Blaze Spins Now Asks Before Naming a Big Winner and Names Its Data Controller in the Marshall Islands

Blaze Spins replaced the eight-clause privacy policy captured on 29 August 2026 with an eleven-section notice, now published at www.blazespins.com/privacy. The clause that made a notable win consent to publicity is gone and the new one asks first. The notice also names the company that holds the data and sets out how verification, retention and data requests work.

• Winner publicity now needs permission. The August policy said a player who won a significant prize deemed notable by Blaze Spins consented to reasonable publicity, and that Blaze Spins reserved the right to publish their first name and surname initial. Section 10 now reads: "We will ask for permission before publishing identifiable information about a major win, including a first name, surname initial, country or prize amount that can identify you." It adds: "Declining promotional publicity does not affect an otherwise valid payout." A player can now refuse, and refusing costs nothing.
• A named data controller. The August policy named no company. Section 1 now states: "The data controller is One Touch Exch Co. Ltd, registration number 129024, registered at Trust Company Complex, Ajeltake Road, Marshall Islands MH96960, which operates Blaze Spins." Requests go to support@blazespins.info. A player now knows which company a data request is addressed to.
• Sumsub checks during withdrawals, with a manual review. Section 4 names Sumsub for document checks, selfies and liveness checks: "When verification is required during a withdrawal request, we transfer relevant account details to Sumsub as the verification process starts." The checks may involve automated analysis of identity documents and facial information. "If verification fails or you believe the result is incorrect, contact support@blazespins.info to request a manual review and submit an explanation or supporting information." The automated result is not the last word.
• Registration is no longer blanket consent. The August policy opened with "By registering and using Blaze Spins, you consent to the collection and use of your personal data as necessary to provide access to our services and ensure smooth operation of the platform." Section 1 now says acknowledging the notice is not blanket consent to every use of a player's information, section 3 sets a processing ground against each purpose, and states: "We do not treat ordinary account registration as explicit biometric consent." Each use of the data now has to answer to its own line in the table.
• Rights, and a regulator to complain to. Section 9 lists access, correction, deletion, restriction, portability, objection and withdrawal of consent, depending on applicable law, with requests sent to support. Players may also complain to the competent data-protection authority where that right applies, and the policy states that contacting the casino first does not remove that right. The August policy listed access and deletion but gave no address to send a request to.
• Retention without a number. Section 6 states: "Personal data is retained only for as long as necessary to fulfil contractual obligations, comply with legal and regulatory requirements, resolve disputes and enforce our Terms and Conditions." It adds: "Account closure or a deletion request does not automatically require immediate deletion of records that must lawfully be retained." No period in years is given for any record, and a player who wants one is told to contact support.

Almost every change runs the player's way. The clause that once turned a big win into an announcement by default now needs a yes, and the policy says for the first time which company answers for the data.