Privacy Policy

Welcome to Lolly Spins. This Privacy Policy outlines how Lolly Spins ("we", "us", or "our") collects, uses, processes, and protects your personal data when you use our online casino services, accessible via our website and any associated applications (collectively, the "Services"). We are committed to safeguarding your privacy and ensuring the security of your personal information. By accessing or using our Services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please do not use our Services.

This policy is designed to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) where relevant, and other privacy regulations in the jurisdictions where Lolly Spins operates. We encourage you to review this policy periodically as it may be updated from time to time.

We collect various types of information to provide and improve our Services, comply with legal obligations, and enhance your experience at Lolly Spins. This information can be broadly categorised as follows:

• Information You Provide Directly: This includes data you submit during registration, such as your name, date of birth, gender, email address, postal address, phone number, and national identification number (where required for verification). We also collect financial information, including payment method details, when you make deposits or withdrawals. Additionally, any information you provide through customer support interactions, surveys, or promotions falls into this category.
• Information Collected Automatically: When you use our Services, we automatically collect certain technical data. This includes your IP address, device type, operating system, browser type, referring URLs, access times, and pages viewed. We also gather information about your gaming activity, such as bets placed, games played, winnings, and losses.
• Information from Third Parties: We may receive information about you from third-party service providers, such as identity verification services, credit reference agencies, and fraud prevention agencies. This data helps us verify your identity, assess your financial standing, and prevent fraudulent activities, in compliance with our regulatory obligations.

Lolly Spins uses your personal data for several purposes, all aimed at delivering a secure, compliant, and enjoyable gaming experience:

• To Provide and Manage Services: We use your information to create and manage your account, process your transactions (deposits and withdrawals), and enable you to participate in games and promotions.
• For Security and Fraud Prevention: Your data is crucial for identity verification, age verification, and "Know Your Customer" (KYC) checks. We analyse transaction patterns and other data to detect and prevent fraud, money laundering, and other illegal activities.
• To Comply with Legal and Regulatory Obligations: We process your data to meet requirements imposed by our licensing authority, including responsible gambling measures, reporting obligations, and anti-money laundering (AML) regulations.
• For Customer Support: We use your contact information and interaction history to provide effective customer support, resolve queries, and address any issues you may encounter.
• For Personalisation and Marketing: With your consent, or where legitimate interests apply, we may use your data to tailor our Services to your preferences, offer personalised promotions, and send you marketing communications about Lolly Spins products and services. You can opt out of marketing communications at any time.
• For Analytics and Service Improvement: We analyse usage data to understand how our Services are used, identify areas for improvement, and develop new features and offerings.

Lolly Spins processes your personal data based on several legal grounds, as outlined by data protection regulations:

• Performance of a Contract: Processing is necessary for the performance of the contract between you and Lolly Spins, specifically to provide you with access to our gaming services and manage your account.
• Legal Obligation: We process your data to comply with legal and regulatory obligations, including anti-money laundering laws, responsible gambling regulations, and tax reporting requirements imposed by our licensing authority.
• Legitimate Interests: We process data for our legitimate interests, provided these do not override your fundamental rights and freedoms. This includes fraud prevention, network and information security, improving our Services, and direct marketing (where permitted). We conduct legitimate interest assessments to ensure a balance between our interests and your rights.
• Consent: In certain situations, we may rely on your explicit consent to process specific types of data, such as for sending direct marketing communications or for certain non-essential cookies. You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

We may share your personal data with third parties under specific circumstances and always with appropriate safeguards:

• Service Providers: We engage trusted third-party service providers to perform functions on our behalf, such as payment processors, identity verification services, IT and hosting providers, customer support platforms, and marketing agencies. These providers are contractually bound to protect your data and only use it for the purposes specified by Lolly Spins.
• Regulatory and Law Enforcement Bodies: We will disclose your data when legally required to do so by our licensing authority, law enforcement agencies, courts, or other governmental bodies to comply with legal obligations, respond to valid requests, or protect our rights, property, or safety.
• Fraud Prevention and Responsible Gambling Organisations: We may share information with organisations dedicated to preventing fraud and promoting responsible gambling, as part of our commitment to maintaining a secure and ethical gaming environment.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity. We will ensure appropriate safeguards are in place to protect your privacy.
• Affiliates: We may share data with our affiliated companies, provided they adhere to this Privacy Policy and applicable data protection laws.

