Spingranny Privacy Policy

Spingranny is operated by Ceshiroza SRL, a Costa Rica-registered company holding gaming licence ALSI-202408027-FI2 issued by the Gaming Board of Anjouan, Union of the Comoros. This page describes the personal data we collect from players and site visitors, the purposes for which we process it, and the rights available to individuals whose data we hold. Ceshiroza SRL is not established in Canada and does not hold a provincial gaming licence; this policy reflects the operator’s own data-handling commitments and the requirements of the Anjouan licensing framework.

What information we collect

We collect personal data across several categories depending on how you interact with the site. Account registration data includes your name, date of birth, residential address, email address, and phone number. KYC verification documents include government-issued photo identification, proof of address, and copies of payment methods used. Gameplay data covers deposits, withdrawals, bets placed, session times, and game selections. We also collect device and network data, including IP address, browser type, operating system, and device identifiers, as well as cookies and similar technologies used for site functionality and analytics.

How we use your information

We process personal data to provide the service: creating and maintaining your account, processing deposits and withdrawals, and enabling gameplay across casino, live casino, and sportsbook products. We use identity and transaction data to meet our regulatory obligations under the Anjouan licence, including age verification, KYC checks, anti-money laundering monitoring, and fraud prevention. Device and network data supports security monitoring and the detection of unauthorised access. Where you have opted in, we use contact details to send marketing communications, which you may withdraw at any time.

Who we share data with

We share personal data with licensed payment processors to handle deposits and withdrawals, and with third-party identity verification and fraud-prevention providers to fulfil KYC and AML obligations. Data may be disclosed to the Gaming Board of Anjouan, Union of the Comoros, in connection with our licence obligations, and to law enforcement or regulatory authorities where we are legally required to do so. We do not sell personal data to third parties.

Data retention

We retain account and transaction records for five years after a player stops using the service, in line with the operator’s published compliance commitments and applicable anti-money laundering requirements. Certain categories of data, such as identity verification documents, may be held for the full retention period regardless of account status. Data that is no longer required for any regulatory or operational purpose is deleted or anonymised.

Your rights

You have the right to request a copy of the personal data we hold about you. You may ask us to correct inaccurate or incomplete data. You may request erasure of your data where no regulatory retention obligation applies. You have the right to restrict processing in certain circumstances, and to object to processing carried out on the basis of legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. To exercise any of these rights, contact us using the details below.

Contact us

Privacy queries and data subject requests can be directed to our support team at [email protected] , with replies provided within one business day. No dedicated Data Protection Officer is named for this operator; all privacy correspondence should be sent to the support address above. For account closure requests, you may also write to [email protected] .