spinplay is committed to protecting the privacy of every person who uses our platform. This Privacy Policy explains what personal data we collect, why we collect it, how it is used, and what rights you have under Philippine law. It applies to all services available through spinplay.bio.
Your personal data is handled in accordance with Republic Act 10173 — the Data Privacy Act of 2012 of the Philippines.
Six things spinplay commits to on how your data is handled.
spinplay does not sell, rent, or commercially trade your personal data to third-party marketers, advertisers, or data brokers — ever. Your information exists to operate your account, not to generate secondary revenue for spinplay.
All data transmitted between your browser or device and spinplay's servers is encrypted using TLS 1.3 — the same standard used by major Philippine banks including BPI, BDO, and Metrobank.
spinplay collects only what is necessary for lawful operation, regulatory compliance, and the delivery of services to you. We do not collect data speculatively or in anticipation of future undetermined uses.
spinplay is registered with the National Privacy Commission (NPC) of the Philippines as a personal information controller, consistent with the requirements of Republic Act 10173 and its implementing rules.
You have the right to access the personal data spinplay holds about you, request corrections, and under certain conditions request deletion. These rights are exercisable by contacting spinplay support.
In the event of a personal data breach that poses risk to your rights and freedoms, spinplay will notify affected individuals and the National Privacy Commission within the timeframes prescribed by Philippine law.
About this document. This Privacy Policy is issued by spinplay in compliance with Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and applicable issuances by the National Privacy Commission (NPC) of the Philippines. It describes the personal information management practices of spinplay as a Personal Information Controller (PIC).
1.1 spinplay operates the online gaming and casino platform accessible at spinplay.bio (the "Platform"). spinplay provides Filipino players with access to slot games, live dealer casino tables, bingo rooms, sports betting markets, and e-sabong, all within a PAGCOR-regulated environment.
1.2 For the purposes of Republic Act 10173, spinplay is the Personal Information Controller (PIC) in respect of the personal data described in this Policy. spinplay determines the purposes and means of processing your personal data and is responsible for its lawful and secure handling.
1.3 spinplay's Data Protection Officer (DPO) oversees compliance with this Policy and with applicable Philippine data privacy laws. Contact details for the DPO are provided in Section 14 of this document.
spinplay collects the following categories of personal data, depending on your interaction with the Platform:
spinplay does not store full payment card numbers. For bank transfer transactions, only the account name, last four digits (where provided by the bank), and transaction reference number are retained. Full account numbers are not stored on spinplay servers beyond the minimum period required for transaction reconciliation.
spinplay collects personal data through the following channels:
spinplay processes your personal data for the following specific, legitimate purposes, each grounded in a recognized legal basis under the Data Privacy Act of 2012:
| Purpose | Legal Basis |
|---|---|
| Account creation, login, and authentication | Performance of a contract (your Terms & Conditions agreement) |
| Identity and age verification (KYC) | Legal obligation (PAGCOR licensing requirements; RA 10173) |
| Processing deposits and withdrawals | Performance of a contract |
| Anti-money laundering (AML) monitoring and reporting | Legal obligation (Republic Act 9160 — AMLA, as amended) |
| Game delivery and session management | Performance of a contract |
| Customer support and dispute resolution | Performance of a contract; Legitimate interest |
| Fraud detection and security monitoring | Legitimate interest; Legal obligation |
| Responsible gaming monitoring and intervention | Legal obligation (PAGCOR responsible gaming standards) |
| Regulatory reporting to PAGCOR and AMLC | Legal obligation |
| Marketing and promotional communications | Consent (opt-in at registration or through account settings) |
| Platform analytics and improvement | Legitimate interest (aggregated, anonymized data) |
Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal. Withdrawal of marketing consent can be done through your spinplay account settings or by contacting support.
5.1 No Sale of Personal Data. spinplay does not sell, rent, barter, or otherwise commercially transfer your personal data to any third party for marketing or advertising purposes. This prohibition applies without exception.
spinplay shares personal data on a strictly need-to-know basis with the following categories of recipients, each bound by contractual data protection obligations:
spinplay may disclose personal data to the following Philippine regulatory and law enforcement authorities without your prior consent where legally required or directed:
Where spinplay is legally permitted to do so, we will notify you of such disclosures. Where law prohibits notification, spinplay will comply with the applicable legal restriction.
6.1 Certain service providers engaged by spinplay — including game studios, cloud infrastructure providers, and cybersecurity partners — may be located or operate servers outside the Philippines. Where personal data is transferred internationally in connection with these service relationships, spinplay ensures that appropriate data protection safeguards are in place, consistent with NPC requirements for cross-border data transfers.
6.2 Safeguards for international transfers include the use of standard contractual clauses, binding corporate rules, or transfers to jurisdictions recognized as providing adequate data protection. spinplay will not transfer personal data to a third country that does not provide an adequate level of protection without first implementing supplementary safeguards.
6.3 In all cases, international recipients of spinplay data are contractually prohibited from using the data for any purpose other than the specific service for which the transfer was made, and are required to maintain security standards at least equivalent to those applied by spinplay.
7.1 spinplay retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable Philippine law, whichever is longer. The following retention periods apply as general guidance:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | PAGCOR record-keeping; AMLA |
| KYC identity documents | Duration of account + 5 years post-closure | AMLA; PAGCOR |
| Financial transaction records | 5 years from transaction date | AMLA; Tax regulations |
| Gaming activity logs | 3 years from session date | PAGCOR; Dispute resolution |
| Customer support communications | 3 years from last interaction | Legitimate interest; Dispute evidence |
| Technical/device logs | 12 months rolling | Security monitoring |
| Marketing opt-in records | Until consent withdrawal + 3 years | Proof of consent |
7.2 At the expiry of applicable retention periods, spinplay securely destroys or permanently anonymizes personal data in accordance with NPC-approved data disposal procedures. Anonymized data — from which no individual can reasonably be identified — may be retained indefinitely for aggregate analytics.