We do not sell your personal data to third parties.

Lolly Spins implements robust technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption: We use industry-standard encryption protocols, such as Transport Layer Security (TLS), to protect data transmitted between your device and our servers.
• Access Controls: Access to your personal data is restricted to authorised personnel who require it to perform their job functions, and they are bound by confidentiality obligations.
• Firewalls and Intrusion Detection Systems: Our systems are protected by firewalls and continuously monitored for suspicious activity.
• Regular Security Audits: We conduct regular security assessments and audits to identify and address potential vulnerabilities.
• Data Minimisation: We only collect and retain personal data that is necessary for the purposes for which it is processed.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to enhance our security measures.

Subject to applicable data protection laws, you have certain rights regarding your personal data held by Lolly Spins:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data we have about you.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data under certain circumstances, for example, if the data is no longer necessary for the purposes for which it was collected.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your data in certain situations, such as when you contest the accuracy of the data.
• Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where we rely on your consent for processing, you have the right to withdraw that consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section below. We will respond to your request in accordance with applicable data protection laws.

Lolly Spins uses cookies and similar tracking technologies to enhance your experience, analyse website usage, and for marketing purposes. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: These are necessary for the website to function correctly, enabling core functionalities like security, network management, and accessibility. You cannot opt out of these cookies.
• Analytical/Performance Cookies: These cookies help us understand how visitors interact with our website by collecting information about page visits, traffic sources, and user behaviour. This data is aggregated and anonymous, used to improve the performance of our Services.
• Functionality Cookies: These allow our website to remember choices you make (such as your username or language preference) and provide enhanced, more personalised features.
• Marketing/Targeting Cookies: These cookies are used to deliver advertisements more relevant to you and your interests. They are also used to limit the number of times you see an advertisement and help measure the effectiveness of advertising campaigns.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our Services.

Lolly Spins retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purpose of satisfying any legal, accounting, or reporting requirements. Our retention periods are determined by:

• Contractual Obligations: As long as you have an active account with Lolly Spins.
• Legal and Regulatory Requirements: We are legally obliged to retain certain data for specific periods, for instance, transaction records and identity verification documents, to comply with anti-money laundering and responsible gambling regulations set by our licensing authority. This typically ranges from 5 to 7 years after account closure.
• Dispute Resolution: Data may be retained for longer periods if there is an ongoing dispute or potential litigation.
• Legitimate Business Interests: We may retain anonymised or aggregated data for analytical purposes indefinitely, as it no longer identifies you personally.

Once the retention period expires, your personal data will be securely deleted or anonymised.

Due to the global nature of our operations, your personal data may be transferred to, and stored at, a destination outside of your country of residence, including countries outside the European Economic Area (EEA) that may not have equivalent data protection laws. When such transfers occur, Lolly Spins takes all necessary steps to ensure your data is treated securely and in accordance with this Privacy Policy and applicable data protection laws. This includes:

• Transferring data to countries deemed to provide an adequate level of protection for personal data by the European Commission.
• Implementing Standard Contractual Clauses (SCCs) approved by the European Commission or other relevant authorities, which provide appropriate safeguards for cross-border data transfers.
• Ensuring that third-party service providers adhere to binding corporate rules or other approved data transfer mechanisms.

By using our Services, you consent to the transfer of your information to countries outside your country of residence.

Lolly Spins Services are not intended for individuals under the legal gambling age in their respective jurisdiction, which is typically 18 years or older. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take immediate steps to delete such information from our records. If you believe we might have any information from or about a child, please contact us immediately.

Lolly Spins reserves the right to update or modify this Privacy Policy at any time. We will notify you of any significant changes by posting the updated policy on our website and, where appropriate, by email or other direct communication. The "Last Updated" date at the top of this policy will indicate when the latest revisions were made. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please do not hesitate to contact our Data Protection Officer:

• Via Email: [email protected]
• Via Post: Lolly Spins, [Insert Placeholder for Company Address, e.g., Data Protection Officer, Our Registered Office Address]

We are committed to addressing your inquiries promptly and transparently.