Data Protection
spinplay is committed to protecting your personal data with the same care we apply to protecting your account balance. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, who we share it with, and what rights you hold as a spinplay player under Philippine data privacy law.
Request a copy of all data spinplay holds on you
Correct inaccurate or incomplete personal data
Request deletion of data where legally permissible
Object to direct marketing and certain processing
This Privacy Policy applies to all personal data collected by spinplay Casino ("spinplay," "we," "us," or "our") through the spinplay website, mobile platform, and all associated services (the "Platform"). spinplay processes personal data in compliance with Republic Act No. 10173 — the Data Privacy Act of 2012 (DPA) — and its implementing rules, as well as PAGCOR's data governance requirements for online gaming operators in the Philippines. By creating an account and using the spinplay Platform, you acknowledge that you have read and understood this Privacy Policy.
spinplay Casino is the Data Controller for all personal data processed through the spinplay Platform, as defined under Republic Act No. 10173 (the Data Privacy Act of 2012). As Data Controller, spinplay determines the purposes and means by which your personal data is processed and bears the obligations set out in the DPA with respect to that data.
spinplay operates as an online gaming platform under the PAGCOR regulatory framework applicable to online gaming in the Philippines. In this capacity, spinplay is subject to data processing obligations arising from both the DPA and PAGCOR's specific data governance requirements for licensed online gaming operators.
For all data privacy inquiries, subject access requests, and complaints relating to spinplay's processing of your personal data, contact spinplay's Data Protection Officer (DPO) at: [email protected]. Please include "Data Privacy Request" in your message subject for prompt routing.
spinplay collects personal data from you through several channels — directly from you during registration and account use, automatically through your use of the Platform, and from third parties where necessary for identity verification and payment processing. The categories of personal data spinplay collects are as follows:
| Data Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, gender, government-issued ID number | Provided by you during registration and KYC |
| Contact Data | Mobile number, email address | Provided by you during registration |
| Financial Data | GCash wallet reference, bank account details, transaction history, deposit and withdrawal records | Provided by you and generated through Platform use |
| KYC Documentation | Scanned or photographed government-issued ID, proof of address documents | Provided by you during verification |
| Technical Data | IP address, device ID, browser type and version, operating system, session timestamps | Automatically collected during Platform use |
| Usage Data | Games played, wagering history, session duration, bonus usage, login history | Automatically generated through Platform use |
| Communications Data | Live chat transcripts, support ticket content, email correspondence | Generated through your communications with spinplay |
| Marketing Preferences | Opt-in/opt-out status for promotional communications | Provided by you and inferred from Platform behavior |
spinplay does not collect sensitive personal information as defined under the DPA (including racial or ethnic origin, political opinions, religious or philosophical beliefs, or health data) unless specifically required by law or regulatory directive and only with appropriate safeguards in place.
spinplay uses the personal data described in Section 2 for the following specific purposes:
Under the Data Privacy Act of 2012, spinplay processes your personal data on the following legal bases:
The spinplay Platform uses cookies and similar tracking technologies to operate the Platform, maintain your session, and improve your experience. Cookies are small text files stored on your device when you access the spinplay website.
spinplay uses the following categories of cookies:
You can manage cookie preferences through your browser settings. Disabling all cookies beyond strictly necessary ones will not prevent you from using the spinplay Platform, but may affect certain features such as remembered preferences and session persistence across device restarts.
spinplay does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following circumstances and only to the extent necessary for the stated purpose:
All third parties with whom spinplay shares personal data are required to handle that data in compliance with the Data Privacy Act of 2012 and spinplay's data protection standards. spinplay does not transfer personal data to international recipients other than as described in Section 11.
spinplay retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by applicable law and PAGCOR regulations:
At the expiry of the applicable retention period, spinplay will securely delete or anonymise personal data in accordance with its data disposal procedures. Anonymised or aggregated data that no longer identifies any individual is not subject to retention limits and may be retained for analytical purposes indefinitely.
spinplay implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
Notwithstanding the above, no electronic transmission or storage system is guaranteed to be 100% secure. You share responsibility for the security of your spinplay account by maintaining a strong, unique password and enabling two-factor authentication. spinplay will never ask for your password through any communication channel.
Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by spinplay:
To exercise any of the above rights, contact spinplay's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." spinplay will acknowledge your request within five (5) business days and will respond substantively within thirty (30) calendar days, or within such other period as the DPA prescribes.
