spinph78 Privacy Policy

This Privacy Policy ("Policy") describes how spinph78 ("spinph78," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you," "Player," or "User") who access or use the spinph78 online gaming platform at spinph78.net, including all associated games, account services, payment features, customer support channels, and promotional programs.

This Policy applies to all personal data collected from Filipino players and other users of the spinph78 platform, regardless of whether they are registered account holders or visitors browsing the platform without an account. It applies to data collected through the spinph78 website, mobile browser interface, and any other digital channel operated by spinph78.

By registering an account on spinph78 or by continuing to use the platform after this Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of the Data Privacy Act of 2012, spinph78 is the personal information controller responsible for the personal data collected through the spinph78 platform. spinph78 determines the purposes and means of processing personal data in connection with the operation of the platform and its services.

spinph78 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA and this Privacy Policy. The DPO can be contacted through the support channels described in Section 13 of this Policy.

Where spinph78 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and cloud infrastructure providers — those parties act as personal information processors under the DPA and are bound by data processing agreements that require them to process personal data only on spinph78's documented instructions and in compliance with applicable Philippine data protection law.

spinph78 collects the following categories of personal data:

spinph78 does not intentionally collect sensitive personal information as defined under the DPA — such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — except where a government-issued ID submitted during KYC incidentally contains such information. In those cases, the data is used solely for identity verification purposes and is not processed for any other purpose.

spinph78 processes your personal data for the following purposes and on the following legal bases under the Data Privacy Act of 2012:

• Account Registration and Management: To create and maintain your spinph78 account, verify your identity, and provide access to the platform's games and services. Legal basis: performance of a contract.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and InstaPay, and to maintain accurate financial records. Legal basis: performance of a contract and compliance with legal obligations.
• KYC and Age Verification: To verify that you meet the 21+ age requirement and to comply with anti-money laundering (AML) obligations under Philippine law. Legal basis: compliance with legal obligations.
• Regulatory Compliance: To fulfill spinph78's obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws. Legal basis: compliance with legal obligations.
• Responsible Gaming: To monitor gaming activity, apply responsible gaming tools such as deposit limits and self-exclusion, and identify players who may be experiencing gambling-related harm. Legal basis: legitimate interests and compliance with legal obligations.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance. Legal basis: performance of a contract and legitimate interests.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct. Legal basis: legitimate interests and compliance with legal obligations.
• Service Improvement: To analyze platform usage patterns, improve game offerings, and enhance the overall user experience on spinph78. Legal basis: legitimate interests.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent. You may withdraw consent at any time by updating your communication preferences in your account settings. Legal basis: consent.

spinph78 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Personal data may be shared with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and InstaPay receive the financial data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are subject to Bangko Sentral ng Pilipinas (BSP) regulations.
• KYC and Identity Verification Providers: Third-party KYC service providers receive identity documents and verification data to perform identity checks on spinph78's behalf. These providers are bound by data processing agreements and are prohibited from using your data for any purpose other than identity verification for spinph78.
• Cloud Infrastructure and Hosting Providers: spinph78 uses cloud infrastructure providers to host the platform and store data securely. These providers act as personal information processors and are contractually bound to process data only on spinph78's instructions.
• Regulatory Authorities: spinph78 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory bodies where required by law or in response to a lawful request.
• Law Enforcement: spinph78 may disclose personal data to Philippine law enforcement agencies where required by a court order, subpoena, or other lawful legal process, or where spinph78 has a good-faith belief that disclosure is necessary to prevent or investigate criminal activity.
• Game Providers: Game software providers may receive anonymized or aggregated gaming data for the purpose of game performance analysis and RNG certification. Individual player identity data is not shared with game providers.

In all cases where personal data is shared with third parties, spinph78 takes reasonable steps to ensure that those parties maintain appropriate technical and organizational security measures consistent with the requirements of the Data Privacy Act of 2012.

spinph78 retains personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, consistent with PAGCOR record-keeping requirements and AMLA obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and BSP regulations applicable to payment service providers.
• KYC Documents: Retained for the duration of your account and for five (5) years following account closure. Where an account is closed due to suspected AML activity, KYC documents may be retained for longer periods as required by law.
• Gaming History: Retained for a minimum of three (3) years from the date of each gaming session, for dispute resolution and regulatory audit purposes.
• Customer Support Records: Retained for two (2) years from the date of the last interaction, unless the matter relates to an ongoing dispute or regulatory investigation.
• Marketing Consent Records: Retained for the duration of your account and for one (1) year following withdrawal of consent, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. Where data cannot be immediately deleted due to technical constraints, it is isolated from active processing until deletion is completed.

