Rocky Spin Privacy Policy

Rocky Spin is operated by Rossobash SRL, a company incorporated in Costa Rica. This page describes the personal data we collect from players and site visitors, the purposes for which we use it, and the rights available to you. Rossobash SRL processes personal data in accordance with its own data-handling commitments and the governing laws of Costa Rica, as stated in the terms effective 20/11/2024.

What information we collect

We collect personal data across several categories depending on how you interact with the site. Account registration data includes your name, date of birth, residential address, email address, and phone number. KYC verification documents include government-issued identity documents, proof of address, and copies of payment instruments, collected before withdrawals are processed. We also collect gameplay data such as deposit and withdrawal amounts, bet history, session times, and game selections, along with device and network data including IP address, browser type, operating system, and device identifiers. Cookies and similar technologies are used for site functionality and analytics.

How we use your information

We use the data we collect to provide the service: creating and maintaining your account, processing deposits and withdrawals, and enabling gameplay. We process identity and payment data to meet our KYC and anti-money laundering obligations, including age verification and transaction monitoring, as set out in our KYC Policies and AML Policy. Device and session data is used for security purposes and fraud prevention. Where you have opted in, we may use your contact details to send marketing communications, and you can withdraw that consent at any time by contacting support.

We share personal data with licensed payment processors to handle deposits and withdrawals, and with identity verification providers to complete KYC checks. Game fairness and RNG integrity is certified by eCOGRA, iTech Labs, and Gaming Laboratories International, and data relevant to those certifications may be shared with those bodies. We may also share data with law enforcement or regulatory authorities where we are legally required to do so. We do not sell personal data to third parties.

Data retention

We retain account and transaction records for a minimum of five years following account closure, in line with our anti-money laundering obligations. Certain records, including KYC documents and gameplay logs, may be kept for up to seven years where required by applicable rules or ongoing compliance reviews. After the applicable retention period, data is deleted or anonymised.

Your rights

You have the following rights in relation to the personal data we hold about you:

Access: you can request a copy of the personal data we hold.
Rectification: you can ask us to correct inaccurate or incomplete data.
Erasure: you can request deletion of your data, subject to our retention obligations.
Restriction: you can ask us to limit how we process your data in certain circumstances.
Objection: you can object to processing based on legitimate interests, including direct marketing.
Portability: you can request your data in a structured, machine-readable format where technically feasible.

To exercise any of these rights, contact us using the details below.

Contact us

Privacy queries and data rights requests can be sent to [email protected] . We do not currently have a named Data Protection Officer; all privacy-related correspondence should be directed to the same address. We will respond to requests within a reasonable period in accordance with our obligations.