Note that certain rights — particularly the right to erasure — may be limited by spinplay's legal obligations to retain records under PAGCOR regulations and Philippine anti-money laundering law. Where spinplay is unable to fulfil a request in full due to a legal obligation, we will explain the specific legal basis for the limitation.
The spinplay Platform is not intended for individuals under twenty-one (21) years of age. This restriction reflects the minimum age requirement for participation in online casino gaming under PAGCOR regulations and Philippine law. spinplay does not knowingly collect personal data from individuals under the age of twenty-one.
spinplay employs date-of-birth verification at registration and KYC identity document verification before any withdrawal is processed. Any account found to have been registered by an individual under the age of twenty-one will be immediately and permanently closed, and all data associated with such account will be deleted, except where retention is required by law.
If spinplay becomes aware that it has inadvertently collected personal data from a person under twenty-one years of age, it will take immediate steps to delete that data and to report the incident to PAGCOR and, where appropriate, to relevant Philippine law enforcement authorities. If you believe that spinplay may have collected data from a person under the age of twenty-one, please notify our DPO immediately.
spinplay's primary data processing infrastructure is located within the Philippines. However, certain service providers — including game studio providers and cloud infrastructure partners — may process personal data in jurisdictions outside the Philippines as part of their global service delivery.
Where spinplay transfers personal data to recipients outside the Philippines, we ensure that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012, including:
You may request further information about international data transfers and the specific safeguards in place by contacting spinplay's Data Protection Officer.
spinplay may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or changes to our Platform services. When we make material changes to this Policy, we will notify you by:
Your continued use of the spinplay Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to the updated Policy, you should cease using spinplay and close your account before the updated Policy takes effect.
The current version of this Privacy Policy is always available on this page. Prior versions are available upon request from our Data Protection Officer.
For all data privacy queries, subject access requests, consent withdrawals, and data erasure requests, please contact spinplay's Data Protection Officer using the contact details below. Please use the subject line "Data Privacy Request" and include your registered mobile number or email address to allow us to locate your account record.
Data Protection Officer, spinplay Casino
Email: [email protected]
Subject Line: Data Privacy Request
Response Time: 5 business days (acknowledgement) / 30 calendar days (substantive response)
If you are not satisfied with spinplay's response to a data privacy request or complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority for data privacy matters in the Philippines.
For questions that do not relate to data privacy — including account issues, payment queries, or game disputes — please use the 24/7 live chat function available on the spinplay Platform for the fastest response from our Filipino support team.
These six points summarise spinplay's most important privacy commitments. They do not replace the full legal text above — please read the complete Policy before using the Platform.
All data transmitted between your device and the spinplay Platform is protected by 256-bit SSL encryption — the same standard used by BSP-regulated Philippine banks. Your login credentials, financial data, and personal information are never transmitted in plain text across any spinplay connection.
spinplay does not sell, rent, or trade your personal data to any third party for their marketing purposes. Your data is shared only with the payment processors, game providers, and regulatory authorities necessary to operate the Platform — and only to the extent required for those specific purposes.
spinplay processes personal data in full compliance with Republic Act No. 10173 — the Data Privacy Act of 2012. This includes maintaining a registered Data Protection Officer, conducting data protection impact assessments for high-risk processing, and maintaining a formal incident response plan for data breaches.
Under the DPA, your right to access, rectify, erase, port, and object to your personal data are real, enforceable rights — not aspirational commitments. spinplay's DPO is required to respond to subject access requests within 30 calendar days. If spinplay falls short, you have a direct escalation path to the National Privacy Commission.
spinplay will only send you promotional emails, SMS notifications, and in-app marketing messages if you have explicitly opted in to receive them. Withdrawing marketing consent is a single click in your spinplay account settings. We will never rely on pre-ticked boxes or ambiguous opt-out language to market to you.
spinplay retains your data only as long as legally required and operationally necessary. Most player data is retained for 5 years post-account closure in compliance with PAGCOR and AMLA requirements. Marketing data is deleted immediately upon consent withdrawal. At the end of each retention period, data is securely deleted or anonymised.
spinplay's privacy commitments aren't just policy language — they're backed by the Data Privacy Act of 2012 and PAGCOR's regulatory oversight. Your data stays yours. Join over 500,000 Filipino players who trust spinplay with their gaming and their information.