spinph78 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the spinph78 platform is encrypted using TLS 1.2 or higher. This includes account login, payment transactions, and KYC document uploads.
• Encryption at Rest: Sensitive personal data, including KYC documents and financial records, is encrypted at rest using AES-256 encryption or equivalent standards.
• Access Controls: Access to personal data within spinph78's systems is restricted to authorized personnel on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication: spinph78 offers two-factor authentication (2FA) for player accounts to reduce the risk of unauthorized access. Players are strongly encouraged to enable 2FA in their account security settings.
• Penetration Testing and Security Audits: spinph78 conducts regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses in the platform.
• Incident Response: spinph78 maintains a documented data breach response procedure. In the event of a personal data breach, spinph78 will notify affected players and the National Privacy Commission within 72 hours of becoming aware of the breach, where required by the DPA.

spinph78 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyze how the platform is used. The following categories of cookies are used on spinph78:

• Strictly Necessary Cookies: These cookies are essential for the spinph78 platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, display settings, and responsible gaming configurations. Disabling these cookies may affect your experience on spinph78.
• Analytics Cookies: spinph78 uses analytics tools to understand how players interact with the platform, which pages are most visited, and where technical issues occur. Analytics data is aggregated and does not identify individual players. You may opt out of analytics cookies through your browser settings.
• Security Cookies: These cookies help spinph78 detect and prevent fraudulent activity, unauthorized account access, and bot activity on the platform.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in to your spinph78 account. spinph78 does not use third-party advertising cookies or cross-site tracking technologies.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by spinph78:

To exercise any of these rights, contact the spinph78 Data Protection Officer through the support channels described in Section 13. spinph78 will respond to all verified data subject requests within 15 business days of receipt. In complex cases, this period may be extended by a further 15 business days, with notice provided to you.

spinph78 may need to verify your identity before processing a data subject request to ensure that personal data is not disclosed to unauthorized parties. Identity verification for data subject requests does not require you to submit new KYC documents if your account is already verified.

spinph78 does not knowingly collect personal data from individuals under the age of 21. The spinph78 platform is strictly intended for adults aged 21 years and above, consistent with the minimum age requirement for casino-style gambling under Philippine law and PAGCOR regulations.

Age verification is a mandatory component of the KYC process on spinph78. All players are required to submit a valid government-issued Philippine ID confirming their date of birth before withdrawal privileges are activated. Where spinph78 discovers that an account has been registered by a person under 21 years of age, the account will be immediately closed, all personal data associated with the account will be deleted, and any deposits will be returned to the verified payment source.

If you are a parent or guardian and believe that a minor has registered an account on spinph78 using false age information, please contact our support team immediately. spinph78 will investigate and take appropriate action, including account closure and data deletion, as quickly as possible.

In the course of operating the spinph78 platform, personal data may be transferred to and processed in countries outside the Republic of the Philippines, including countries where cloud infrastructure or third-party service providers are located. Where such transfers occur, spinph78 ensures that appropriate safeguards are in place to protect your personal data in accordance with the requirements of the Data Privacy Act of 2012.

Safeguards for cross-border data transfers may include contractual clauses that impose data protection obligations on the recipient consistent with the DPA, or transfers to countries that the National Privacy Commission has determined provide an adequate level of data protection.

spinph78 does not transfer personal data to jurisdictions that do not provide adequate data protection safeguards without implementing appropriate contractual or technical measures to protect that data.

spinph78 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. Material changes to this Policy — meaning changes that significantly affect your rights as a data subject or the way spinph78 processes your personal data — will be communicated to registered players via the email address associated with their account at least 7 days before the changes take effect.

Non-material changes, such as typographical corrections or clarifications that do not alter the substance of the Policy, may take effect immediately upon publication. The "Last Updated" date at the top of this Policy will be revised whenever changes are made.

Your continued use of the spinph78 platform following the effective date of any amendment to this Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not agree to the amended Policy, you should stop using spinph78 and request account closure before the effective date of the changes.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how spinph78 has handled your personal data, please contact the spinph78 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly on the spinph78 platform. This is the fastest way to reach our support team for urgent data-related concerns.
• Email: [email protected] — Please include "Data Privacy Request" in the subject line and provide your registered account email address and a description of your request. Do not include sensitive personal data such as passwords or full payment account numbers in your email.

spinph78 will acknowledge receipt of your request within 3 business days and will provide a substantive response within 15 business days. For complex requests, the response period may be extended by a further 15 business days with prior notice.

If you are not satisfied with spinph78's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent supervisory authority responsible for enforcing the Data Privacy Act of 2012 and can be reached through its official government channels.