How this site handles your personal data
Effective date: 15 October 2026.
This notice sets out what personal data the SpinTexas information site collects from visitors in the United Kingdom, why it is collected, how long it is kept and which rights apply under the UK General Data Protection Regulation and the Data Protection Act 2018. The controller is the editorial team that operates this site, reachable at [email protected]. The casino operator is a separate controller for everything that happens inside a player account; this notice covers only what happens here.
Where this notice ends and the casino’s begins
Reading these pages requires no account, so the data this site can hold is limited to what a browser sends automatically and what a reader chooses to write to us. Registration details such as a mobile number, e-mail address and account currency, verification uploads, deposits and withdrawals are collected by the casino on its own site under its own privacy terms. Nothing from a casino account is transmitted to this site, and nothing a reader sends to this site is passed to the casino. The moment a reader follows a link to the casino, the casino’s notice applies.
What is collected, why, on what basis and for how long
| Category | When it is collected | Purpose |
|---|---|---|
| Server logs: IP address, browser type, pages requested, timestamp | On every visit | Keeping the site secure and finding faults |
| Correspondence: e-mail address, name if given, the message | When a reader writes in | Answering the message, correcting a page |
| Cookie preference | When a reader makes a choice in the banner | Remembering that choice |
| Aggregate usage: page views, country, device class | Only after consent | Seeing which pages are read and where readers drop off |
| Category | Legal basis | Retention |
|---|---|---|
| Server logs: IP address, browser type, pages requested, timestamp | Legitimate interests | 30 days, then deleted |
| Correspondence: e-mail address, name if given, the message | Legitimate interests; legal obligation for rights requests | 12 months after the last exchange; records of rights requests 3 years |
| Cookie preference | Consent | 6 months |
| Aggregate usage: page views, country, device class | Consent | 14 months, in aggregate form only |
Legitimate interests means the site’s interest in running securely and in answering people who write to it; a reader may object to this processing at any time using the route in the rights section below.
Cookies, by type and lifetime
Two kinds of cookie are set. The preference cookie is strictly necessary: it records whether analytics were accepted or refused and lasts six months. The analytics cookie is set only after the reader accepts it in the banner, lasts 14 months and produces aggregate figures that cannot identify a person. Refusing analytics does not change how the pages read. A choice can be reversed by reopening the banner from the link in the site footer or by clearing cookies in the browser, after which the banner appears again.
Who else sees the data
Two processors act on the site’s instructions under written contracts: the hosting provider, which stores the server logs, and the e-mail provider, which stores correspondence. Neither may use the data for its own purposes. Data is disclosed to a public authority only where the law requires it, for example in response to a lawful order. Data is never sold, never used for advertising and never shared with the casino, with affiliates or with any other gambling business.
Transfers outside the United Kingdom
The hosting and e-mail providers may store data on servers in the European Economic Area. Those transfers rely on the UK adequacy regulations covering the EEA. Should a provider move storage to a country without an adequacy decision, the site will put the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses in place before any data moves, and will update this notice.
How the data is protected
All pages are served over an encrypted connection. Logs and correspondence are held in access-controlled systems with two-factor authentication, and only the people who need to answer a message or investigate a fault can open them.
Readers under 18
The site is written for adults aged 18 and over, because gambling in Great Britain is for adults only. No data is knowingly collected from anyone younger. A parent or guardian who believes a child has written to the site can ask for that correspondence to be deleted by e-mail, and it will be removed from the mailbox and its backups.
Your rights and how to exercise each one
Under the UK GDPR a reader may ask for a copy of their data, have it corrected, have it erased, have its processing restricted, object to processing based on legitimate interests, receive it in a portable format, and withdraw consent to analytics or to any other consented use. Every request goes to [email protected] with the words “data request” in the subject line and a note of which right is being used. The site confirms the request came from the address it concerns by replying to that same address, and answers within one month as the law requires; a complex request may take up to two further months, in which case the reader is told why before the first month ends. No fee is charged for a first request.
Complaints to the Information Commissioner
A reader who is unhappy with how a request was handled can complain to the Information Commissioner’s Office, the UK data protection authority, at https://ico.org.uk or on 0303 123 1113.
Changes to this notice
The effective date at the top changes whenever the notice changes. A change that adds a data category, a purpose or a recipient is flagged in a line under the heading for 30 days after it takes effect, so a returning reader can see what has changed.