Purpose and Scope
This Privacy Policy explains how Cosmic Spins Casino collects, uses, stores, shares and protects personal data when users visit https://cosmic-spins-casino-uk.com/, create an account, contact the support team or use any service available through the website.
Cosmic Spins Casino acts as the data controller for personal data processed through the official website. Personal data is handled in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003, the Data (Use and Access) Act 2025 and applicable gambling, fraud prevention and anti-money laundering requirements.
This Policy applies to customers, prospective customers, website visitors and anyone who communicates with Cosmic Spins Casino. By using the website, you acknowledge the processing practices described below. Where processing depends on consent, you may withdraw that consent at any time.
Personal Data We Collect
The information collected depends on how you interact with Cosmic Spins Casino and which services you use.
Identity and Account Information
- Full name, username and account identifiers
- Date of birth, age and gender where required
- Residential address and country of residence
- Email address and telephone number
- Login credentials and account security information
- Communication and marketing preferences
Verification and Compliance Information
To confirm identity, age, address, payment ownership and source of funds, Cosmic Spins Casino may request or obtain:
- Passport, driving licence or other recognised identity documents
- Proof of address, such as a bank statement or utility document
- Photographs, video verification or biometric comparison data where necessary and legally permitted
- Payment method ownership information
- Information about occupation, income, source of funds or source of wealth
- Results from identity, sanctions, politically exposed person, fraud and adverse media checks
Where biometric or other special category data is processed, Cosmic Spins Casino will identify an appropriate condition under data protection law and apply additional safeguards. Information concerning suspected fraud or criminal activity will be processed only where permitted by law.
Payment and Transaction Information
- Deposit and withdrawal amounts
- Transaction dates, status and references
- Payment method type and masked payment details
- Bank account or electronic payment information required to complete a transaction
- Chargeback, refund and payment dispute records
Cosmic Spins Casino does not need to retain complete payment card security codes after a transaction has been authorised. Payment providers may process card or banking information under their own privacy terms.
Gaming and Safer Gambling Information
- Games played, stakes, wins, losses and session history
- Bonus use, wagering activity and account balance
- Deposit limits, time limits, account restrictions and self-exclusion records
- Behavioural indicators connected with safer gambling or financial risk
- Customer interactions relating to spending, affordability or gambling behaviour
- Complaints, disputes and responsible gambling communications
Technical and Website Information
- IP address, device type and browser information
- Operating system, language and time-zone settings
- Login times, page activity and session information
- Cookie identifiers and consent choices
- Approximate location derived from technical data
- Security logs and records of suspected unauthorised access
Communications
Cosmic Spins Casino may keep emails, telephone records, support requests, complaints, account notes and other communications. Calls may be recorded or monitored where necessary for security, staff training, dispute handling or regulatory compliance. Users will be informed when a call is being recorded where required.
How Personal Data Is Collected
Personal data may be collected directly from you when you register, complete verification, make a payment, play a game, change account settings, claim a promotion or contact support.
Information may also be received from:
- Identity and age verification providers
- Payment processors, banks and electronic wallet providers
- Fraud prevention and credit reference agencies
- Sanctions and politically exposed person screening services
- Publicly available registers and lawful commercial databases
- Game providers and technical platform suppliers
- Self-exclusion and safer gambling services
- Regulators, law enforcement bodies and other authorised organisations
If you provide personal data concerning another person, you must be authorised to provide it and should ensure that the person understands how it may be used.
Purposes and Lawful Bases for Processing
| Purpose | Personal data involved | Lawful basis |
|---|---|---|
| Creating and administering an account | Identity, contact and account information | Performance of a contract |
| Providing games, bonuses, deposits and withdrawals | Account, gaming and transaction information | Performance of a contract and legal obligation |
| Confirming identity, age and payment ownership | Identity documents, address and payment information | Legal obligation and substantial public interest where applicable |
| Preventing fraud, money laundering and other unlawful activity | Identity, financial, technical and behavioural information | Legal obligation and legitimate interests |
| Meeting safer gambling duties | Gaming activity, financial indicators, limits and customer communications | Legal obligation, legitimate interests and substantial public interest where applicable |
| Securing accounts and investigating misuse | Login, device, network and security information | Legitimate interests and legal obligation |
| Answering enquiries and handling complaints | Contact details, account records and communications | Performance of a contract, legal obligation and legitimate interests |
| Improving website operation and service performance | Technical, usage and aggregated information | Legitimate interests or consent where required |
| Sending electronic marketing | Contact details and marketing preferences | Consent or another basis permitted under electronic marketing law |
| Establishing, exercising or defending legal claims | Relevant account, payment and communication records | Legitimate interests and legal obligation |
Cosmic Spins Casino may use legitimate interests where processing is necessary to operate and protect the service, prevent misuse, understand performance or defend legal rights. Before relying on this basis, the interests of the business are assessed against the rights and reasonable expectations of the individual.
