What personal data is collected?

Registration data such as name, date of birth and address, payment details, usage data and KYC verification documents are collected to operate accounts and meet legal obligations.

Is my data shared with third parties?

Data may be shared with payment processors, game providers and regulatory authorities as required. It is not sold to unrelated parties.

How can I delete my account and data?

Players can request erasure through the support team. Some data may be retained where law or regulatory obligation requires it.

How is my data protected?

SSL encryption secures data in transit, access controls limit internal access, and two-factor authentication is available to protect accounts.

How do I raise a data concern?

Contact the support team via live chat or email. UK players may also complain to the Information Commissioner's Office.

Privacy Katana Spin Casino

Prestige Package

Up to £1,200 + 250 Free Spins

Explore the Bonus

Table of contents

Privacy at Katana Spin Casino covers how the platform handles personal data for UK players, framed by the UK GDPR and the Data Protection Act 2018. This page explains in general terms what information is collected, how it is used and what rights players hold. Katana Spin Casino processes data under its Curaçao (GCB) / Comoros (Anjouan) licence obligations.

📋 What Data Is Collected

Account registration requires identifying information such as name, date of birth, email address and residential address. Payment data is gathered when deposits and withdrawals are processed, and usage data including device type, IP address and session activity is logged for security and performance. Cookies record preferences and support analytics.

Verification documents submitted for KYC, such as proof of identity and address, are also collected to meet anti-money-laundering requirements.

🔧 How Data Is Used

Collected data supports account management, processing of deposits and withdrawals, and fraud prevention. Identity checks satisfy regulatory and licence conditions. Marketing communications are sent only with consent, and players can opt out at any time.

Usage analytics help maintain platform stability and detect irregular activity that may indicate fraud or account compromise.

Personal data may be shared with payment processors to settle transactions, with game providers where required for gameplay, and with regulatory authorities under the platform's licence conditions. Data is not sold to unrelated third parties.

Where regulatory reporting is required, information is disclosed to the relevant supervisory bodies in line with anti-money-laundering law.

🍪 Cookies and Tracking

The platform uses session cookies to keep players logged in, analytics cookies to understand site usage, and preference cookies to remember settings. Players can manage or disable non-essential cookies through their browser, though some features may not function without them.

🛡️ Your Rights

Under UK GDPR, players hold the right to access their data, request correction of inaccuracies, request erasure, restrict processing, object to processing and request data portability. Requests can be made through the support team.

Right of access to personal data held
Right to erasure where no legal obligation requires retention
Right to lodge a complaint with the Information Commissioner's Office

🔒 Data Security

The platform applies SSL encryption to protect data in transit and uses access controls to limit who can view personal information. Two-factor authentication is available to secure accounts. Data is retained only for the period required by law and regulatory obligation.

🎧 Contact and Complaints

Players can raise data concerns with the support team via live chat or email. UK players also retain the right to lodge a complaint with the Information Commissioner's Office if a concern is not resolved.

⚖️ Data Minimisation and the Offshore Context

The platform operates under a Curaçao (GCB) / Comoros (Anjouan) licence rather than a domestic UK licence, which places it outside the UK regulatory perimeter. The principle of data minimisation under UK GDPR holds that the operator should collect only the personal data genuinely necessary for the stated purpose. In practice that means registration details, payment information and the identity documents required for KYC are the categories a player should expect to provide, proportionate to the anti-money-laundering checks performed before a first withdrawal.

Because the platform sits offshore, more of the protective responsibility falls on the player and the on-site mechanisms than on a domestically licensed site. That framing is neutral rather than disqualifying, but it makes the safeguards on this page, encryption, access controls and retention limits, the working protection a player relies on.

🗂️ How Long Data Is Kept

Retention is governed by purpose rather than kept open-ended. Personal and transactional data is held only for the period required by law and regulatory obligation, after which it falls due for deletion unless a continuing legal duty requires it to be retained. Anti-money-laundering rules impose minimum retention periods on transaction and verification records, which is why a request for erasure may not remove every category of data immediately.

For a player exercising the right to erasure at Katana Spin Casino, data no longer needed for a legal or regulatory purpose can be deleted on request through the support team, while records under a statutory retention duty are removed once that duty expires.

📊 Conclusion

This page summarises how the platform handles personal data under UK GDPR principles. Players with questions about their information should contact the support team.