Privacy Policy

Version: 1.0  |  Last Updated: November 10, 2025

1. Introduction

Welcome to Uspin ("we", "our", or "us"), accessible at uspin.fyi. We are committed to protecting the personal information of every individual who visits our website or uses our services. This Privacy Policy explains what personal data we collect, why we collect it, how we use and store it, and what rights you have in relation to that data.

This document applies to all users who access uspin.fyi, including registered account holders, visitors, and anyone who contacts our support team. By continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming page, which together form the complete framework governing your use of Uspin.

If you disagree with any part of this Policy, please discontinue use of the platform and contact us at privacy@uspin.fyi before submitting any personal information.

2. Data We Collect

We collect personal data through several means: directly from you when you register or interact with our services, automatically through your device and browser, and from trusted third-party partners. The categories of data we process are described below.

2.1. Identity & Contact Information

• Full legal name
• Date of birth (used to verify minimum age requirement of 18 years)
• Email address and mobile phone number
• Residential address, city, state, and postal code
• Copies of government-issued identity documents (e.g., Aadhaar, PAN card, passport) where required for verification

2.2. Financial & Transaction Data

• Payment method details (UPI ID, masked card numbers, e-wallet identifiers)
• Deposit and withdrawal amounts, timestamps, and transaction references
• Currency denomination — all transactions are processed in Indian Rupees (₹ / INR)
• Preferred payment channels, including UPI (PhonePe, Google Pay, Paytm, BHIM), Visa, Mastercard, RuPay, Neteller, Skrill, AstroPay, IMPS, and Net Banking

2.3. Account & Usage Data

• Username, hashed password, and security question responses
• Gaming activity logs, session durations, game history, bonus usage
• Responsible gaming settings such as deposit limits and self-exclusion preferences
• Customer support communications including chat transcripts and email correspondence

2.4. Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Referral URL, landing page, and navigation path
• Timestamps of login and logout events

2.5. Marketing Preferences

• Opt-in or opt-out status for promotional communications
• Communication channel preferences (email, SMS, push notifications)
• Responses to surveys or promotional campaigns

We only collect data that is adequate, relevant, and limited to what is necessary for the stated purposes. We do not collect sensitive personal data such as caste, religion, biometric information, or health records unless specifically required by applicable law.

3. How We Use Your Data

The personal data we hold is used exclusively for the following purposes. We will not use your data for any purpose that is incompatible with what is described below without notifying you in advance.

3.1. Account Registration & Service Delivery

We use identity and contact information to create and maintain your account, verify that you meet the minimum age threshold of 18 years, and ensure you are located in a jurisdiction where our services are permissible. This includes processing your deposits and withdrawals through your chosen payment method and enabling full access to platform features.

3.2. Identity Verification & Fraud Prevention

We carry out Know Your Customer (KYC) checks using the identity documents you provide. This helps us detect and prevent fraudulent activity, money laundering, and abuse of promotional offers. Where suspicious activity is identified, we may temporarily restrict your account while an investigation is conducted.

3.3. Responsible Gaming Obligations

Usage and behavioural data help us monitor for signs of problem gambling, enforce self-imposed limits, and act in accordance with our commitments described in our Responsible Gaming policy. If your behaviour suggests risk, we may proactively contact you or restrict certain features.

3.4. Customer Support

When you contact us via email or live chat, we process your contact and account data to identify you, respond efficiently to your query, and maintain a record of interactions for quality assurance and dispute resolution.

3.5. Marketing & Personalisation

With your explicit consent, we may send you promotional content including bonus offers, newsletters, and product updates via email or SMS. You may withdraw your consent at any time by using the unsubscribe link in any marketing email or by contacting support@uspin.fyi. Withdrawing consent does not affect lawfulness of prior processing.

3.6. Analytics & Platform Improvement

Aggregated, anonymised data about how users navigate our platform enables us to identify performance issues, improve user experience, and develop new features. This analytics activity does not involve personally identifiable information in its final reporting outputs.

3.7. Legal & Regulatory Compliance

We process and retain certain categories of data to meet obligations imposed by applicable legislation, including financial record-keeping requirements, anti-money-laundering rules, and responses to lawful requests from competent authorities.

4. Legal Bases for Processing

Every processing activity we carry out rests on one or more recognised legal bases. The table below summarises the primary legal basis applied to each category of processing.

Where we rely on legitimate interests, we have assessed that our interests do not override your fundamental rights and freedoms. Where we rely on consent, you retain the right to withdraw it at any time without penalty; however, withdrawal does not retroactively invalidate processing conducted prior to withdrawal.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share necessary data with the following categories of recipients under strict contractual controls.

