Rockyspin Privacy Policy

Rockyspin is operated by Rossobash SRL, a company incorporated in Costa Rica. This page sets out what personal data we collect from players and visitors, how we use it, who we share it with, and how long we keep it. As Rockyspin is not licensed in the United Kingdom, this policy reflects Rossobash SRL’s own data-handling commitments rather than UK GDPR or the Data Protection Act 2018. Our terms came into force on 20 November 2024 and are governed by the laws of Costa Rica.

What information we collect

We collect personal data across several categories depending on how you interact with the site. Account registration data includes your name, date of birth, residential address, email address, and phone number. KYC verification documents include government-issued identity documents, proof of address, and copies of payment instruments, which we review before processing withdrawals. Gameplay data covers deposits, withdrawals, bets placed, session times, and game choices. We also collect device and network data, including IP address, browser type, operating system, and device identifiers. Cookies and similar technologies are used for site functionality and analytics.

How we use your information

We use personal data to provide the service: creating and maintaining your account, processing deposits and withdrawals, and enabling gameplay. We also process data to meet our regulatory obligations, including age verification (18+ minimum), identity and payment-instrument checks under our KYC Policies, transaction monitoring under our AML Policy, and fraud prevention. Customer support interactions, including live chat and email, are processed to handle queries and resolve disputes. Where you have opted in, we use contact details to send marketing communications, which you may withdraw at any time.

We share personal data with licensed payment processors to handle deposits and withdrawals, and with identity verification providers to complete KYC checks. Data may be shared with affiliated companies within the Rossobash SRL group, which operates a network of casino brands on a shared platform. We disclose data to law enforcement or regulatory authorities when legally required to do so. Customer data is not sold to third parties.

Data retention

We retain account and transaction records for a minimum of five years following account closure, in line with our anti-money laundering obligations. KYC documents and related verification records are held for the same period. Data collected solely for marketing purposes is deleted when you withdraw consent or close your account, whichever occurs first.

Your rights

You have the following rights in relation to the personal data we hold about you:

Access: you can request a copy of the personal data we hold about you.
Rectification: you can ask us to correct inaccurate or incomplete data.
Erasure: you can request deletion of your data, subject to our retention obligations under AML and KYC rules.
Restriction: you can ask us to limit how we process your data in certain circumstances.
Objection: you can object to processing based on our legitimate interests, including direct marketing.
Portability: you can request your data in a structured, machine-readable format where processing is based on consent or contract.

To exercise any of these rights, contact us using the details below. We will respond within 30 days of receiving a valid request.

Contact us

Privacy queries and data rights requests can be sent to [email protected] . No dedicated Data Protection Officer is currently named for this operator; all privacy correspondence is handled through the general support address. Email responses are typically provided within 24 hours for support matters, and within 30 days for formal data rights requests.