Privacy Policy

How Sombrero Spins Handles Your Data

Sombrero Spins is built for players who want casino entertainment to feel secure, simple and low pressure. We know casual weekend play should not come with a maze of confusing data practices, so this notice explains what information we collect, why we use it and how we protect it. The aim is transparency without the yawn factor.

Sombrero Spins was established in 2024 and operates under the Kahnawake Gaming Commission, licence No. 01035. That licensed setting supports our emphasis on top-tier security, player protection and responsible account handling. We process personal data in a GDPR-aware way, with attention to fairness, purpose limitation, data minimisation and clear user rights.

This page focuses on privacy in practical terms: account information, verification, payment records, gameplay activity, bonus administration, security monitoring and communication preferences. Whether you are exploring 5,000+ games or checking account activity after a weekend session, you should understand how your information supports a safer experience.

Information We May Collect

We collect information you provide when you register, log in, manage your account, deposit, request a withdrawal, claim promotions or communicate with us. This may include your name, date of birth, address, email address, phone number, username, account credentials and details needed to confirm eligibility.

We may also collect transaction information connected to deposits from £20, withdrawals from £85 and payment method activity. Sombrero Spins supports Visa, Mastercard, Skrill, Neteller, Jeton, MiFinity, Paysafecard, Cashlib, Flexepin, bank/payment services, Bitcoin, Bitcoin Cash, Ethereum, Litecoin, USDC and USDT. Relevant records may include selected method, amount, status, timing and verification outcome.

Gameplay information may include game sessions, bets, wins, balance changes, free spin use and bonus progress. For example, if you claim the welcome offer of 125% up to £560 + 250 Free Spins with 30x wagering, we may record eligibility, activation, wagering activity and reward status. The same principle applies to other stated offers, including 100% up to £560 + 250 Free Spins and 125% up to £375 + 500 Free Spins.

Technical and Device Data

To keep accounts stable and protected, we may collect technical information such as IP address, device type, browser details, approximate location, login timestamps, session identifiers, cookie data and security logs. This information helps detect unusual access patterns and supports a smoother player experience.

Why We Use Personal Data

We use personal data to operate your Sombrero Spins account and deliver the casino service you choose to use. That includes registration, age and identity checks, secure login, deposits, withdrawals, gameplay recording, balance updates, bonus administration and account messages.

Security is a major purpose. We use data to help prevent fraud, protect accounts, investigate suspicious activity, monitor transaction risk and maintain accurate records. Licensed casino operations require care, and our approach is designed to support player protection without making everyday play feel heavy.

We may use information to personalise operational messages, display relevant account status and manage promotions. This does not mean turning your inbox into a confetti cannon. Where optional communications require consent, your choice matters and you may be able to change it.

If you want to understand how transaction records connect with deposits and cashouts, our payments information explains the supported methods in more detail. Within this privacy notice, the key point is that payment data is used to process transactions, support verification and protect the account environment.

Legal Bases and GDPR-Aware Processing

Where GDPR applies, Sombrero Spins considers recognised legal bases for processing personal data. These may include performance of a contract when we provide account services, compliance with legal or regulatory obligations, legitimate interests in security and platform operation, and consent where required for specific optional features.

Performance of a contract covers the data needed to create and maintain your account, process gaming activity and administer core service features. Compliance may apply to age checks, identity verification, transaction records and responses to lawful requests. Legitimate interests may apply to fraud prevention, service improvement, technical monitoring and account security.

Consent may apply to certain optional communications or technologies where the law requires it. When processing depends on consent, you can withdraw that consent without affecting earlier lawful use. In short, we aim to avoid mystery switches and keep your control visible.

When Data May Be Shared

Sombrero Spins may share data with carefully selected providers that help operate the casino. These may include payment processors, game suppliers, identity verification services, fraud prevention tools, hosting partners, analytics support and customer service systems. Sharing is intended to be limited to what is necessary for the relevant purpose.

We may also disclose information where required by regulators, competent authorities or lawful requests. As an operator licensed by the Kahnawake Gaming Commission, licence No. 01035, we maintain records that may be needed for oversight, security and dispute-related review.

We do not sell personal data as a business model. Where service providers process data on our behalf, appropriate safeguards should apply, including purpose limits, confidentiality expectations and security controls. If information is transferred internationally, GDPR-aware transfer protections should be considered where relevant.

Security, Verification and Account Protection

Sombrero Spins uses technical and organisational measures designed to protect personal data from unauthorised access, loss, misuse, alteration or disclosure. These measures may include access controls, authentication checks, secure record handling, transaction monitoring, encryption where appropriate and internal restrictions.

Verification helps protect both players and the platform. Withdrawal requests are typically processed in 1-5 business days depending on method and verification, and account checks may be necessary before funds can move. This process helps reduce fraud and keeps payouts aligned with security expectations.

For more detail on cashout timing and related account checks, you can review our withdrawals information. From a privacy perspective, verification data is handled to confirm identity, meet security obligations and protect account value.

You can strengthen security by using a strong password, keeping login details private, monitoring activity and securing your device. If you access Sombrero Spins through the mobile experience, keep your device updated and protected. We bring the safeguards; you keep the keys close.

Your Data Rights and Choices

Depending on your location and the law that applies, you may have rights to access your personal data, correct inaccurate information, request deletion, restrict processing, object to certain uses, request portability or withdraw consent. These rights help you stay in control of your information.

Some rights are subject to limits. Licensed casino operators may need to retain certain records for security, financial, regulatory or dispute-handling reasons. If a request cannot be completed fully, the reason should be explained where permitted.

To make a request, provide enough information to identify your account and describe the action you want. We may need to verify your identity before responding, especially where the request involves account, payment or verification records. That extra step protects your data from the wrong hands.

Retention, Updates and Practical Privacy Tips

Sombrero Spins keeps personal data only for as long as needed for the purpose for which it was collected, or as required for legal, regulatory, financial, security or dispute-related reasons. Different categories of information may require different retention periods because account records, transaction data and technical logs serve different functions.

When information is no longer needed, it should be deleted, anonymised or otherwise handled in a way that reduces privacy risk, subject to operational and legal requirements. We aim to avoid keeping data simply because storage exists. A neat account record beats a cluttered vault every time.

You can support your own privacy by keeping details accurate, reviewing communication choices, using secure devices and contacting us promptly if account activity looks unusual. Sombrero Spins is designed to keep fun easy and security strong, so your weekend play can stay exactly where it belongs: enjoyable, straightforward and protected.