8.1 spinplay uses the following categories of cookies and similar technologies on spinplay.bio:
8.2 spinplay does not use third-party advertising tracking cookies, social media tracking pixels, or cross-site behavioral profiling technologies. The cookies placed by spinplay remain within the spinplay.bio domain and are not shared with advertising networks.
8.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use spinplay's services. Disabling functional or analytics cookies does not affect core gaming functionality.
No advertising tracking. spinplay does not use advertising network cookies or tracking pixels. The platform does not profile you for third-party advertising purposes, and your gaming behavior data is not shared with any ad network.
9.1 spinplay implements a layered security architecture to protect personal data against unauthorized access, disclosure, alteration, or destruction. Security measures include:
9.2 Despite these measures, no online platform can guarantee absolute security against all possible threats. Players are encouraged to maintain strong, unique passwords for their spinplay accounts, enable two-factor authentication, and contact spinplay immediately upon suspecting unauthorized account access.
Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by spinplay:
Request a copy of the personal data spinplay holds about you, including information on how it is used and with whom it has been shared.
Request that inaccurate or incomplete personal data in your spinplay account be corrected or updated. Corrections to KYC data require supporting documentation.
Request deletion of your personal data where it is no longer necessary for the original purpose and no overriding legal or regulatory retention obligation applies.
Object to the processing of your personal data for direct marketing or on grounds relating to your particular situation, including profiling based on legitimate interest.
Request that spinplay suspend processing of your personal data in specific circumstances — for example, while a dispute about accuracy is being resolved.
Lodge a complaint with the National Privacy Commission of the Philippines if you believe spinplay has violated your data privacy rights under RA 10173.
To exercise any of the above rights, submit a written request via email to spinplay's Data Protection Officer (see Section 14). spinplay will acknowledge your request within seventy-two (72) hours and respond substantively within fifteen (15) business days. Where the nature of the request requires additional verification or where the volume of requests necessitates an extension, spinplay will notify you of the delay and the expected completion date.
11.1 spinplay's services are strictly for adults aged twenty-one (21) and above. spinplay does not knowingly collect personal data from individuals below the age of twenty-one (21). Age is verified as part of the mandatory KYC process, and accounts found to belong to individuals below this age threshold are immediately terminated.
11.2 If spinplay becomes aware that personal data has been inadvertently collected from a minor — whether through a false age declaration or any other means — spinplay will take prompt action to delete such data from its systems, terminate the associated account, and where required under PAGCOR regulations, report the incident to the relevant authority.
11.3 If you are a parent or guardian and believe that your child has created a spinplay account or provided personal data to spinplay, please contact spinplay's Data Protection Officer immediately. Contact details are provided in Section 14 below.
12.1 spinplay.bio does not contain links to external third-party websites for marketing or browsing purposes. The Platform is a closed gaming environment and all links within it navigate to internal spinplay pages only.
12.2 Where spinplay's game library includes titles provided by third-party studios, those games are delivered within the spinplay Platform environment. The studios do not operate their own separate websites accessible from spinplay, and no player navigation to external URLs is required or facilitated within the gaming interface.
12.3 spinplay is not responsible for the privacy practices of payment providers such as GCash and Maya, which operate under their own separate privacy policies. When you interact with those payment platforms to authorize a deposit or withdrawal, you are subject to their respective privacy terms in addition to this Policy.
13.1 spinplay may update this Privacy Policy from time to time to reflect changes in our data practices, applicable legal requirements, or the expansion of Platform services. Material changes — meaning changes that significantly affect how spinplay processes your personal data or reduces your privacy rights — will be communicated to registered Players via the email address on file no fewer than fourteen (14) calendar days before the changes take effect.
13.2 Non-material updates such as corrections of typographical errors, clarifications of existing practices without substantive change, or updates to contact information may be made without advance notice. The "Last Updated" date at the top of this Policy will reflect any revision.
13.3 Your continued use of spinplay after the effective date of any amendment to this Policy constitutes your acknowledgment of the revised Privacy Policy. If you do not accept a material change, you should discontinue using spinplay and may request account closure as described in the Terms and Conditions.
This Privacy Policy was last updated on January 1, 2026.
14.1 For all data privacy inquiries, data subject rights requests, privacy complaints, or concerns about spinplay's personal data processing practices, Players may contact spinplay's designated Data Protection Officer (DPO) through the following channels:
14.2 Complaints about spinplay's data privacy practices that are not resolved to your satisfaction through the above channels may be submitted to the National Privacy Commission (NPC) of the Philippines. Information on filing an NPC complaint is publicly available through the NPC's official channels.
14.3 spinplay's DPO is accessible to all registered Players and prospective Players. There is no cost to submit a data privacy inquiry or exercise a data subject right under this Policy. spinplay will never charge a fee for access, correction, or erasure requests submitted in good faith.
Your privacy rights matter. spinplay's DPO is a designated role with direct responsibility for data privacy compliance. If you have a concern about how spinplay handles your personal data, you are encouraged to raise it — we take all data privacy inquiries seriously and will respond within the prescribed timeframes under Philippine law.
spinplay takes your privacy as seriously as your winnings. PAGCOR regulated, NPC compliant, and built on a foundation of data minimization and transparency. If you have questions about how we handle your data, our support team and DPO are available around the clock.
21+ Adults aged 21 and above only. PAGCOR regulated. Play responsibly.