Privacy Policy

playspin ("playspin," "we," "us," or "our") operates the online gaming platform accessible at playspin.app. We understand that when Filipino players register with playspin, they entrust us with personal information — and we take that responsibility seriously.

This Privacy Policy ("Policy") describes how playspin collects, processes, stores, shares, and protects the personal data of users ("you," "your," or "Player") who access or use the playspin platform. It applies to all personal data collected through the playspin website, mobile web interface, customer support channels, and any other touchpoints through which you interact with playspin.

This Policy is issued in accordance with and gives effect to your rights under Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and applicable issuances of the National Privacy Commission ("NPC") of the Philippines.

By creating a playspin account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform.

For the purposes of the Data Privacy Act of 2012 and this Policy, the Data Controller responsible for your personal data is:

• Entity: playspin
• Platform URL: playspin.app
• Data Protection Officer (DPO) Contact: [email protected]
• Applicable Law: Republic Act No. 10173 (Data Privacy Act of 2012), Philippines

The Data Protection Officer is responsible for overseeing playspin's compliance with the DPA and for handling data subject rights requests and privacy-related enquiries. All such requests should be directed to the DPO contact above.

playspin collects personal data in the following categories, depending on your level of interaction with the Platform:

3.1 Registration Data

When you create a playspin account, we collect the information you provide, which includes: full legal name, date of birth, Philippine mobile number, email address, and a username and password of your choosing.

3.2 Identity Verification (KYC) Data

To comply with AML obligations and to verify your age, we collect copies of Philippine government-issued identification documents (e.g., PhilSys ID, UMID, passport, LTO driver's license), selfie photographs, and proof of address documentation such as utility bills or bank statements.

3.3 Financial Data

We collect transaction data necessary to process deposits and withdrawals, including the payment method used (e.g., GCash account number, Maya account reference, bank account details), transaction amounts, and transaction timestamps. We do not store raw credit or debit card numbers — card payment processing is handled by PCI-DSS compliant third-party processors.

3.4 Gaming Activity Data

We collect records of your gaming activity on the Platform, including games played, wager amounts, game outcomes, session duration, and bonus claims. This data is used for account management, responsible gaming monitoring, and dispute resolution.

3.5 Technical & Device Data

We automatically collect technical data when you access the Platform, including your IP address, device type and model, operating system, browser type and version, and referring URL.

3.6 Communications Data

When you contact playspin customer support — by live chat, email, or any other channel — we retain records of those communications, including the content of messages, timestamps, and resolution outcomes.

3.7 Preference & Behavioural Data

We collect data about how you use the Platform, including pages visited, features used, game categories browsed, and preferences you set in your account, in order to personalise your experience and improve the Platform.

playspin uses your personal data for the following specific purposes:

• Account creation and management: To register your Account, authenticate your identity at login, and manage your ongoing relationship with the playspin Platform.
• Age and identity verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity in compliance with KYC obligations.
• Payment processing: To process deposits and withdrawals to and from your playspin wallet using your preferred Philippine payment method (GCash, Maya, bank transfer).
• Regulatory compliance: To fulfil playspin's obligations under applicable Philippine AML regulations, gaming regulations, and tax reporting requirements, including the identification and reporting of suspicious transactions.
• Responsible gaming: To monitor your gaming activity and apply responsible gaming controls, including deposit limits, session reminders, cooling-off periods, and self-exclusion, where requested or required.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and maintain records of communications for quality assurance and dispute resolution purposes.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, and other prohibited conduct.
• Service improvement: To analyse aggregated usage data in order to improve the Platform's functionality, game library, and user experience for Filipino players.
• Personalisation: To tailor the content, promotions, and game recommendations displayed to you based on your gaming preferences and activity history.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS — subject to your marketing consent preferences, which you may withdraw at any time.

Under the Data Privacy Act of 2012, playspin processes your personal data on the following lawful bases:

• Contractual necessity: Processing required to perform the contract between you and playspin — including account management, payment processing, and game service delivery — is necessary for the execution of your agreement with us.
• Legal obligation: Certain processing is required to comply with playspin's obligations under Philippine law, including AML compliance, KYC verification, and regulatory reporting.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement where these purposes do not override your rights and interests as a data subject.
• Consent: Marketing communications and non-essential cookie placement are conducted on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time.

playspin retains your personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following indicative retention periods apply:

After the applicable retention period, personal data is securely deleted or anonymised in accordance with playspin's data destruction procedures. Where anonymisation is applied, the resulting data is no longer considered personal data under the DPA and may be retained indefinitely for analytics purposes.

playspin does not sell or rent your personal data. We share your data only in the following limited circumstances:

