Privacy Policy – Spin Play Philippines Betting Platform

Spin Play is an online betting and gaming platform serving registered players in the Philippines. For the purposes of this Privacy Policy, "Spin Play," "we," "us," and "our" refer to the operator of the platform at spinplay.biz. As the entity collecting and processing your personal data, Spin Play acts as the data controller responsible for the security and appropriate use of your information.

This Policy applies to all personal data collected through the Spin Play platform — including the website at spinplay.biz, the mobile-optimized web app, any communication you have with our support team, and all services offered on the platform including sports betting, esports betting, jackpot slots, poker, and Color Game.

This Policy does not apply to third-party services or websites that may be linked from our platform. We encourage you to read the privacy policies of any third-party service you use independently of Spin Play.

Spin Play collects only the personal data we genuinely need to provide our services, verify your identity, process payments, comply with applicable Philippine regulations, and keep the platform secure. Here is a breakdown of the categories of data we collect and why:

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data except where specifically required for responsible gaming purposes (for example, if a player voluntarily discloses a gambling problem when requesting self-exclusion). Such disclosures are treated with the highest level of confidentiality.

Spin Play uses the personal data it collects for specific, legitimate purposes. We do not use your data for anything that is not listed here. The main purposes for which Spin Play processes your personal data are:

• Account creation and management: To register your account, verify your identity, maintain your profile settings, and manage your VIP Club tier and associated benefits.
• Service delivery: To provide access to all betting and gaming services on the Spin Play platform, settle your bets, credit winnings, process cashback, and operate the games you play.
• Payment processing: To process deposits from GCash, Maya, Philippine bank transfers, and card payments, and to send withdrawal payouts to your verified payment method.
• Regulatory compliance and anti-money laundering (AML): To meet our Know Your Customer (KYC) obligations, conduct transaction monitoring, and comply with reporting requirements under applicable Philippine law. This is a legal obligation we cannot waive.
• Responsible gaming: To monitor gaming activity for signs of problem gambling, apply any self-imposed limits you have set, and provide appropriate interventions or referrals where necessary.
• Security and fraud prevention: To detect and investigate suspicious activity, prevent unauthorized account access, and protect the integrity of the Spin Play platform and its players.
• Customer support: To respond to your inquiries, process complaints, and resolve disputes about bets, payments, or account activity.
• Platform improvement: To analyze how players use Spin Play so we can improve the interface, fix issues, add game titles, and make the experience better for all Filipino players.
• Marketing communications (consent-based only): To send you promotional offers, bonus notifications, and platform updates — but only if you have opted in to receive them. You can opt out at any time through your account settings or by contacting support.

Under the Philippine Data Privacy Act of 2012, Spin Play must have a lawful basis for every type of personal data processing it carries out. The legal bases we rely on are:

• Contractual necessity: Most of our core data processing — account management, payment processing, bet settlement, game access — is necessary to perform the contract you entered into with Spin Play when you registered. Without this data, we cannot provide the service.
• Legal obligation: KYC verification, AML transaction monitoring, age verification, and record retention for audit purposes are required by Philippine law. We cannot opt out of these processing activities, and neither can you as a player on a licensed platform.
• Legitimate interests: Security monitoring, fraud detection, and platform analytics are carried out on the basis of Spin Play's legitimate interest in maintaining a safe, fair, and well-functioning platform. We balance this interest against your privacy rights and apply appropriate safeguards.
• Consent: Marketing emails, promotional SMS messages, and non-essential cookies are processed only on the basis of your explicit consent. You may withdraw consent at any time without affecting your ability to use the platform.

Spin Play does not sell your personal data. We do not share your data with advertisers, data brokers, or commercial third parties for their own purposes. Your information may however be shared with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: GCash (G-Xchange Inc.), Maya (Voyager Innovations), Philippine banks, and card payment networks receive the specific payment data needed to process your transactions. These providers operate under their own privacy policies and applicable Philippine financial regulations.
• Identity verification providers: Third-party KYC service providers who assist with document verification and identity checks. These providers receive only the data necessary for the specific verification task and are bound by confidentiality agreements.
• Game content providers: Some games on the Spin Play platform are provided by third-party software developers. These providers may receive anonymized session data for the purpose of game operation and technical support. They do not receive your identity or payment data.
• Regulatory and law enforcement authorities: Spin Play is legally required to disclose information to the Philippine Amusement and Gaming Corporation (PAGCOR), the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and law enforcement agencies where required by court order or applicable law.
• IT infrastructure providers: Cloud hosting, database management, and security service providers who process data on our behalf as data processors under strict contractual data protection obligations.
• Responsible gaming partners: Where a player requests referral to an external responsible gaming support service, limited contact information may be shared with the relevant support organization with the player's explicit consent.

All third parties with whom Spin Play shares personal data are required to handle it in accordance with the Philippine Data Privacy Act and any applicable international data protection standards. We do not authorize any third party to use your data for their own marketing or commercial purposes.

