KatanaSpin United Kingdom Privacy Policy

KatanaSpin takes the protection of player data seriously, operating under clear principles designed to safeguard personal information whilst delivering a seamless gaming experience. This privacy policy explains precisely what data is collected, how it is used, and the rights available to players in the United Kingdom under applicable data protection legislation. The platform employs SSL encryption to protect all transmitted information, ensuring that sensitive details remain secure throughout every interaction with the casino.

Personal data we collect

Personal data refers to any information that can identify an individual, either directly or when combined with other information held by KatanaSpin. The categories of data collected depend on how players interact with the platform and which services they choose to use.

Identity Data: Full name, date of birth, gender, and nationality as provided during account creation. This forms the foundation of the player profile and is essential for regulatory compliance.

Contact Data: Email address, telephone number, and residential address. These details enable communication regarding account matters, promotional offers where consent is given, and security notifications.

Financial Data: Payment card details, bank account information, and transaction records associated with deposits and withdrawals. KatanaSpin accepts Visa, Mastercard, PayPal, and cryptocurrency options including Bitcoin, Ethereum, Litecoin, and USDT.

Verification Data: Copies of identification documents such as passports, driving licences, and utility bills submitted during Know Your Customer processes. For detailed information about verification procedures, refer to the KatanaSpin registration process.

Technical Data: IP addresses, browser type and version, operating system, device identifiers, and login timestamps. This information is collected automatically when accessing the platform.

Usage Data: Gaming activity including games played, bet amounts, session duration, and bonus utilisation. This data helps improve services and detect irregular patterns.

Why we process your data

Every piece of data collected serves a specific, legitimate purpose. KatanaSpin does not process personal information unnecessarily or retain it longer than required.

Contract Performance: Processing identity, contact, and financial data is necessary to create and maintain player accounts, process deposits and withdrawals, and provide access to gaming services. Without this data, the fundamental services cannot be delivered.

Legal Obligations: As a licensed operator under Curaçao jurisdiction, KatanaSpin must verify player identities, prevent underage gambling, detect money laundering, and maintain records for regulatory inspection. UK players should note that whilst the Gambling Commission regulates domestic operators, KatanaSpin operates under an offshore Curaçao licence.

Legitimate Interests: Technical and usage data enables the platform to maintain security, prevent fraud, improve services, and ensure fair gaming. These interests are balanced against player privacy rights, with proportionate measures applied.

Consent: Marketing communications, personalised promotions, and certain cookie deployments require explicit player consent. This consent can be withdrawn at any time without affecting the lawfulness of prior processing.

Cookies and tracking technologies

Cookies are small text files stored on devices when visiting KatanaSpin, enabling the platform to recognise returning visitors and maintain session functionality. Understanding how these technologies operate allows players to make informed choices about their privacy preferences.

Essential Cookies: These are strictly necessary for the website to function. They maintain login sessions, remember language preferences, and ensure security features operate correctly. Disabling these cookies would prevent normal use of the platform.

Performance Cookies: Anonymous data about how visitors use the site is collected to identify popular pages, detect errors, and optimise the user experience. No personally identifiable information is gathered through these cookies.

Functionality Cookies: These remember choices made by players, such as username, region, or customised display settings. They provide enhanced, personalised features without requiring repeated input.

Targeting Cookies: Where consent is provided, these cookies track browsing habits to deliver relevant advertisements and measure campaign effectiveness. They may be set by third-party advertising partners.

Players can manage cookie preferences through browser settings. Most browsers allow cookies to be blocked or deleted, though this may affect website functionality. The platform respects Do Not Track signals where technically feasible.

Your rights under UK data protection law

UK residents retain robust data protection rights following Brexit, with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 providing the legislative framework. These rights apply regardless of where the data controller is established.

Right of Access: Players may request confirmation of whether their personal data is being processed and, if so, obtain a copy of that data along with supplementary information about how it is used. This is commonly known as a Subject Access Request.

Right to Rectification: Inaccurate personal data must be corrected upon request. Incomplete data can be completed by providing a supplementary statement.

Right to Erasure: Also termed the “right to be forgotten,” this allows players to request deletion of their personal data in certain circumstances, such as when data is no longer necessary for its original purpose or when consent is withdrawn.

Right to Restrict Processing: Players may request that the processing of their data be limited while accuracy is contested, while an objection is being verified, or when erasure would be unlawful but the player opposes deletion.

