Privacy & Security

Information Gathering

MethSpin Entertainment N.V., a company incorporated and operating under the laws of Curaçao, holding eGaming license number 8048/JAZ2020-013, is committed to the lawful and transparent processing of personal data collected through the website methspin.us.com. The following categories of personal data are subject to collection and processing in the course of service provision:

Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details, including passport numbers and national identification numbers, are collected for the purposes of identity verification and regulatory compliance.
Contact Data: Electronic mail addresses, telephone numbers, and residential or correspondence addresses are recorded to facilitate communication between the operator and the registered user.
Financial Data: Banking account details, payment card information, electronic wallet credentials, transaction histories, deposit and withdrawal records are processed in connection with the execution of financial operations on the platform.
Technical Data: Internet Protocol (IP) addresses, browser type and version, operating system identifiers, device identifiers, session timestamps, and cookie-derived data are collected automatically upon access to and navigation of the website.
Behavioral and Usage Data: Records pertaining to gaming activity, wagering history, session duration, frequency of platform use, and preferences expressed during interaction with the website are retained for the purposes set forth herein.
Verification and Compliance Data: Documentation submitted in response to Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements, including source of funds declarations and enhanced due diligence materials, are processed and retained in accordance with applicable regulatory obligations.
Communication Data: Records of correspondence conducted via electronic mail, live chat, or other supported communication channels, including the content thereof, are retained for quality assurance, dispute resolution, and regulatory audit purposes.

Personal data is collected directly from the data subject at the time of account registration, during subsequent account verification procedures, and continuously throughout the data subject's interaction with the services offered on the platform. In certain circumstances, personal data may be obtained from third-party identity verification providers, fraud prevention agencies, and regulatory databases where such processing is authorized by applicable law.

Data Usage

Personal data collected through the website methspin.us.com is processed exclusively for specified, explicit, and legitimate purposes. The following purposes constitute the legal basis and operational rationale for data processing activities conducted by MethSpin Entertainment N.V.:

Account Registration and Administration: Personal data is processed to establish and maintain user accounts, authenticate user identity upon login, and administer the contractual relationship between the operator and the registered user.
Regulatory Compliance and Legal Obligations: Processing of identity, financial, and verification data is carried out in fulfilment of obligations imposed under Curaçao eGaming licensing requirements, applicable AML legislation, KYC regulatory frameworks, and international standards pertaining to the prevention of financial crime and fraud.
Financial Transactions Processing: Financial data is processed to execute deposits, withdrawals, and other monetary transactions initiated by the user, as well as to detect, investigate, and prevent unauthorized or fraudulent financial activity.
Responsible Gaming Compliance: Usage and behavioral data are processed to monitor gaming patterns, identify indicators of problem gambling behavior, enforce self-exclusion requests, and implement responsible gaming measures in accordance with applicable licensing conditions.
Customer Support and Dispute Resolution: Communication and account data are processed to respond to user inquiries, manage complaints, and resolve disputes arising in connection with the use of the platform's services.
Security and Fraud Prevention: Technical and behavioral data are analyzed for the purpose of identifying security threats, preventing unauthorized access, detecting fraudulent conduct, and maintaining the integrity of the platform's operational environment.
Legal Proceedings and Regulatory Reporting: Where required by applicable law or by order of a competent authority, personal data may be disclosed and processed in connection with legal proceedings, regulatory investigations, or statutory reporting obligations.
Service Improvement and Analytics: Aggregated and, where applicable, anonymized data derived from usage patterns may be processed for the purpose of improving platform functionality, user experience, and service quality, provided that such processing does not result in the identification of individual data subjects.

Personal data shall not be processed for purposes incompatible with those specified above without the prior informed consent of the data subject, except where such processing is required or authorized by applicable law. Personal data shall not be sold, rented, or otherwise transferred to third parties for independent commercial purposes.

Security Measures

MethSpin Entertainment N.V. implements a comprehensive framework of technical and organizational measures designed to ensure the security, integrity, and confidentiality of personal data processed in connection with the operation of methspin.us.com. These measures are applied in accordance with industry standards and in proportion to the risk associated with each category of data processed.