Why Certain Information Is Required
Some information is required to enter into or perform the agreement between you and Cosmic Spins Casino. Other information must be collected to comply with age verification, identity verification, safer gambling, anti-money laundering, financial reporting and regulatory obligations.
If required information is not provided, Cosmic Spins Casino may be unable to open an account, accept a transaction, process a withdrawal or continue providing services. An account may also be restricted while required checks are completed.
Age Verification and Protection of Minors
Cosmic Spins Casino services are intended only for people aged 18 or over who are legally permitted to gamble in the United Kingdom. The website is not directed at children and personal data from anyone known to be under 18 is not knowingly accepted for gambling purposes.
Age and identity checks may be performed before access to gambling is allowed. If an account is suspected of belonging to a person under 18, it may be suspended while the matter is investigated. Relevant information may be retained where required to prevent further registration, comply with legal obligations or protect legal rights.
Safer Gambling and Customer Protection
Gaming, payment and account information may be analysed to identify behaviour that could indicate financial harm, loss of control or other safer gambling concerns. Relevant indicators can include rapid changes in spending, repeated payment failures, extended sessions, attempts to reverse limits or communications suggesting distress.
This information may be used to:
- Provide safer gambling information or account controls
- Review deposits, stakes or playing patterns
- Contact a customer about their gambling activity
- Apply limits, restrictions, cooling-off periods or account closure
- Administer self-exclusion and prevent attempts to reopen an excluded account
- Meet obligations imposed by gambling legislation and licence conditions
More information about available controls can be found on the Responsible Gambling page.
Fraud Prevention, AML and KYC Checks
Cosmic Spins Casino processes personal data to prevent fraud, money laundering, terrorist financing, payment abuse, collusion and other unlawful activity. Checks may take place during registration, before or after a transaction, when account activity changes or whenever additional verification is reasonably required.
Information may be compared with data held by verification providers, payment services, public registers, fraud prevention agencies and competent authorities. A record of a search may be retained by the organisation conducting it.
Where suspicious activity is identified, Cosmic Spins Casino may restrict an account, delay a transaction where legally permitted, request further evidence or make a confidential report to the appropriate authority. The law may prevent the Casino from telling a customer that such a report or investigation exists.
Automated Processing and Profiling
Automated tools may be used to assess identity, payment risk, fraud indicators, account security, bonus misuse and safer gambling patterns. These tools can generate alerts or risk scores that assist trained staff with account reviews.
If a decision producing legal or similarly significant effects is based solely on automated processing, the safeguards required by applicable law will be provided. Where the right applies, you may request human intervention, explain your position and challenge the decision. Some information cannot be disclosed if doing so would undermine fraud prevention, security or legal obligations.
Marketing Communications
Cosmic Spins Casino may send promotional emails, text messages or other electronic marketing only where there is a lawful basis for doing so. Marketing consent is separate from acceptance of the website terms and is not required merely to maintain an account.
You may stop direct marketing at any time by:
- Using the unsubscribe option included in a marketing message
- Changing the communication preferences available in your account
- Contacting welcome@cosmic-spins-casino-uk.com
An opt-out request will not prevent essential service messages concerning security, verification, transactions, account restrictions or changes affecting the contractual relationship. Limited suppression information may be retained to ensure that the marketing preference continues to be respected.
Cookies and Similar Technologies
Cosmic Spins Casino uses cookies and similar technologies to operate the website, maintain sessions, protect accounts, remember preferences and understand website performance. Strictly necessary technologies may be used without consent where they are required to provide a requested service or maintain security.
Analytics, personalisation and advertising technologies will be used only after the required consent has been obtained. You may accept, reject or change non-essential cookie choices through the consent controls made available on the website. Withdrawing consent does not affect processing that took place before the preference was changed.
Browser settings can also be used to block or remove cookies. Blocking essential cookies may prevent registration, login, account security checks or other website functions from working correctly.
Who May Receive Personal Data
Personal data is disclosed only when necessary for a legitimate purpose and subject to suitable contractual, technical and organisational safeguards. Recipients may include:
- Payment processors, banks and payment service providers
- Identity, age, address and source-of-funds verification providers
- Game studios, platform operators and hosting providers
- Fraud prevention, cybersecurity and risk management services
- Customer support and communications providers
- Professional advisers, auditors and insurers
- Safer gambling and self-exclusion organisations
- The UK Gambling Commission and other competent regulators
- Law enforcement, courts, tax authorities and government bodies
- Parties involved in a corporate restructuring, acquisition or transfer, subject to lawful safeguards
Service providers acting as processors may use personal data only on documented instructions and for the agreed service. Some organisations, including banks, regulators and fraud prevention agencies, may act as independent controllers under their own legal obligations.
Personal data is not sold to unrelated third parties.
