Privacy Policy

Welcome to Lolly Spins. This Privacy Policy details how Lolly Spins collects, uses, processes, and protects your personal information. We are committed to safeguarding your privacy and ensuring compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR). By using our services, you agree to the terms outlined in this policy. We encourage you to read it carefully to understand our practices regarding your data.

We collect various types of information to provide and improve our services. This includes:

• Personal Identifiable Information (PII): This includes your name, date of birth, gender, address, email address, phone number, and national identification details (where required for verification). We collect this when you register an account, complete our 'Know Your Customer' (KYC) procedures, or communicate with us directly.
• Financial Information: Details related to your payment methods, such as bank account numbers, credit/debit card numbers, and other payment service provider details. Please note, we do not store full credit card numbers, only partial information for transaction identification.
• Transaction Data: Information about your deposits, withdrawals, bets, game play, and other activities on Lolly Spins.
• Technical Data: Your IP address, browser type and version, operating system, device type, time zone setting, and other technology on the devices you use to access our website.
• Usage Data: Information about how you use our website and services, including pages visited, features used, and interaction patterns.
• Communication Data: Records of your communications with us, including live chat transcripts, emails, and telephone calls.
• Publicly Available Information: Data we may collect from public sources for verification purposes, such as electoral rolls or sanctions lists.

Lolly Spins uses your personal information for several key purposes:

• Account Management: To set up, maintain, and manage your Lolly Spins account, including identity verification and age verification.
• Service Provision: To enable you to use our gaming services, process your transactions, and provide customer support.
• Legal and Regulatory Compliance: To comply with our legal obligations, including anti-money laundering (AML) and responsible gambling regulations. This involves monitoring transactions and gameplay for suspicious activities.
• Security: To detect, prevent, and investigate fraudulent or illegal activities, and to ensure the security of our services.
• Communication: To send you important updates, service messages, and, with your consent, marketing communications about Lolly Spins products and promotions.
• Service Improvement: To analyse user behaviour and feedback to improve our website, games, and overall service offering.
• Personalisation: To tailor your experience on Lolly Spins, offering personalised content and promotions based on your preferences and activity.

We process your personal data based on one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary for the performance of a contract with you, specifically to provide our gaming services and manage your account.
• Legal Obligation: Processing is necessary to comply with a legal or regulatory obligation, such as anti-money laundering laws, age verification, and responsible gambling requirements imposed by our licensing authority.
• Legitimate Interests: Processing is necessary for our legitimate interests, or those of a third party, provided your fundamental rights do not override these interests. This includes improving our services, preventing fraud, ensuring network and information security, and direct marketing (where permitted by law).
• Consent: In specific situations, we may ask for your explicit consent to process your data for a particular purpose, such as sending you marketing communications. You have the right to withdraw your consent at any time.

Lolly Spins may share your personal information with third parties in the following circumstances:

• Service Providers: We engage trusted third-party service providers to perform functions on our behalf, such as payment processing, identity verification, IT support, and marketing services. These providers are contractually bound to protect your data and only use it for the purposes specified by us.
• Regulatory and Law Enforcement Bodies: We may disclose your information to regulatory authorities, law enforcement agencies, or other governmental bodies when legally required to do so, or to assist in the investigation of potential illegal activities.
• Fraud Prevention Agencies: To prevent fraud and money laundering, we may share your data with organisations dedicated to these purposes.
• Group Companies: Your data may be shared with other entities within our corporate group for operational, analytical, or regulatory purposes.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.

We do not sell your personal data to third parties.

Lolly Spins implements robust technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest.
• Access controls and authentication procedures for our systems.
• Regular security audits and vulnerability assessments.
• Employee training on data protection and privacy best practices.
• Secure physical storage of any hard copy records.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is entirely secure. We cannot guarantee absolute security.

Under applicable data protection laws, you have the following rights regarding your personal data held by Lolly Spins:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
• Right to Erasure ('Right to be Forgotten'): You can request the deletion of your personal data under certain circumstances, for example, if the data is no longer necessary for the purposes for which it was collected.
• Right to Restriction of Processing: You can request that we restrict the processing of your data in certain situations, such as when you contest the accuracy of the data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
• Right to Object: You can object to the processing of your personal data where we rely on legitimate interests as the legal basis for processing, or for direct marketing purposes.
• Right to Withdraw Consent: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section. We will respond to your request in accordance with applicable laws.

Lolly Spins uses cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us:

• Remember your preferences and settings.
• Analyse website traffic and usage patterns.
• Provide personalised content and advertisements.
• Facilitate secure logins and transactions.

You have the option to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. However, this may prevent you from taking full advantage of the Lolly Spins website. For more detailed information, please refer to our dedicated Cookie Policy.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention periods vary depending on the type of data and the purpose of processing. Typically, we will retain your data for a minimum period of five years after the closure of your account, or as otherwise required by our licensing authority or anti-money laundering regulations. After this period, your data will be securely deleted or anonymised.

Lolly Spins may transfer your personal data to countries outside of your jurisdiction, including countries outside the European Economic Area (EEA). When we do so, we ensure that appropriate safeguards are in place to protect your data, such as:

• Transferring data to countries deemed to provide an adequate level of data protection by the European Commission.
• Implementing standard contractual clauses approved by the European Commission.
• Relying on your explicit consent.

We will take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.

Lolly Spins services are not intended for individuals under the legal gambling age in their respective jurisdictions, which is typically 18 years old. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information and close the associated account.

Lolly Spins may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website and, where appropriate, by email. We encourage you to review this policy periodically to stay informed about how we are protecting your information. The "Last Updated" date at the top of this policy will indicate when it was last revised.

If you have any questions about this Privacy Policy, our data practices, or if you wish to exercise any of your privacy rights, please contact our Data Protection Officer: Email: [email protected] Alternatively, you can write to us at our registered office address, which can be found on our website. We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. You also have the right to lodge a complaint with your local data protection supervisory authority.