Encryption Technologies: All data transmitted between user devices and the platform's servers is protected using Transport Layer Security (TLS) encryption protocols. Sensitive data stored within the operator's systems, including financial credentials and identity documents, is encrypted at rest using established cryptographic standards.
Access Control Mechanisms: Access to personal data is restricted on a strict need-to-know basis. Role-based access control systems are implemented to ensure that only authorized personnel are permitted to access data relevant to their designated functions. Multi-factor authentication is required for administrative access to systems containing personal data.
Firewalls and Intrusion Detection Systems: Network perimeters are protected by enterprise-grade firewall infrastructure. Continuous monitoring systems, including intrusion detection and prevention systems, are maintained to identify and mitigate unauthorized access attempts and anomalous network activity.
Data Minimization and Retention Controls: Personal data is retained only for the period necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Systematic data minimization practices are applied to limit the scope of personal data held within operational systems.
Third-Party Processor Oversight: Where personal data is processed by third-party service providers on behalf of MethSpin Entertainment N.V., contractual data processing agreements are established to ensure that such processors implement equivalent or superior security standards and process data solely in accordance with documented instructions.
Vulnerability Management: Regular security assessments, penetration testing, and vulnerability scanning procedures are conducted to identify and remediate potential security weaknesses within the platform's technical infrastructure.
Incident Response Procedures: Documented procedures are maintained for the detection, assessment, and management of personal data breaches. In the event of a security incident resulting in the unauthorized disclosure or compromise of personal data, affected individuals and relevant supervisory authorities shall be notified in accordance with applicable legal requirements.
Staff Training and Awareness: Personnel with access to personal data are subject to mandatory data protection training and are bound by contractual obligations of confidentiality. Organizational policies governing the lawful handling of personal data are maintained and enforced throughout the operator's administrative structure.

Notwithstanding the security measures implemented, no data transmission over public networks or electronic storage system can be guaranteed to be entirely immune to unauthorized access. The operator remains committed to continuous review and enhancement of its security posture in response to evolving technical and regulatory requirements.

User Rights

Data subjects whose personal data is processed by MethSpin Entertainment N.V. in connection with the operation of methspin.us.com are entitled to exercise the following rights in respect of their personal data. The exercise of these rights is subject to applicable legal limitations, regulatory obligations, and verification of the identity of the requesting party.

Right of Access: A data subject is entitled to request confirmation as to whether personal data relating to them is being processed, and, where such processing is confirmed, to obtain a copy of the personal data held and information regarding the purposes, categories, and recipients of such processing.
Right to Rectification: A data subject is entitled to request the correction of inaccurate personal data and the completion of incomplete personal data held by the operator, without undue delay following receipt of a valid request.
Right to Erasure: A data subject is entitled to request the deletion of their personal data where such data is no longer necessary for the purposes for which it was collected, where consent has been withdrawn and no other legal basis for processing exists, or where the data has been unlawfully processed. This right is subject to the operator's obligations to retain data as required by applicable law and regulatory requirements, including those imposed under anti-money laundering and gaming licensing regulations.
Right to Restriction of Processing: A data subject is entitled to request that the processing of their personal data be restricted in specified circumstances, including where the accuracy of the data is contested, where the processing is unlawful but erasure is opposed, or where the data is no longer required for processing purposes but must be retained for the establishment, exercise, or defence of legal claims.
Right to Data Portability: Where processing is carried out on the basis of consent or contractual necessity and is performed by automated means, a data subject is entitled to receive their personal data in a structured, commonly used, and machine-readable format and to request the transmission of such data to another controller where technically feasible.
Right to Object: A data subject is entitled to object to the processing of their personal data on grounds relating to their particular situation where such processing is based on the legitimate interests of the operator or is carried out for purposes of direct marketing.
Right to Withdraw Consent: Where processing is based upon the prior consent of the data subject, such consent may be withdrawn at any time without prejudice to the lawfulness of processing conducted prior to withdrawal. Withdrawal of consent shall not affect processing carried out on alternative legal bases.
Right to Lodge a Complaint: A data subject who considers that the processing of their personal data is not conducted in accordance with applicable data protection requirements is entitled to lodge a complaint with a competent supervisory authority or to seek judicial remedy through appropriate legal channels.

Requests for the exercise of any of the rights enumerated above shall be submitted in writing to the operator's designated contact channel. The operator undertakes to respond to all valid requests within the timeframe prescribed by applicable law, and in any event within thirty (30) calendar days of receipt of a complete and verifiable request. The operator reserves the right to request additional information as may be necessary to verify the identity of the requesting party prior to processing any such request.

Contact

All inquiries, requests, and correspondence relating to the processing of personal data, the exercise of data subject rights, or any other matter pertaining to this Privacy and Security policy shall be directed to MethSpin Entertainment N.V. through the following designated electronic communication channel:

Electronic Correspondence: [email protected]

All communications received through the above channel will be reviewed and addressed by the operator's designated personnel responsible for data protection matters. The operator is committed to providing substantive and timely responses to all legitimate inquiries submitted in connection with the personal data processing activities described herein. Communications should clearly identify the nature of the request, the relevant data subject, and any specific personal data or processing activity to which the inquiry relates, in order to facilitate efficient and accurate handling of the matter by the operator's responsible personnel.