Log inSign up

Your Privacy at Ohmyspins Casino

This Privacy Policy explains what personal data we collect when you play at Ohmyspins Casino, why we collect it, how long we keep it and the rights you hold over it. We operate under licence MGA/B2C/394/2017 issued by the Malta Gaming Authority, and we treat every data obligation that comes with that licence seriously.

Data We Collect From You

Categories of personal data

We collect only the data we need to run your account, meet our regulatory duties and keep our platform safe. When you register, verify or play with us, the following categories come into our systems.

  • Identity data: full name, date of birth, email address, phone number, residential address and country of residence.
  • Verification documents: copies of your ID, passport or driver's licence, proof of address and payment method verification, collected during KYC checks before your first withdrawal.
  • Transaction data: deposits and withdrawals, payment method details, amounts, currencies (including AUD, EUR, USD, BTC, ETH, USDT) and timestamps.
  • Technical data: IP address, device identifiers, browser type, operating system and pages you visit on ohmyspins-aud.com.
  • Gameplay behaviour: bets placed, games played, winnings and losses, session duration and bonus usage.
  • Marketing preferences: whether you opted in to promotional emails or SMS, and which communications you interact with.

How We Use Your Data

We use each category of data for a specific, stated purpose. Your identity data opens and maintains your account; your verification documents satisfy our KYC obligations under the Malta Gaming Authority licence; your transaction data processes deposits and withdrawals, which take 0 to 72 hours to complete.

We also analyse gameplay behaviour for fraud prevention and responsible-gambling monitoring. If your play patterns suggest risk, we may contact you about the deposit limits, loss limits, session reminders and self-exclusion tools we offer, including a link to Gambling Help Online on 1800 858 858. Marketing messages go only to players who have given consent, and you can withdraw that consent at any time through your account settings or by emailing [email protected].

  • Creating and managing your player account.
  • Completing identity, age and payment verification checks.
  • Processing deposits and withdrawals across all supported payment methods.
  • Detecting and preventing fraud, money laundering and bonus abuse.
  • Monitoring play for responsible-gambling purposes.
  • Sending promotional material where you have consented.
  • Meeting tax, AML and regulatory reporting obligations.

Contract. We process your identity, account and transaction data to perform the player agreement you accepted at registration. Without this data we cannot provide an account, games or payouts, so the processing is necessary for the contract between us.

Legal obligation. Licence conditions under the Malta Gaming Authority and anti-money-laundering law require us to verify your identity, keep transaction records for at least five years and report suspicious activity. Here the law, not our business needs, drives the processing.

Legitimate interest. We rely on legitimate interest for fraud prevention, security monitoring and improving our services, because these purposes benefit you and other players while carrying minimal impact on your privacy. We balance that interest against your rights before acting on it.

Consent. Marketing emails, SMS and non-essential cookies run only on your consent. You give it by opting in, and you can withdraw it at any moment without affecting your ability to play.

How Long We Keep Records

Retention depends on the type of data and the legal duty attached to it. We never keep personal data longer than the purpose requires, and we delete or anonymise records on schedule.

  • Transaction and account data: retained for a minimum of 5 years after account closure, as our regulatory licence demands.
  • KYC verification documents: kept for the regulatory retention period, then securely destroyed.
  • Technical and gameplay logs: kept for up to 12 months for security and dispute resolution.
  • Marketing preferences: kept until you withdraw consent or ask us to delete them.
  • Records linked to an ongoing dispute, investigation or self-exclusion: kept until the matter closes, plus the statutory period.

Who We Share Data With

We do not sell your personal data. We share it only with parties who help us operate the casino, and each one works under a data-processing agreement that limits what they can do with your information.

  • Payment processors handling your deposits and withdrawals, including card networks, e-wallet providers and crypto gateways.
  • KYC and AML verification providers who confirm your identity documents and screen transactions.
  • Game providers whose titles you play; they receive only the technical data needed to run the session.
  • Regulators and law-enforcement bodies, including the Malta Gaming Authority, where reporting is legally required.
  • Analytics and IT service providers who host and secure our platform.
  • Marketing platforms, solely where you have consented to receive promotions.

Your Rights Over Your Data

You control your personal data. Whatever your location, we apply the same rights framework to every player at Ohmyspins Casino, and we respond to requests within 30 days.

You may ask us to correct anything inaccurate, export your data in a portable format, or object to processing based on legitimate interest. Withdrawing consent stops marketing immediately. If you believe we have handled your data poorly, you can complain to the Malta Gaming Authority or your local data protection authority; you also have the right to lodge a complaint with the supervising data protection regulator without any cost to you.

  • Access: get a copy of the personal data we hold about you.
  • Rectification: fix errors or incomplete records.
  • Erasure: request deletion where no legal retention duty applies.
  • Portability: receive your data in a structured, machine-readable format.
  • Objection: object to processing based on legitimate interest.
  • Withdrawal of consent: stop marketing at any time.
  • Complaint: escalate to a data protection authority.

Cookies and Tracking

We use essential cookies to keep your session secure and remember your login, plus optional analytics and marketing cookies that only load with your consent. When you first visit ohmyspins-aud.com, a banner lets you accept or reject each category, and you can change your choices anytime in your browser settings or from the cookie banner. Full details of every cookie we set, its purpose and its lifespan sit in our dedicated Cookies Policy, which we update whenever our tooling changes.

Security Measures We Apply

All traffic between your device and our platform travels over TLS encryption, and stored payment and identity records sit encrypted at rest. Access to player data follows a strict need-to-know model: staff reach only the categories their role requires, and every access is logged and auditable.

We run regular penetration tests, monitor for suspicious account activity around the clock and keep verified payment methods on file so payouts go only to you. If a data breach affects your personal data, we notify the relevant supervisory authority within 72 hours of becoming aware of it, and we tell affected players directly where the risk to you is high. Our support team is reachable 24/7 through live chat or [email protected] if you ever suspect unauthorised access to your account, and we can freeze the account pending review.

Frequently Asked Questions

Does Ohmyspins Casino sell my personal data?

No. We share data only with payment processors, verification providers, regulators and service operators who need it to run the casino, and each works under a strict data-processing agreement.

How do I stop marketing emails?

Open your account settings and withdraw marketing consent, or click the unsubscribe link in any email. You can also email [email protected] and we will stop all promotional messages immediately.

How long do you keep my transaction history?

Our licence requires us to keep transaction and account records for at least 5 years after account closure. After the retention period ends we delete or anonymise them.

Can I get a copy of all data you hold about me?

Yes. Send a data access request to [email protected] and we will provide a full copy of your personal data in a portable format within 30 days.

Who do I contact about a privacy concern?

Contact our support team at [email protected], available 24/7 via live chat. If we cannot resolve the matter, you may complain to the Malta Gaming Authority or your local data protection authority.