Privacy Policy

This Privacy Policy describes how Fionex Holding LTD ("we", "us", or "the Company"), operator of Birdspin Casino under Anjouan licence ALSI-202409044-FI2, collects, uses, stores, and protects your personal data when you use our website. By registering an account or continuing to use the site, you acknowledge the practices described below.

1. Data We Collect

Registration data: full name, date of birth, email address, residential address, and phone number provided at account creation
Identity verification data: copies of identity documents and proof of address submitted during KYC
Financial data: payment method details, deposit and withdrawal records, transaction history
Usage data: pages visited, games played, session duration, device type, IP address, browser type
Communication data: content of support interactions via live chat and email

2. How We Use Your Data

Processing account registration, login authentication, and identity verification
Processing deposits, withdrawals, and preventing fraud
Complying with Anti-Money Laundering (AML) and Know Your Customer (KYC) regulatory obligations
Providing customer support and responding to queries
Sending transactional communications related to your account, bonuses, and security
Improving the website and gaming experience through anonymised analytics
Responsible gaming monitoring and applying protective measures where necessary

3. Legal Basis for Processing

We process your personal data on the following legal bases: performance of the contract between you and the Company (account services), compliance with legal obligations (AML, KYC), legitimate interests (fraud prevention, security), and, where applicable, your explicit consent (marketing communications).

4. Data Sharing

We do not sell your personal data to third parties. Data may be shared with:

Payment processors (including Heighten Services LTD, our Cyprus-registered payment partner) for transaction processing
Identity verification service providers for KYC compliance
Regulatory authorities if required by law or licence obligations
Technical service providers (hosting, analytics) under strict data processing agreements

5. Data Retention

Account data is retained for as long as your account is active and for a minimum of five years after closure to comply with AML record-keeping requirements. Transaction records are retained for the period required by applicable law. You may request deletion of data not subject to legal retention obligations by contacting our support team.

6. Your Rights

Access: request a copy of the personal data we hold about you
Rectification: request correction of inaccurate data
Erasure: request deletion of data not subject to legal retention obligations
Restriction: request that we limit how we process your data in certain circumstances
Portability: receive your data in a structured, machine-readable format
Objection: object to processing based on legitimate interests

To exercise any of these rights, contact our support team via live chat or email. We will respond within 30 days.

7. Security

All data transmitted between your device and our servers is protected by 256-bit SSL encryption. We maintain appropriate technical and organisational security measures to prevent unauthorised access, loss, or disclosure of personal data. Two-factor authentication is available for additional account protection.

8. Cookies

We use cookies and similar tracking technologies to operate the website, remember your preferences, and analyse traffic. See our Cookie Policy for full details on the types of cookies used and how to manage them.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page. Material changes will be communicated via a notice on the website or by email where required. Continued use of the site after changes are posted constitutes acceptance of the updated policy.

For privacy-related questions, contact our support team via live chat or email (available 24/7).