokenization and PCI DSS-certified storage solutions.
- Organizational controls: Access to personal data is limited to authorized personnel under strict confidentiality and regular audit protocols. Staff undergo annual security and privacy awareness training.
- Physical and logical protections: Data centers are protected by multi-factor authentication, intrusion detection, and resilient backup/restore mechanisms.
Protective Clause: Despite best efforts, no system is entirely immune to threats. Users are advised to maintain secure login credentials and report suspicious activities via the contact details below.
Complaints & Contacts
OBSERVE: For any privacy or data protection concerns regarding your use of hellspinz.com, you may contact our Data Protection Officer at [email protected] (subject to final mailbox activation in 2025).
EXPAND: Alternatively, future updates may introduce a secure web-based contact form for streamlined communications.
REFLECT: Complaints will be acknowledged within 7 working days and resolved within 30 days subject to complexity or ongoing investigation. If you are dissatisfied with our resolution, you may escalate to the Office of the Australian Information Commissioner (OAIC).
Postal correspondence (when required): Please address to hellspinz.com, Attention: Data Protection Officer, care of Chestoption Sociedad de Responsabilidad Limitada, Costa Rica, Reg. 3-102-876612, clearly referencing your data subject rights request.
Updates
- Notification of changes: Updates to this Privacy Policy will be published on hellspinz.com. Where material changes occur, we will provide additional notification via email or user dashboard alerts.
- Effective date: This policy is effective from 1 January 2025. The last revision was made on 1 January 2025.
- Obligation to review: Users are responsible for regularly monitoring this page for updates affecting their rights or obligations.