Opening a casino account means handing over more personal detail than most online shops ever ask for. A name and address, a date of birth, an identity document, payment information. We think anyone sharing that much deserves a clear account of where it goes, so this policy is written to be read in one sitting rather than skimmed and forgotten.
It covers what Holyspin collects from players in Australia, the reasons behind each piece of information, who else may see it, how long it is kept, and the choices every account holder has. If anything here is unclear, our live chat team can explain it.
The Rules We Work To
In Australia, the handling of personal information is shaped by the Privacy Act 1988 and the 13 Australian Privacy Principles that sit within it. The Office of the Australian Information Commissioner oversees privacy and handles complaints from people who feel their information has been mishandled. We have built this policy around those principles: collect only what is needed, be open about why, keep it secure, and let people see and correct what is held about them.
What We Collect
Information Given at Sign-Up
When an account is opened, we ask for an email address, a password, full legal name, date of birth, gender, a residential address and a mobile phone number. Passwords are stored in a scrambled form that our own staff cannot read.
Identity Documents
After the first deposit, we ask for documents to confirm identity. That usually means a passport or other photo ID, along with proof of the payment method used or a recent utility bill showing the home address. Occasionally we may arrange a short phone or video call to confirm identity, and we may ask questions about where funds come from.
Payment Information
We keep records of deposits and withdrawals, including the method used, the amount and the time. Card details and other sensitive payment data are handled by our payment partners in line with industry security standards, rather than being stored in full on our own systems.
Play and Account Activity
The casino records game rounds, bets, wins, bonus activity, loyalty progress and the history of each account. That record is what allows us to settle disputes, check bonus wagering and show players an accurate account history.
Device and Connection Details
Like nearly every website, we collect technical information such as IP address, browser type, device type, operating system and the pages visited. It helps keep the site secure, spot unusual logins and fix problems on particular devices.
Conversations With Our Team
Live chat conversations, contact form messages and in-account messages are stored. A transcript of every live chat is also emailed to the player once the chat ends, so both sides have the same record of what was said.
Why We Collect It
Every piece of information we hold has a job to do. The main purposes are:
- Running the account: logging in, holding a balance, processing deposits and withdrawals.
- Confirming age and identity, so that only adults can play and nobody can use someone else's details.
- Meeting legal duties, including anti-money laundering and counter-terrorism financing checks.
- Preventing fraud, duplicate accounts and bonus abuse.
- Keeping responsible gambling tools working, such as deposit limits, session reminders and self-exclusion.
- Answering questions and handling complaints.
- Improving the site, fixing faults and understanding which features are used.
- Sending promotional messages, but only to players who have agreed to receive them.
We do not use personal information for any purpose that is unrelated to these without telling account holders first.
Marketing and Choices
Promotional emails and texts are only sent to players who have opted in. Switching marketing off takes a few seconds in the account settings, and once it is off, no further promotional campaigns go out. Service messages, such as withdrawal confirmations, security alerts and changes to our terms, are still sent because they relate to the running of the account.
Responsible gambling settings are treated with particular care. Details of deposit limits, session reminders and self-exclusions are kept on the account so the tools can do their job, and they are never used to market to anyone. Information on the tools themselves is on our safer gambling page.
Who Else Sees Information
Personal information is never sold to anyone. It leaves Holyspin only where there is a genuine need, and only with:
- Payment providers and banks that process deposits and withdrawals.
- Identity verification and fraud prevention services that check documents and flag risk.
- Game studios, where limited technical data is needed to run their games.
- Technology providers that host our systems, run live chat or send our emails.
- Professional advisers such as auditors and lawyers.
- Regulators, police or courts, where the law requires it.
Anyone we share information with is expected to protect it properly and use it solely for the purpose it was shared for.
Information Held Overseas
Some of the services we rely on store or process information outside Australia. Where that happens, we take reasonable steps to make sure the information is protected to a standard comparable to the protections Australians would expect at home.
Keeping Information Safe
All traffic to holyspin1.casino travels over an encrypted HTTPS connection, so passwords and payment information are scrambled in transit. Access to personal information inside our business is limited to staff who need it for their role. Identity documents are stored securely and are only viewed by the people responsible for verification.
Security is shared work, though. A long password used nowhere else, logging in only by typing the address rather than tapping a link in an unexpected email, and never sharing login details with anyone all make a real difference. Our team will never ask for a password in chat. The login and account access guide covers a few more habits worth adopting.
If Something Goes Wrong
No system is completely immune to attack. If a data breach occurs that is likely to cause serious harm, the Notifiable Data Breaches scheme requires affected people and the Office of the Australian Information Commissioner to be told. We would contact affected account holders directly, explain what happened and set out the steps they can take to protect themselves.
