Rockyspin Privacy Policy

Rockyspin is operated by Rossobash SRL, a company incorporated in Costa Rica. This page sets out what personal data we collect from players and site visitors, the purposes for which we process it, who we share it with, how long we keep it, and the rights available to you. Rossobash SRL is not established in the United Kingdom and does not hold a UK Gambling Commission licence; our data-handling practices are governed by the laws of Costa Rica and by the commitments set out in this policy.

What information we collect

We collect personal data across several categories depending on how you interact with the site. Account registration data includes your name, date of birth, residential address, email address, and phone number. KYC verification documents include government-issued photo identification, proof of address, and copies of payment instruments used for deposits or withdrawals. We also collect gameplay data such as deposit and withdrawal amounts, bet history, session times, and game selections. Device and network data, including IP address, browser type, operating system, and device identifiers, is recorded automatically when you access the site. Cookies and similar technologies are used for site functionality and analytics purposes.

How we use your information

We process your personal data to provide the service: creating and maintaining your account, processing deposits and withdrawals, and delivering gameplay. We use your data to meet our regulatory obligations, including identity verification, age verification, anti-money laundering checks, and transaction monitoring in line with our published KYC Policies and AML Policy. Your data is also used for security and fraud prevention, and to handle customer support queries. Where you have opted in, we may use your contact details to send marketing communications; you can withdraw that consent at any time by contacting us.

We share personal data with licensed payment processors to facilitate deposits and withdrawals, and with identity verification providers to complete KYC checks before payouts are released. Data may be shared with affiliated companies within the Rossobash SRL group, which operates a network of casino brands on a shared platform. We disclose data to law enforcement, regulators, or other authorities when we are legally required to do so. We do not sell personal data to third parties.

Data retention

We retain account and transaction records for a minimum of five years following account closure, in line with our anti-money laundering obligations. KYC documents and related verification records are held for the same period. Certain data may be retained for longer where an ongoing dispute, regulatory inquiry, or legal obligation requires it.

Your rights

You have the following rights in relation to the personal data we hold about you:

Access: you can request a copy of the personal data we hold about you.
Rectification: you can ask us to correct inaccurate or incomplete data.
Erasure: you can request deletion of your data, subject to our retention obligations.
Restriction: you can ask us to limit how we process your data in certain circumstances.
Objection: you can object to processing carried out on the basis of legitimate interests.
Portability: you can request your data in a structured, machine-readable format where processing is based on consent or contract.

To exercise any of these rights, contact us using the details below. If you are not satisfied with our response, you may raise a complaint with the relevant data protection authority in your country of residence.

Contact us

Privacy queries and data rights requests can be sent to [email protected] . We do not currently designate a named Data Protection Officer; all privacy correspondence is handled through that address. We will respond to requests within 30 days of receipt.