Piñata Casino licensing and account security

The company providing the service

Piñata’s terms identify PAF GAMES, S.A., with its registered office at C/ Alcalde Sánchez Prados nº 6, Entreplanta, local 1, 51001 Ceuta. This distinguishes the consumer brand, responsible company and wider group.

The register includes paf.es, pinatacasino.es, goldenbull.es and speedybet.es. The official domain associated with Piñata is pinatacasino.es. casino-pinata.com publishes information about the product and does not hold its licences, safeguard player funds or administer gambling accounts.

The group’s activity in Spain’s regulated market dates back to 2012. Licence transfers explain why older documents name different group companies. To resolve conflicting company names, use the current holder in the DGOJ record for PAF GAMES, rather than an older review.

General licences and casino activities

The record lists the March 2026 transfer and roulette and blackjack renewals dated 7 October 2026. Historical licence numbers may remain unchanged after the holder changes, so their age alone does not establish a discrepancy.

A betting authorisation held by the company does not prove that each brand offers a sportsbook. Likewise, video poker is not a player-versus-player poker room. The regulated activity and the product displayed in the catalogue must be considered separately.

Why identity verification matters

Identification links an account to an adult individual and supports access and payment controls. Official help accepts a Spanish DNI or passport, TIE, or a green NIE certificate accompanied by a valid passport. Documents must belong to the account holder and remain sufficiently legible for review.

Deposits above €150 and any withdrawal require identity verification. That threshold does not mean an unverified account has unrestricted access to every feature. A withdrawal may also require checks of email, payment ownership or financial information.

An existing verified account with another group brand may avoid repeating the same identification process. It does not permit someone else’s documents or additional accounts. The registration guide explains the importance of keeping your name, address and document details consistent.

Protect sign-in and payment access

Use a unique password and bookmark the official sign-in page. Check the domain before entering information, particularly after following an advertisement, private message or sponsored search result. An HTTPS padlock protects the connection but does not by itself identify who controls a page.

Reasons to stop a transaction

• A supposed agent asks for your password or banking authorisation code.
• You are asked to send a document to a personal account outside the official channel.
• A link changes to a domain unrelated to the expected service.
• Someone promises to bypass verification or recover losses for a fee.

If you suspect misuse, secure the associated email, change credentials through the official route and contact support. The DGOJ also explains its identity impersonation alert service.

If a phone is lost or passed to someone else, close active sessions and review the linked recovery methods. Biometrics can make access easier, but email and device security still matter. Keep payment records somewhere private and share only the parts required to investigate a transaction. A support case should identify the disputed operation without exposing unrelated banking activity or another person’s details.

Limits, RTP and the scope of protection

Piñata applies annual loss limits by age: €1,800 for ages 18–19, €6,000 for ages 20–24 and €15,000 from age 25. They use calendar-year deposits minus withdrawals and are shared across the listed group brands. They are protective ceilings, not recommended budgets.

Published return-to-player data helps distinguish theoretical RTP from aggregate outcomes over a period. A month above 100% does not mean subsequent rounds will be favourable. A familiar developer also does not make a session an investment.

The practical security conclusion is specific: identify the authorised operator, verify your account, retain payment records and use gambling controls. Licensing establishes supervision and obligations; it is not an individual guarantee of profit and does not eliminate disputes that require a formal complaint.