Data handled with care, games ready to go.
Visit HolyspinHow Long Information Is Kept
Personal details stay on file for as long as there is a genuine reason to hold them, and no longer. Account and transaction records are generally retained for several years after an account closes, because anti-money laundering laws and tax rules require records to be available if they are ever requested. Information linked to a self-exclusion is kept for as long as the exclusion runs, so that the protection actually works. Once there is no longer a legal or practical need, information is deleted or anonymised.
Cookies
Holyspin uses cookies and similar technology to keep players logged in, remember preferences and understand how the site is used. Essential cookies are needed for the site to work. Others, such as analytics cookies, help us see which pages are popular and where people run into trouble. Most browsers allow cookies to be blocked or cleared, although blocking essential ones may stop parts of the site from working properly.
Rights Over Personal Information
Account holders can ask to see the personal information we hold about them, and can ask us to correct anything that is wrong or out of date. Some details, such as phone number and address, can be updated directly in the account settings. A change of legal name is reviewed manually by our team before it is made.
Requests can be made through live chat or the contact form on our contact page. We may need to confirm identity before handing over information, which protects the account from anyone pretending to be its owner. We aim to respond within a reasonable time, and if a request cannot be met in full, we will explain why. Where a request to delete information conflicts with a legal duty to keep records, we will say so and delete what we are able to.
Making a Privacy Complaint
The first step for anyone worried about how their information was handled is to tell our team. Complaints are investigated and answered within four weeks, or up to four further weeks for complicated matters, with updates along the way. If the response does not resolve the concern, a complaint can be taken to the Office of the Australian Information Commissioner.
Players Under 18
Holyspin is not available to anyone under 18, and we do not knowingly collect information from minors. If we discover that an account belongs to someone underage, it is closed and the information is handled in line with our legal obligations.
Changes to This Policy
We may update this policy when the law changes, when we add new features or when the services we use change. The current version is always on this page. Significant changes are flagged on the site before they take effect. This policy should be read together with our terms and conditions for players.
A Plain-English Walk Through One Account
Policies can feel abstract, so here is a simple illustration of how information moves through a typical Holyspin account. Picture a new player in Brisbane signing up on her phone during a lunch break. The sign-up details are stored against her new account, and her password is saved in a form that nobody at Holyspin can read back. A verification email goes out straight away, and she confirms her mobile number at the same time.
That evening she makes a first deposit. The payment details pass to the payment provider, while we keep a record of the amount, the method and the time. A few minutes later she uploads a photo of her passport and a recent power bill. Only the people who handle verification look at those documents, and once they are checked, the account is marked as verified.
Over the next few weeks, her play history builds up: the pokies she tries, the bonus she claims, the wagering she clears. She sets a weekly deposit limit, which is stored on the account so it works every time she opens the cashier. She opts out of promotional emails after a month, and from then on only service messages reach her inbox. If she ever asks to see what we hold, she can request it through live chat, and we will confirm it is really her before sending anything.
That is the whole cycle. Nothing is collected without a reason, nothing is sold, and every step can be explained if she asks.
Questions about personal information? Live chat can help.
Take a lookQuestions Worth Asking Any Casino
We encourage players to hold every casino to the same standard, including us. Before handing over documents anywhere, it is worth asking where they will be stored, who can see them, how long they will be kept and how to ask for a copy of what is held. A casino that cannot answer those questions clearly is a casino worth thinking twice about.
Holyspin Privacy Policy FAQ
Does Holyspin sell player data?
No. Personal information is never sold. It is shared only with the services needed to run the casino, such as payment and verification providers, and with authorities where the law requires it.
Why does an online casino need identity documents?
Documents confirm that the player is over 18 and is who they say they are. They also meet anti-money laundering rules and stop anyone from withdrawing money from an account that is not theirs.
How long are casino account records kept?
Records are generally kept for several years after an account closes, because anti-money laundering and tax laws require it. After that, information is deleted or anonymised.
Can personal details be updated or corrected?
Yes. Phone number and address can be changed in the account settings, and anything else can be corrected by contacting our team. A change of legal name goes through a manual review first.
Who oversees privacy in Australia?
The Office of the Australian Information Commissioner oversees privacy under the Privacy Act 1988. It handles complaints from people who are unhappy with how an organisation has dealt with their information.
Gamble Responsibly
Holyspin is only for adults aged 18 and over. If gambling is starting to feel like more than entertainment, free and confidential support is available around the clock through Gambling Help Online on 1800 858 858.
18+ only. Gambling involves risk. Keep time and spending within clear limits. Free support: Gambling Help Online on 1800 858 858.