Spin Play retains personal data for as long as necessary to fulfill the purpose for which it was collected and to comply with applicable legal obligations. Our standard retention periods are:

• Active account data: Retained for the full duration of your active account relationship with Spin Play, plus a minimum of 5 years after account closure, as required by Philippine AML and gaming regulations.
• Transaction and betting records: Retained for a minimum of 5 years from the date of each transaction, in compliance with the Anti-Money Laundering Act and PAGCOR record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years after account closure or the last transaction date, whichever is later.
• Support communications: Retained for 3 years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Technical logs (IP, session data): Retained for 12 months for security analysis and fraud investigation purposes.
• Marketing preference records: Opt-in and opt-out records are retained indefinitely as evidence of consent management. The underlying marketing communications themselves are deleted 12 months after the relevant promotion ends.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymized. Anonymized aggregated data that cannot identify any individual may be retained indefinitely for platform analytics and improvement purposes.

Under the Philippine Data Privacy Act of 2012, every Spin Play player has the following rights regarding their personal data. These are real, legally protected rights — not just platform policies. To exercise any of these rights, contact our Data Privacy Officer at support@spinplay.biz with your account email address and the specific right you wish to exercise.

Spin Play will respond to all data subject requests within 30 calendar days. Where a request is complex or high volume, we may extend this by a further 30 days with written notice. We will not charge a fee for reasonable data subject requests. Requests that are manifestly unfounded or excessive may be declined, in which case we will provide a written explanation.

Spin Play uses cookies and similar tracking technologies to make the platform work properly, keep you logged in, remember your preferences, and understand how players interact with the platform so we can keep improving it. Here is a breakdown of the cookie types we use:

• Essential cookies: These are strictly necessary for the platform to function. They manage your login session, keep your bet slip active, maintain security tokens, and enable basic navigation. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your preferences — language settings, game lobby filters, notification preferences — so you don't have to reconfigure them every session. These are set with your implicit consent through your use of the platform.
• Analytics cookies: These collect anonymized data about how players navigate the Spin Play platform — which pages are visited most, where players encounter issues, how long sessions last. This data helps us improve the platform. Analytics cookies are only set if you have consented.
• Security cookies: Used for fraud detection and to protect against automated attacks, account takeovers, and suspicious login activity. These are essential cookies that cannot be disabled.

You can manage cookie preferences through your browser settings. Blocking essential cookies will prevent you from logging into Spin Play. Blocking analytics cookies will not affect your ability to use the platform. Most modern browsers — Chrome, Firefox, Safari, and the mobile browsers used by Filipino players on Android and iOS — provide accessible cookie management settings in their privacy menus.

Data security is not an afterthought at Spin Play — it is built into the platform architecture from the ground up. The technical and organizational measures we apply to protect your personal data include:

• 256-bit TLS/SSL encryption on all data transmitted between your device and Spin Play's servers. Every page, every bet, every payment transaction is encrypted in transit.
• Encryption at rest for all stored personal data, KYC documents, and payment records. Data is stored on encrypted servers with access restricted to authorized personnel only.
• Password hashing: Your Spin Play account password is never stored in readable form. It is hashed using a modern one-way cryptographic algorithm. Spin Play support staff cannot see your password.
• Payment tokenization: GCash, Maya, and card payment details are tokenized immediately upon receipt. The actual payment credentials are not stored on Spin Play servers after tokenization.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their Spin Play accounts. This provides an additional layer of protection against unauthorized login even if your password is compromised.
• Role-based access controls: Spin Play staff can only access the data they need for their specific job function. Customer support agents can see your account status and transaction history but not your full government ID documents, which are accessible only to the KYC compliance team.
• Regular security audits: Spin Play undergoes periodic security assessments by independent security professionals to identify and remediate vulnerabilities.

Despite these measures, no online platform can guarantee absolute security against all possible threats. We encourage players to use strong, unique passwords, enable 2FA, and contact support immediately if they suspect unauthorized access to their account.

Spin Play is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. Age verification is conducted as part of the KYC process for all accounts.

If we become aware that personal data has been collected from a minor — through a false age declaration during registration or any other means — we will immediately close the account, delete all associated personal data to the extent permitted by applicable law, and return any real-money balance held in the account through the payment method on record after appropriate verification.

If you are a parent or guardian and believe your child has created a Spin Play account, please contact us immediately at support@spinplay.biz. We will investigate and take appropriate action promptly.

Spin Play reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, applicable law, or guidance from the National Privacy Commission. When we make material changes, we will notify you via your registered email address and display a prominent notice on the Spin Play platform for at least 14 days before the updated Policy takes effect.

The "Last Updated" date at the top of this page tells you when the current version was published. We recommend bookmarking this page and checking it from time to time — especially if you receive a notification about an update. Your continued use of Spin Play after the effective date of any update constitutes acceptance of the revised Policy.

If you disagree with material changes to this Policy, you may close your account before the effective date. Your real-money balance will be returned in accordance with our standard withdrawal process.

If you have questions about this Privacy Policy, want to exercise any of your data subject rights, or have a concern about how Spin Play has handled your personal data, please contact our Data Privacy Officer. We are committed to responding promptly and transparently.

If you are not satisfied with Spin Play's response to a privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. The NPC oversees compliance with the Data Privacy Act and handles complaints from Philippine data subjects. Information on how to file a complaint with the NPC is publicly available on the NPC's official website.

For related platform policies, please also refer to our Terms and Conditions and our Responsible Gaming page. For common questions about your account and how the platform works, visit our FAQ.