International Data Transfers
Some suppliers or recipients may process personal data outside the United Kingdom. Where information is transferred to a country not covered by UK adequacy regulations, Cosmic Spins Casino will use an approved safeguard where required, such as the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses or another lawful transfer mechanism.
Transfer risk assessments and supplementary protections may be used where appropriate. You may contact Cosmic Spins Casino to request further information about the safeguards relevant to your personal data, although confidential commercial or security information may be withheld.
How Long Personal Data Is Kept
Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, regulatory, tax, accounting, fraud prevention and dispute resolution obligations.
- Customer due diligence and anti-money laundering records are generally retained for five years after the business relationship ends, unless the law requires or permits a different period.
- Transaction records are generally retained for five years after the relevant transaction or for another period required by applicable law.
- Self-exclusion and safer gambling information may be retained after account closure where necessary to enforce restrictions and protect the customer.
- Complaint and legal claim records may be retained until the relevant limitation period has expired and any proceedings have concluded.
- Marketing consent and objection records may be kept for as long as necessary to demonstrate compliance and respect communication choices.
- Technical logs are retained according to their security and operational purpose.
When information is no longer required, it is securely deleted or anonymised so that it can no longer identify an individual. A request for erasure does not require deletion of information that must be retained under gambling, anti-money laundering or other applicable legislation.
Data Security
Cosmic Spins Casino uses proportionate technical and organisational measures designed to protect personal data against loss, misuse, unauthorised access, alteration and disclosure. Measures may include access controls, authentication procedures, encryption where appropriate, monitoring, staff confidentiality duties, supplier assessments and incident response processes.
No internet-based service can guarantee complete security. Customers should use a unique password, protect their login details, sign out on shared devices and contact support promptly if unauthorised account activity is suspected.
Where a personal data breach creates a risk to individuals, it will be assessed and reported to the Information Commissioner’s Office when legally required. Affected individuals will also be informed where the breach is likely to result in a high risk to their rights and freedoms.
Your Data Protection Rights
Subject to legal conditions and exemptions, you may have the right to:
- Request confirmation of whether your personal data is being processed and obtain a copy.
- Ask for inaccurate or incomplete information to be corrected.
- Request deletion of personal data where there is no lawful reason to retain it.
- Ask for processing to be restricted in qualifying circumstances.
- Receive certain information in a structured, commonly used and machine-readable format.
- Object to processing based on legitimate interests.
- Object at any time to processing for direct marketing.
- Withdraw consent without affecting earlier lawful processing.
- Request safeguards relating to qualifying automated decisions.
- Complain to the Information Commissioner’s Office.
These rights are not absolute. A request may be refused or limited where information must be retained to comply with gambling regulation, anti-money laundering duties, fraud prevention requirements, legal claims or the rights of another person.
How to Exercise Your Rights
Requests may be sent to welcome@cosmic-spins-casino-uk.com. To protect account information, Cosmic Spins Casino may ask for proof of identity and sufficient details to locate the relevant records.
A valid request will normally be answered within one month. This period may be extended where a request is complex or several requests are made, in which case you will be informed in accordance with applicable law.
There is normally no charge for exercising a data protection right. A reasonable fee may be requested, or a request may be refused, if it is manifestly unfounded or excessive. Cosmic Spins Casino will explain the reason and available complaint options if it cannot fulfil a request.
Account Closure and Self-Exclusion
Closing or self-excluding an account does not automatically erase the related personal data. Cosmic Spins Casino may need to retain account identifiers, verification records, transactions, safer gambling information and self-exclusion details to meet legal obligations, prevent duplicate registration, investigate fraud or resolve disputes.
Marketing messages will be stopped following an applicable opt-out or self-exclusion request, apart from essential administrative or legally required communications.
Third-Party Websites and Services
The website may contain links to payment providers, game suppliers, safer gambling organisations or other external services. Those organisations may process personal data as separate controllers under their own privacy policies. Cosmic Spins Casino is not responsible for the privacy practices of an external website merely because a link appears on this site.
Changes to This Privacy Policy
This Privacy Policy may be amended to reflect changes in the services, processing activities, suppliers or applicable law. Material changes may be communicated through the website, account area or registered contact details where appropriate. Continued use of the service does not replace the need for consent where fresh consent is legally required.
Complaints to the Information Commissioner’s Office
If you believe your personal data has been handled improperly, please contact Cosmic Spins Casino first so the matter can be investigated. You also have the right to complain directly to the Information Commissioner’s Office without first contacting the Casino.
- Website: https://ico.org.uk/make-a-complaint/
- Telephone: 0303 123 1113
- Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
Contact Cosmic Spins Casino
Questions about this Privacy Policy, the use of personal data or a data protection request can be directed to:
- Email: welcome@cosmic-spins-casino-uk.com
- Telephone: +44 7700 143450
- Address: 85 Great Portland Street, London, W1W 7LT, United Kingdom
- Contact page: https://cosmic-spins-casino-uk.com/contact-us/