Privacy Policy

Last Updated: June 21, 2026.

At Buffalo Spins, we are committed to protecting your privacy and ensuring that your personal data is handled in a transparent, fair, and secure manner. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services at buffalospins-uk.com.

We operate in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. As a gaming operator licensed by the UK Gambling Commission (UKGC), we are also subject to strict regulatory requirements regarding the processing of your data for anti-money laundering (AML), fraud prevention, and safer gambling purposes.

Who We Are

For the purposes of the UK GDPR, Buffalo Spins is the "data controller" responsible for your personal information. If you have any questions about this policy or wish to exercise your data rights, you can contact our Data Protection Officer at:

Email: [email protected].

Information We Collect

To provide you with a safe and regulated gaming experience, we collect various categories of data:

  • Identity Data: Full name, date of birth, gender, and photographic identification (such as a passport or driver’s licence) to verify your age and identity.
  • Contact Data: Billing address, email address, and telephone number.
  • Financial Data: Details regarding your payment methods (e.g, card information, e-wallet identifiers) and transaction history.
  • Technical & Usage Data: Your IP address, browser type, device information, login data, and information about how you interact with our website, including game play history and betting patterns.
  • Profile Data: Your account preferences, marketing preferences, and responses to surveys or feedback.
  • Compliance Data: Information obtained for KYC (Know Your Customer) and AML checks, including records of source of funds, and information related to safer gambling interactions.

How We Use Your Data

We process your personal data based on several legal grounds under the UK GDPR:

  • Contractual Necessity: To register your account, process your deposits and withdrawals, and provide the gaming services you have requested.
  • Legal Obligations: To comply with our licensing conditions (UK Gambling Commission), financial regulations, and laws relating to the prevention of crime, money laundering, and terrorism.
  • Legitimate Interests: To improve our services, monitor website security, detect and prevent fraud, and provide you with personalized content.
  • Vital Interests: To protect your safety, specifically through our safer gambling monitoring systems, where we may use your behavioral data to identify signs of gambling-related harm and provide appropriate interventions.

Disclosure and Data Sharing

We do not sell your personal data. We only share your information with trusted third parties where necessary, including:

  • Identity Verification Services: To confirm your age and identity as required by UK law.
  • Payment Processors: To facilitate your deposits and withdrawals.
  • Regulators and Law Enforcement: We are required by law to share information with the UK Gambling Commission, law enforcement agencies, and other regulatory bodies when requested or in the event of suspected illegal activity.
  • Safer Gambling Networks: We may share data where necessary to fulfill our obligations under industry-wide safer gambling initiatives or to assist in protecting users from harm.

Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or regulatory requirements.

In accordance with anti-money laundering regulations, we are typically required to retain records of your transactions and identity verification for at least five years after the closure of your account.

Your Data Rights

Under the UK GDPR, you have the following rights regarding your personal information:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct inaccurate or incomplete data.
  • Right to Erasure: You can ask us to delete your data, though this is subject to our legal and regulatory retention obligations.
  • Right to Restrict or Object to Processing: You may object to the processing of your data in certain circumstances.
  • Right to Data Portability: You can request that we transfer your data to another organization.
  • Right to Withdraw Consent: Where we rely on your consent (e.g, for marketing), you have the right to withdraw it at any time.

To exercise any of these rights, please contact us at [email protected].

Security Measures

We implement industry-standard technical and organizational security measures to protect your data from unauthorized access, loss, or misuse. This includes the use of encryption (SSL/TLS), secure servers, and strict internal access controls.

Safer Gambling and Your Data

At Buffalo Spins, we take our responsibility to protect our players seriously. We monitor play patterns and interaction history to help identify individuals who may be at risk of gambling-related harm. If you feel you need support, please contact a specialized organization such as GamCare or GambleAware. Our processing of this sensitive behavioral data is carried out for the substantial public interest of safeguarding individuals.

Marketing Communications

If you opt in to receive marketing communications, we will send you news about bonuses, promotions, and new games. You can opt out at any time by clicking the "unsubscribe" link in any email or by updating your preferences in your account settings.

Changes to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be communicated to you via email or through a notice on our website. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.