Privacy Policy

Welcome to Lolly Spins. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information when you use our online casino services. Your privacy is paramount to us. We are committed to safeguarding your data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR). By accessing or using Lolly Spins, you agree to the terms of this Privacy Policy. Please read it carefully to understand our practices regarding your personal data and how we will treat it.

We collect various types of information to provide and improve our services to you. This includes:

• Personal Identifiable Information (PII): This includes your name, date of birth, residential address, email address, phone number, and identification documents (e.g., passport, driver's licence) required for identity verification and "Know Your Customer" (KYC) procedures. We collect this data during registration and account verification.
• Financial Information: Details related to your payment methods, such as credit/debit card numbers, bank account details, and transaction history. We do not store full payment card details on our servers, relying on secure payment gateways.
• Transactional Data: Information about your betting activity, deposits, withdrawals, and game play history on Lolly Spins.
• Technical Data: Your IP address, browser type and version, operating system, device type, and login data. This helps us ensure the security and functionality of our platform.
• Usage Data: Information about how you use our website and services, including pages visited, time spent on pages, and click patterns.
• Communication Data: Records of your communications with us, including emails, chat logs, and telephone calls for customer support, training, and quality assurance purposes.

We use the information we collect for several purposes, always with a legal basis:

• Account Management: To set up and manage your Lolly Spins account, verify your identity, and process your transactions.
• Service Provision: To operate our casino games, process bets, and facilitate deposits and withdrawals.
• Security and Fraud Prevention: To detect and prevent fraudulent activities, money laundering, and other illegal actions, ensuring the integrity of Lolly Spins.
• Customer Support: To respond to your inquiries, resolve issues, and provide assistance.
• Compliance: To fulfil our legal and regulatory obligations, including responsible gambling measures and reporting to relevant authorities.
• Marketing and Promotions: With your consent, to send you promotional offers, bonuses, and updates about Lolly Spins. You can opt out of marketing communications at any time.
• Service Improvement: To analyse usage patterns, troubleshoot technical issues, and enhance the user experience on our platform.

We process your personal data based on the following legal grounds, as required by GDPR:

• Contractual Necessity: Processing is necessary for the performance of a contract with you, specifically to provide our gaming services and manage your account.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject, such as anti-money laundering (AML) regulations, responsible gambling laws, and tax requirements.
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided your fundamental rights do not override these interests. This includes fraud prevention, network security, and service improvement. We conduct a balancing test to ensure our interests do not unduly impact your rights.
• Consent: Where required, we will obtain your explicit consent for specific processing activities, such as sending marketing communications. You have the right to withdraw your consent at any time.

We do not sell your personal data. We may share your information with third parties only in specific circumstances:

• Service Providers: We engage trusted third-party service providers to perform functions on our behalf, such as payment processors, identity verification services, IT support, and marketing agencies. These providers are contractually bound to protect your data and only use it for the purposes specified by us.
• Regulatory and Law Enforcement Bodies: We may disclose your data to regulatory authorities, licensing bodies, and law enforcement agencies if required by law, to comply with legal processes, or to protect our rights and the safety of our users.
• Fraud Prevention Agencies: To prevent fraud and money laundering, we may share information with organisations dedicated to these efforts.
• Group Companies: Your data may be shared within our corporate group for operational and analytical purposes, all under strict data protection agreements.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your personal data.

We implement robust technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption: We use SSL (Secure Socket Layer) technology to encrypt data during transmission.
• Access Controls: Access to your personal data is restricted to authorised personnel who require it for their job functions.
• Firewalls: Our systems are protected by firewalls to prevent unauthorised external access.
• Regular Audits: We conduct regular security audits and penetration tests to identify and address vulnerabilities.
• Employee Training: Our employees receive regular training on data protection and privacy best practices.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. You also play a role in protecting your data by choosing a strong password and keeping your login credentials confidential.

Under GDPR, you have several rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data, subject to certain legal exceptions (e.g., ongoing legal obligations).
• Right to Restriction of Processing: You can request that we limit the processing of your personal data under specific circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
• Right to Object: You can object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw it at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section.

Lolly Spins uses cookies and similar tracking technologies to enhance your experience, analyse website usage, and for marketing purposes. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Necessary for the website to function correctly, enabling basic features like page navigation and access to secure areas.
• Analytical/Performance Cookies: Help us understand how visitors interact with our website by collecting information anonymously. This helps us improve our services.
• Functionality Cookies: Remember your preferences and choices (like language or region) to provide a more personalised experience.
• Marketing/Targeting Cookies: Used to deliver relevant advertisements to you and measure the effectiveness of our marketing campaigns.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of Lolly Spins.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The retention period for different types of data varies based on legal obligations and business needs. For example, we are legally required to retain certain customer information and transaction data for a minimum period after account closure for anti-money laundering and regulatory compliance purposes. Once your data is no longer required, we will securely delete or anonymise it.

Your personal data may be transferred to, and stored at, a destination outside the European Economic Area (EEA) if our service providers or group companies operate from such locations. When we transfer your data outside the EEA, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards, such as using Standard Contractual Clauses approved by the European Commission, or ensuring the recipient is certified under an approved data transfer mechanism.

Lolly Spins is strictly for individuals aged 18 or over, or the legal age for gambling in their jurisdiction, whichever is higher. We do not knowingly collect personal information from individuals under this age. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information from our records. If you believe a minor has provided us with personal information, please contact us.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website and, where appropriate, by email. We encourage you to review this policy periodically to stay informed about how we are protecting your information. The "Last Updated" date at the top of this policy indicates when it was last revised.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please do not hesitate to contact our Data Protection Officer:

Email: [email protected]

We will endeavour to respond to your query promptly.