This Privacy Policy explains how Win Top Ltd, the operator of Spin Kong, collects, uses, stores, and protects your personal data when you use our web platform. It applies fully to all players residing in the United Kingdom. Please read it carefully so you understand your rights and our responsibilities.

What We Collect and Why

When you create an account with us, we collect personal information such as your full name, date of birth, email address, and chosen payment details. This information is necessary to verify your identity, process deposits and withdrawals, and comply with our obligations under applicable licensing and anti-money laundering requirements. During transaction processing, we also handle financial data — including payment method details and transaction histories — solely to facilitate secure transfers and to maintain accurate records of your account activity.

We may also collect technical data as you browse our web platform. This includes session logs, browser type, device identifiers, and cookie data. Cookies help us maintain the functionality of your session, remember your preferences, and identify unusual access patterns that could indicate a security concern. You can manage cookie preferences through your browser settings, though disabling certain cookies may affect how the platform operates for you.

How We Protect and Share Your Data

Your personal data is protected using 256-bit SSL encryption across all data transmissions between your browser and our servers. Data is held on secure servers with restricted internal access, meaning only authorised personnel who require it to perform specific operational tasks are permitted to view your information. We do not sell your personal data to third parties under any circumstances.

There are limited situations in which we share your data with external parties. Payment gateways receive only the financial information necessary to process your transactions. Identity verification services may receive the documents and personal details required to confirm your identity in line with our licensing conditions. Regulatory authorities and law enforcement bodies may also receive data where we are legally required to disclose it. In each case, data sharing is kept to the minimum necessary and is governed by appropriate data protection agreements.

We retain your personal data for as long as your account remains active. Following account closure or a period of inactivity, we are required to retain certain records for a defined number of years to satisfy regulatory and anti-money laundering obligations. Once that retention period has passed, your data is securely deleted or anonymised.

You have the right to request access to the personal data we hold about you, to ask us to correct inaccurate information, and to request deletion of your data where no legal obligation requires us to retain it. To exercise any of these rights, please contact our support team through the channels available on our web platform. We will respond to all valid requests within a reasonable timeframe. If you are unsatisfied with our response, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.

We may update this Privacy Policy from time to time to reflect changes in our practices or regulatory requirements. When we make material changes, we will notify you by posting an updated version on this page with a revised effective date. We encourage you to review this page periodically to stay informed about how we handle your data.