• Payment processors: Your payment information is shared with PCI-DSS compliant payment processing partners (including GCash/GXI, Maya, and banking partners) solely to execute your deposit and withdrawal transactions.
• Game providers: Certain game providers that supply live dealer games or third-party slots may receive limited account-level identifiers (such as an anonymised session token) necessary to deliver their services. These providers are bound by contractual data processing obligations.
• KYC and identity verification services: We use licensed third-party identity verification providers to assist with KYC processing. These providers process your documents under strict confidentiality and security obligations.
• Regulatory and law enforcement authorities: playspin may be required by law to disclose personal data to the Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission, or other competent Philippine authorities upon lawful request or as required by applicable law.
• Professional advisors: playspin's legal, financial, and compliance advisors may access personal data on a need-to-know basis, under strict confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of playspin's assets, personal data held by playspin may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Affected users will be notified as required by the DPA.

Where personal data is transferred outside of the Philippines — for example, to cloud infrastructure providers or international game providers with servers located in other jurisdictions — playspin ensures that such transfers are conducted in compliance with Section 21 of the Data Privacy Act of 2012 and applicable NPC rules.

Specifically, playspin ensures that international data transfers are protected by one or more of the following safeguards:

• Contractual clauses requiring the recipient to maintain standards of data protection equivalent to those required under Philippine law.
• The recipient country has been recognised as providing an adequate level of data protection by the National Privacy Commission.
• The data subject has given explicit consent to the transfer after being informed of the risks.

For information about the specific safeguards applied to international transfers of your data, please contact our Data Protection Officer at [email protected].

playspin uses cookies and similar technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. playspin uses the following categories of cookies:

You may manage your cookie preferences at any time by adjusting your browser settings to block or delete cookies. Note that disabling strictly necessary cookies will impair your ability to use the Platform. playspin does not share analytics or marketing cookie data with external advertising networks.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by playspin. You may exercise these rights at any time by contacting our Data Protection Officer:

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to verified requests within thirty (30) calendar days. Identity verification may be required before processing certain requests.

The playspin Platform is intended exclusively for persons who are at least 21 years of age, in accordance with Philippine gaming regulations. playspin does not knowingly collect personal data from individuals under 21 years of age.

If playspin becomes aware that personal data has been collected from a person below the minimum age, the Account will be immediately closed, all associated data will be deleted (subject to any mandatory regulatory retention obligations), and any deposited funds will be returned to the payment source used.

If you believe that a person under 21 has registered on the playspin Platform, please notify us immediately at [email protected] so that we can take appropriate action.

playspin implements a range of technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport encryption: All data transmitted between your device and the playspin Platform is encrypted using TLS 1.2 or higher (256-bit SSL).
• Password hashing: Account passwords are stored using industry-standard one-way cryptographic hashing algorithms. playspin staff cannot view your password in plain text.
• Access controls: Access to personal data within playspin's systems is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls enforced.
• Two-factor authentication: Players may enable 2FA on their accounts, adding an additional layer of protection against unauthorised access.
• Penetration testing and security audits: playspin conducts regular security assessments to identify and remediate potential vulnerabilities.
• PCI-DSS compliance for payments: Card payment processing is handled exclusively by PCI-DSS Level 1 compliant payment processors. playspin does not store raw payment card data on its servers.

Despite these measures, no internet transmission or electronic storage system is completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, playspin will notify the National Privacy Commission and affected data subjects in accordance with the requirements of the Data Privacy Act of 2012.

The playspin Platform may contain links to third-party websites or services (for example, payment provider portals or game provider sites accessed through the live casino lobby). This Privacy Policy applies only to the playspin Platform.

playspin has no control over the privacy practices of third-party websites and accepts no responsibility or liability for the collection, use, or disclosure of personal data by those third parties. You should review the privacy policy of any third-party website before providing personal data on it.

playspin reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance from the National Privacy Commission, or changes to our data processing practices. When material changes are made, playspin will:

• Update the "Last Updated" date at the top of this Policy.
• Post a notice on the Platform informing users of the change.
• Where required by the DPA, seek fresh consent from data subjects before processing their data in a new manner.

Your continued use of the playspin Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We recommend reviewing this Policy periodically to stay informed about how we protect your personal data.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how playspin has handled your personal data, please contact our Data Protection Officer:

• Email: [email protected] (subject line: "Privacy / Data Request")
• Response Time: We will acknowledge your request within five (5) Philippine business days and endeavour to resolve it within thirty (30) calendar days.

If you are not satisfied with playspin's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information on how to file a complaint is available on the NPC's official website.