Privacy Notice

1. Who is responsible for your data

The data controller for socialspinsnetwork.com is Aurum Crown Interactive Ltd, registration number HE 448921, registered office 42 Amathountos Avenue, Office 3B, 4532 Limassol, Cyprus, Republic of Cyprus. For any privacy matter, write to [email protected].

2. What we collect

If you register an account

• Display name — shown in the site header, chosen by you.
• Email address — your login identifier and the only way we can reach you.
• Password — never stored. We keep only a scrypt hash with a unique random salt, from which the original password cannot be recovered.
• Virtual coin balance and coin history — your opening allowance, daily bonus collections and the timestamps involved.
• Account timestamps — when the account was created and when the daily allowance was last claimed.

If you simply browse or play as a guest

• A session cookie only if you sign in. Guests get no account record at all — no balance, no profile, nothing stored on our side.
• Standard server logs kept by our web server: IP address, date and time, requested page, referrer, user agent and response status. These are security and diagnostic records.
• An age-gate acknowledgementstored in your browser’s local storage so the 18+ notice does not reappear on every page. It stays on your device and is never sent to us.

What we never collect

No payment or card data — there is nothing to pay for. No identity documents. No advertising or cross-site tracking profiles. No third-party analytics or marketing pixels on our own pages. No precise location. No special-category data.

3. Why we use it, and our legal basis

• To run your account — authentication, coin balance, daily allowance. Legal basis: performance of a contract (our Terms of Use).
• To keep the site secure and working — abuse detection, duplicate-account prevention, debugging. Legal basis: legitimate interests in operating a safe service.
• To enforce the 18+ restriction — recording your age declaration at registration. Legal basis: legal obligation and legitimate interests in protecting minors.
• To answer your messages — support, privacy requests, complaints. Legal basis: legitimate interests, or contract where it concerns your account.

We do not send marketing email, and we do not use your data for automated decision-making or profiling.

4. Cookies and local storage

We set one essential, signed, HTTP-only session cookie when you sign in — it identifies your account and nothing more. We use no analytics or advertising cookies of our own. Embedded game demonstrations are loaded from their developers’ domains and may set their own cookies inside the game frame, which we do not control. The full picture is in our Cookie Policy.

5. Who your data is shared with

We do not sell, rent or trade personal data, and we do not share it for advertising. Limited disclosure happens only to:

• Our hosting provider, which operates the server where the site and its database run, acting as our processor;
• Google Fonts, whose typeface files we self-host through our framework’s build process so your browser does not contact Google when you visit;
• Game developers, whose demonstration builds you load in an embedded frame; your interaction inside that frame is subject to their own privacy terms;
• Authorities or advisers, where we are legally required to disclose information or need to defend a legal claim.

6. Where your data is held

Account data is stored in a database on our own European hosting infrastructure. Where any transfer outside the European Economic Area becomes necessary, we rely on an adequacy decision or the European Commission’s Standard Contractual Clauses.

7. How long we keep it

• Account data — for as long as your account exists. Ask us to close it and we delete the record, normally within 30 days.
• Coin history — deleted together with the account.
• Server logs — retained for a short period (typically up to 90 days) for security and troubleshooting, then rotated away.
• Support correspondence — up to 24 months, so we have context if you write again.
• Self-exclusion records — a minimal note that an address is excluded, kept for the duration you requested, because deleting it would defeat the purpose.

8. Your rights

Under the EU General Data Protection Regulation and the data protection law of the Republic of Cyprus you may request: access to your data; correction of inaccurate data; erasure; restriction of processing; portability in a machine-readable form; and objection to processing based on legitimate interests. You may also withdraw consent where consent is the basis used.

Email [email protected] from the address registered to your account. We answer within 30 days, free of charge, and we will not ask for extra identity documents unless we genuinely cannot match the request to an account. If you are unhappy with our response you may complain to the Office of the Commissioner for Personal Data Protection in the Republic of Cyprus, or to the supervisory authority where you live.

9. Security

The site is served over HTTPS. Passwords are hashed with scrypt and a per-user salt. Session cookies are signed with an HMAC, marked HTTP-only and Secure, and expire automatically. Database access is restricted to the application account on the server. No system is perfect, so if you spot a vulnerability please report it to [email protected] before disclosing it publicly — we will thank you properly.

10. Children

Golden Royal is for adults aged 18 and over and is not directed at children. We do not knowingly collect data from minors. If you believe a child has registered, contact us and we will close the account and erase the associated data. See our Responsible Gaming page for parental control guidance.

11. Changes to this notice

We will update this page when our practices or the law change, and the “Last updated” date above will always reflect the current version. Significant changes will be announced on the site.