Rockyspin Privacy Policy
Rockyspin is operated by Rossobash SRL, a company incorporated in Costa Rica. This page sets out what personal data we collect from players and site visitors, the purposes for which we process it, who we share it with, how long we keep it, and the rights available to you. Rossobash SRL is not established in the United Kingdom and does not hold a UK Gambling Commission licence; our data-handling practices are governed by the laws of Costa Rica and by the commitments set out in this policy.
On this page
What information we collect
We collect personal data across several categories depending on how you interact with the site. Account registration data includes your name, date of birth, residential address, email address, and phone number. KYC verification documents include government-issued photo identification, proof of address, and copies of payment instruments used for deposits or withdrawals. Gameplay data covers deposit and withdrawal transactions, bet history, session times, and game selections. We also collect device and network data, including IP address, browser type, operating system, and device identifiers, as well as cookies and similar technologies used for site functionality and analytics.
How we use your information
We process personal data to provide the service: creating and maintaining your account, processing deposits and withdrawals, and delivering gameplay. We use identity, address, and payment data to meet our KYC and anti-money laundering obligations, including the age verification requirement of 18 or over and transaction monitoring under our AML Policy. Device and session data supports security monitoring and fraud prevention. Where you have opted in, we may use your contact details to send marketing communications, which you can withdraw at any time by contacting support.
Who we share data with
We share personal data with licensed payment processors to handle deposits and withdrawals, and with identity verification providers to complete KYC checks before payouts are released. Data may be disclosed to law enforcement or regulatory authorities where we are legally required to do so. We do not sell personal data to third parties. Rossobash SRL operates a network of affiliated casino brands on a shared platform, and data may be processed by entities within that group where operationally necessary.
Data retention
We retain account and transaction records for a minimum of five years following account closure, in line with anti-money laundering obligations applicable to our operations. KYC documents are held for the same period. Certain records, including server logs referenced in dispute resolution, may be retained for shorter periods where no regulatory requirement applies.
Your rights
You have the following rights in relation to the personal data we hold about you:
- Access: you can request a copy of the personal data we hold.
- Rectification: you can ask us to correct inaccurate or incomplete data.
- Erasure: you can request deletion of your data, subject to any retention obligations we are required to meet.
- Restriction: you can ask us to limit how we process your data in certain circumstances.
- Objection: you can object to processing carried out on the basis of legitimate interests, including direct marketing.
- Portability: you can request your data in a structured, machine-readable format where processing is based on consent or contract.
To exercise any of these rights, contact us using the details below. If you consider that our processing of your data does not comply with applicable requirements, you may raise a complaint with the relevant data protection authority in your country of residence.
Contact us
Privacy queries and data rights requests can be directed to our support team by email at [email protected] . We do not currently designate a named Data Protection Officer; all privacy correspondence is handled through that address. We respond to email enquiries within approximately 24 hours.