5.1. Payment Service Providers

To process deposits and withdrawals, we share limited financial and identity data with payment processors supporting methods including UPI, PhonePe, Google Pay, Paytm, Visa, Mastercard, RuPay, Neteller, Skrill, AstroPay, IMPS, and Net Banking. These providers operate under their own privacy frameworks and are contractually prohibited from using your data for any purpose beyond transaction facilitation.

5.2. Identity Verification Partners

We engage regulated KYC and anti-fraud service providers who process identity documents, perform database checks, and return a verification decision. Data shared with these partners is limited strictly to what is required for the verification task.

5.3. Technology & Infrastructure Providers

Cloud hosting, content delivery, customer support tooling, and analytics platforms may process data on our behalf as data processors. All such parties are bound by data processing agreements that restrict use, mandate security standards, and require prompt notification in the event of any incident affecting your data.

5.4. Legal & Regulatory Authorities

We may disclose personal data to law enforcement, courts, financial intelligence units, or other government bodies when compelled by a valid legal request, court order, or applicable regulation. In such cases we share only the minimum data necessary to satisfy the requirement.

5.5. Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may form part of the transferred assets. We will notify you via email or a prominent notice on our website before your data becomes subject to a materially different privacy policy as a result of such a transaction.

6. Cookies & Tracking Technologies

Uspin uses cookies and similar technologies (pixels, local storage, session tokens) to operate the platform, remember your preferences, and analyse traffic patterns. The table below describes the main categories of cookies we deploy.

When you first visit uspin.fyi, a consent banner will present you with granular options to accept or refuse non-essential cookie categories. You may update your preferences at any time through the Cookie Settings link in the website footer. Note that disabling strictly necessary cookies may prevent core features from functioning correctly.

We do not use cookies to build detailed personal profiles for sale to data brokers or for purposes unrelated to the operation and improvement of our own platform.

7. Data Security

Protecting your personal data against unauthorised access, disclosure, alteration, and destruction is a core operational priority at Uspin. We implement a layered set of technical and organisational security measures.

7.1. Technical Measures

• TLS/SSL encryption for all data transmitted between your browser and our servers
• AES-256 encryption at rest for sensitive stored data including financial records and identity documents
• Multi-factor authentication (MFA) available for all user accounts
• Regular automated vulnerability scans and periodic third-party penetration testing
• Web application firewall (WAF) and DDoS mitigation infrastructure

7.2. Organisational Measures

• Role-based access controls ensuring staff can only access data necessary for their specific function
• Mandatory data protection training for all personnel handling personal data
• Confidentiality obligations embedded in employment and contractor agreements
• Defined incident response procedures requiring timely notification in case of a data breach

Despite these measures, no digital system is entirely immune from risk. If you suspect that your account has been compromised, please contact us immediately at support@uspin.fyi so that we can take prompt protective action.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or accounting obligations.

• Active account data — retained for the full duration of your account relationship with Uspin.
• Transaction and financial records — retained for a minimum of five (5) years following the transaction date to satisfy financial record-keeping and anti-money-laundering requirements.
• KYC and identity documents — retained for a minimum of five (5) years from account closure or last active use, whichever is later.
• Marketing preferences and consent records — retained until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.
• Customer support records — retained for three (3) years from the date of the last interaction to support dispute resolution.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

9. Your Rights

As a user of Uspin, you have a number of rights in relation to your personal data. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please submit a written request to privacy@uspin.fyi. We will acknowledge your request within 72 hours and aim to fulfil it within 30 calendar days. Where a request is complex or numerous, we may extend this period by an additional 30 days with prior notice.

9.1. Right of Access

You have the right to request a copy of all personal data we hold about you, together with information on how it is being used, where it came from, and with whom it has been shared. We will provide this in a clear, structured format at no charge for the first request in any 12-month period.

9.2. Right to Rectification

If any data we hold about you is inaccurate, incomplete, or out of date, you have the right to request that we correct or supplement it without undue delay. For certain categories of data such as name or date of birth, we may require supporting documentation before making amendments.

9.3. Right to Erasure ("Right to be Forgotten")

You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent and no other legal basis applies, or where you object to processing based on legitimate interests and no overriding grounds exist. This right is subject to exceptions: we are not obligated to erase data we are required by law to retain, such as transaction records subject to anti-money-laundering obligations.

