Privacy Policy
Privacy Policy
Last updated: August 2026
Data Controller
The data controller responsible for the processing of personal data on this website in accordance with the UK General Data Protection Regulation (UK GDPR) is:
CowboySpin.
Email: [email protected].
If you have any questions regarding data protection, you can contact us at any time using the email address provided above.
General Information on Data Processing
The protection of your personal data is a top priority for us. We process personal data of our users strictly in compliance with applicable data protection regulations, in particular the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). In addition, the Privacy and Electronic Communications Regulations (PECV) apply regarding the use of cookies and comparable technologies.
Personal data refers to any information relating to an identified or identifiable natural person, such as name, address, email address, date of birth, payment information, or IP address.
What Data We Collect
As part of your use of our platform, the following categories of personal data may be processed:
- Registration data: First and last name, date of birth, address, nationality, email address, telephone number, username, and.
- Verification data: Copies of official ID documents, proof of address, and where applicable, details regarding the source of funds used (as part of due diligence obligations under anti-money laundering regulations).
- Payment data: Information on payment methods used such as Debit Cards (Visa, Mastercard), PayPal, Apple Pay, Open Banking, or comparable payment services common in the United Kingdom, including transaction.
- Usage data: Information regarding your gaming behavior, deposit and withdrawal limits, session duration, and offers.
- Technical data: IP address, device identifier, browser type, operating system, access timestamps, and location data (where necessary to comply with regulatory territorial restrictions).
- Communication data: Contents of contact enquiries, support chats, and email.
Purposes and Legal Bases of Processing
We process your data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Performance of the user agreement, account management | Performance of a contract (UK GDPR Article 6(1)(b)) |
| Identity and age verification | Legal obligation (UK GDPR Article 6(1)(c)) |
| Combating money laundering and fraud | Legal obligation (UK GDPR Article 6(1)(c)) |
| Player protection, limit control, self-exclusion | Legal obligation (UK GDPR Article 6(1)(c)) |
| Marketing and newsletters | Consent (UK GDPR Article 6(1)(a)) |
| Fraud prevention, IT security | Legitimate interests (UK GDPR Article 6(1)(f)) |
| Compliance with tax and commercial record-keeping obligations | Legal obligation (UK GDPR Article 6(1)(c)) |
Special Notes on Player Protection
This site operates under a Curaรงao licence and is not regulated by the UK Gambling Commission.
- Multi-operator self-exclusion schemes (such as GAMSTOP) and internal self-exclusion. Note that this scheme does not cover this site: registering with it does not block an account here.
- The monitoring and enforcement of safer gambling deposit.
- Measures for the prevention of gambling harm and excessive gambling.
For general data protection queries, the competent supervisory authority is the Information Commissioner's Office (ICO).
If you feel you are losing control over your gambling, we recommend contacting GamCare or BeGambleAware. GamCare operates the National Gambling Helpline, providing free, confidential support and advice 24/7.
Transfer of Data to Third Parties
Your data will only be transferred to third parties if required by law or if you have given your explicit consent. Recipients may include:
- Payment service providers to process deposits and.
- Third-party identity verification providers (KYC checks).
- IT service providers supporting us under a data processing agreement pursuant to Article 28 of the UK GDPR.
- Providers of fraud prevention and security.
Transfers to third countries outside the UK will only take place if an adequate level of data protection is ensured, such as through standard contractual clauses or adequacy regulations.
Cookies and Similar Technologies
Our website uses cookies and similar technologies to enable platform functionality, provide security features, and improve the user experience. We distinguish between:
- Strictly necessary cookies: Required for the operation of the website; no consent required under PECR.
- Functional and analytical cookies: To improve user experience; used only with.
- Marketing cookies: For personalized advertising; used only with.
Upon your first visit to our website, you will be asked for your consent via a cookie banner. You can withdraw your consent at any time with effect for the future.
Storage Period
We store personal data only for as long as necessary for the respective purposes or as required by statutory retention periods. In particular:
- Account and transaction data: Retained for up to 6 years in accordance with commercial and tax record-keeping.
- Verification data for anti-money laundering purposes: 5 years after the termination of the business.
- Marketing data: Until consent is.
Your Rights as a Data Subject
Under the UK GDPR, you have the following rights:
- Right of access (Article 15 UK GDPR): You can request confirmation as to whether or not personal data concerning you is being processed, and access to that data.
- Right to rectification (Article 16 UK GDPR): Inaccurate data can be.
- Right to erasure (Article 17 UK GDPR): You can request the deletion of your data, provided no statutory retention obligations prevent it.
- Right to restriction of processing (Article 18 UK GDPR).
- Right to data portability (Article 20 UK GDPR).
- Right to object (Article 21 UK GDPR), in particular against processing for marketing.
- Right to withdraw consent given (Article 7(3) UK GDPR) with effect for the.
- Right to lodge a complaint with a supervisory authority (Article 77 UK GDPR): You have the right to complain to the Information Commissioner's Office (ICO) if you believe that the processing of your personal data infringes applicable law.
To exercise your rights, you can contact [email protected] at any time.
Data Security
We implement technical and organizational measures to protect your data against unauthorized access, loss, or misuse. These measures include encrypting data transmission via TLS/SSL, access restrictions, regular security audits, and training our staff on handling personal data.
Automated Decision-Making and Profiling
Automated procedures may be used for fraud prevention and to comply with player protection requirements, such as detecting unusual gaming behavior or suspicious transactions. These procedures serve exclusively preventative purposes and do not lead to decisions with significant legal effects for you without human review, in accordance with Article 22 of the UK GDPR.
Protection of Minors
Our services are directed exclusively at adults aged 18 and over. We do not knowingly collect data from minors. If we become aware that a minor has transmitted personal data, we will delete it immediately and block the corresponding account.
Changes to This Privacy Policy
We reserve the right to update this Privacy Policy to reflect changes in legal frameworks or updates to our services. The current version published on the website will apply to your next visit.
Contact
For questions, suggestions, or to exercise your data subject rights, please contact us at:
Email: [email protected].