Right to Data Portability: Where processing is based on consent or contract performance, players may receive their data in a structured, commonly used, machine-readable format and transmit it to another controller.

Right to Object: Processing based on legitimate interests can be objected to. KatanaSpin must then cease processing unless compelling legitimate grounds override the player’s interests, rights, and freedoms.

Rights Related to Automated Decision-Making: Players have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects, unless specific safeguards are in place.

How to exercise your data rights

Exercising data rights should be straightforward. KatanaSpin provides multiple channels for submitting requests and commits to responding within the timeframes mandated by UK data protection legislation.

Email Submission: The primary method for data requests is through the dedicated support email. Requests should clearly state the right being exercised and include sufficient information to verify the requester’s identity.

Live Chat: For initial enquiries or guidance on the request process, the 24/7 live chat support can direct players to the appropriate channels and provide preliminary assistance.

Response Timeframes: Upon receipt of a valid request, KatanaSpin will respond within one month. Complex or numerous requests may extend this period by a further two months, with notification provided within the initial month explaining the delay.

Identity Verification: To protect against unauthorised access to personal data, reasonable steps will be taken to verify the identity of the requester before fulfilling any data subject request.

Fees: Most requests are processed without charge. However, manifestly unfounded or excessive requests, particularly if repetitive, may attract a reasonable administrative fee or be refused entirely.

Complaints: Players dissatisfied with how their data is handled may lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent authority for data protection. Contact details are available at ico.org.uk.

Data security measures

Protecting personal data from unauthorised access, alteration, disclosure, or destruction is paramount. KatanaSpin implements technical and organisational measures appropriate to the risk level associated with the data processed.

SSL Encryption: All data transmitted between player devices and KatanaSpin servers is encrypted using Secure Socket Layer technology. This prevents interception during transmission and ensures that sensitive information such as payment details cannot be read by third parties.

Access Controls: Personal data access is restricted to authorised personnel who require it for their job functions. Staff are bound by confidentiality obligations and receive training on data protection requirements.

Secure Storage: Data is stored on secure servers with multiple layers of protection including firewalls, intrusion detection systems, and regular security audits. Physical access to server facilities is strictly controlled.

Payment Security: Financial transactions are processed through established payment providers including Visa, Mastercard, and PayPal, each maintaining their own rigorous security certifications. Cryptocurrency transactions offer additional privacy through blockchain technology.

Incident Response: Procedures exist for detecting, reporting, and investigating personal data breaches. Where a breach poses a high risk to player rights and freedoms, affected individuals and the relevant supervisory authority will be notified as required by law.

Third-party data sharing

KatanaSpin does not sell personal data to third parties. However, certain sharing is necessary to operate the platform, comply with legal requirements, and provide the full range of services.

Payment Processors: Financial data is shared with payment service providers to process deposits and withdrawals. These include Visa, Mastercard, PayPal, and cryptocurrency networks. Each processor operates under its own privacy policies and security standards. Further details about payment options appear on the KatanaSpin payment methods.

Game Providers: Gaming activity data is shared with software providers such as NetEnt, Play’n GO, Pragmatic Play, and Evolution Gaming to deliver games, ensure fair play, and resolve disputes. These providers operate as data processors under contractual obligations.

Regulatory Bodies: Personal data may be disclosed to licensing authorities, law enforcement agencies, or other regulatory bodies where required by law or to protect the platform’s legitimate interests in legal proceedings.

Service Providers: Third-party service providers may access personal data to perform functions such as customer support, fraud prevention, marketing analytics, and IT infrastructure management. Such providers are carefully vetted and bound by data processing agreements.

Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the successor entity, with notice provided to affected players.

Data retention periods

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by legal obligations. Different categories of data have different retention requirements.

Account Data: Active player accounts retain all associated data for the duration of the account relationship. Upon account closure, certain data is retained as required by anti-money laundering regulations, typically for a minimum of five years.

Financial Records: Transaction records and associated documentation are retained for periods mandated by financial regulations, which may extend beyond the closure of the player account.

Verification Documents: Identity documents submitted for KYC purposes are retained for the legally required period following account closure, after which they are securely destroyed.

Marketing Data: Where consent for marketing communications is withdrawn, contact details are suppressed to prevent future contact but may be retained in a suppression list.

Technical Logs: Server logs and technical data are typically retained for shorter periods, sufficient for security monitoring and troubleshooting purposes, unless required for ongoing investigations.

Frequently asked questions