9.4. Right to Restriction of Processing

You may ask us to restrict processing of your data in certain circumstances, for example while you contest the accuracy of the data or while we assess an objection to processing. During a restriction, we will continue to store the data but will not actively process it beyond storage.

9.5. Right to Data Portability

Where processing is based on your consent or on a contractual basis and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON), and to have that data transmitted directly to another provider where technically feasible.

9.6. Right to Object

You have the right to object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. If you object to direct marketing, we will cease that processing immediately without requiring any justification from you. Objections to other legitimate-interest processing will be considered against the specific grounds you raise.

9.7. Rights Related to Automated Decision-Making

We may use automated systems to detect fraud or verify age. Where such automated processing produces a decision that significantly affects you, you have the right to request human review of that decision, to express your point of view, and to contest the outcome by contacting privacy@uspin.fyi.

9.8. Right to Withdraw Consent

Where we process your data based on consent (e.g., for marketing communications), you may withdraw that consent at any time by clicking the unsubscribe link in any promotional message or by contacting our support team. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

10. International Data Transfers

Our primary user base is located in India. However, some of the technology infrastructure, cloud service providers, and third-party processors we work with may be based outside India. When personal data is transferred internationally, we apply appropriate safeguards to ensure it receives a standard of protection consistent with applicable data protection principles.

Safeguards we rely upon include:

• Standard contractual clauses (SCCs) or equivalent data transfer agreements incorporated into our contracts with overseas processors
• Transfers to countries recognised as providing an adequate level of data protection by relevant authorities
• Binding corporate rules where applicable within the same corporate group

You may request further information about the specific safeguards in place for any particular international transfer by contacting privacy@uspin.fyi. We will provide details of the relevant transfer mechanism and, where permissible, copies of applicable contractual protections.

11. Minors

Uspin is strictly intended for individuals aged 18 years or older. We do not knowingly collect, process, or store personal data relating to minors. During the registration process, every user must confirm their date of birth, and we conduct verification checks to enforce this requirement.

If we become aware that personal data of a person under 18 has been collected without appropriate parental consent, we will delete that data immediately and close the associated account without further notice. If you are a parent or guardian and believe your child has registered on our platform, please contact us without delay at privacy@uspin.fyi so that we may take immediate corrective action. For further information on our age-restriction tools and parental controls, please visit our Responsible Gaming page.

12. Changes to This Policy

We review this Privacy Policy periodically to ensure it remains accurate, complete, and compliant with applicable laws and industry best practices. When we make material changes — for example, when we introduce a new processing activity, change data retention periods, or add new third-party partners — we will notify you through one or more of the following channels:

• A prominent notice displayed on uspin.fyi for a minimum of 30 days following the change
• A direct email notification to the address associated with your registered account
• An in-platform notification at next login

The Last Updated date at the top of this document will always reflect the date of the most recent revision. We recommend revisiting this page periodically. Your continued use of Uspin after any change takes effect constitutes acceptance of the revised Policy. Where changes require fresh consent, we will seek that consent separately before continuing processing.

13. Contact Information

We welcome any questions, concerns, or requests relating to this Privacy Policy or to the personal data we hold about you. You may reach our teams using the contact details below.

13.1. General & Support Enquiries

For account-related questions, technical assistance, or general support enquiries, please contact our support team:

• Email: support@uspin.fyi
• Response time: We aim to respond to all support enquiries within 24–48 hours on business days.

13.2. Privacy & Data Protection Enquiries

For requests related to your data subject rights, privacy concerns, or data protection questions, please contact our Privacy team directly:

• Email: privacy@uspin.fyi
• Response time: Privacy requests are acknowledged within 72 hours and resolved within 30 calendar days where possible.

13.3. Responsible Gaming Support

If you are concerned about your own or someone else's gambling behaviour and require confidential support, the following organisations offer free assistance to users in India:

• Tele MANAS (National Mental Health Helpline) — Phone: 14416 | Website: telemanas.mohfw.gov.in
• iCall Psychosocial Helpline — Phone: 915 298 7821 | Website: icallhelpline.org
• Jeevan Aastha Helpline — Phone: 1800 233 3330 | Website: jeevanaastha.com
• Snehi Helpline — Phone: +91 95822 08181 | Website: snehi.org.in
• Voice That Cares (VTC) — Phone: 8448 8448 45 | Website: rocf.org/voice-that-cares
• Gamblers Anonymous India — Free peer-support meetings in multiple Indian cities and online; search "Gamblers Anonymous India" for current schedules.

For more details on the tools we provide to support responsible play, please refer to our Responsible Gaming page.