spin8 Privacy Policy

01 Who We Are

spin8 is an online gaming platform accessible at spin8.pro, operated for Filipino players and offering slots, live casino, bingo, hi-lo, keno, and other gaming products. All services are denominated in Philippine Peso (PHP) and are directed at players located in the Philippines aged 21 years and above, in accordance with PAGCOR regulations.

For purposes of this Privacy Policy, spin8 acts as the Personal Information Controller (PIC) as defined under Republic Act No. 10173 (the Data Privacy Act of 2012) and its Implementing Rules and Regulations. This means spin8 determines the purposes and means by which personal data collected on the platform is processed.

02 Data We Collect

spin8 collects the following categories of personal data from Players and platform visitors:

2.1 Identity and Registration Data

• Legal full name (as it appears on your government-issued ID)
• Date of birth (for age verification — 21+ requirement under PAGCOR rules)
• Nationality and country of residence
• Residential address (barangay, city, province, ZIP code)
• Username chosen at registration

2.2 Contact Data

• Mobile number (for OTP verification and account security)
• Email address (for account notifications, transaction confirmations, and support correspondence)

2.3 Identity Verification (KYC) Data

• Copies of government-issued photo identification (PSA PhilSys National ID, UMID, Philippine passport, LTO driver's licence, or other accepted documents)
• Proof of address documentation where requested
• Selfie or liveness check images submitted for biometric verification where applicable

2.4 Financial and Transaction Data

• GCash mobile number, Maya account reference, or other e-wallet identifiers used for deposits and withdrawals
• Bank account name and number (last four digits) for bank transfer transactions via BPI, BDO, or Metrobank
• Deposit history, withdrawal requests, transaction amounts, and timestamps — all in PHP
• Bonus credit allocations and wagering history

2.5 Gaming Activity Data

• Games played, bet amounts, win/loss records, session durations, and game preferences
• Responsible gaming tool settings — deposit limits, session reminders, cooling-off periods, and self-exclusion status

2.6 Technical and Device Data

• IP address and approximate geolocation (to verify Philippine residency and detect prohibited jurisdiction access)
• Device type, operating system, browser type and version
• Unique device identifiers where applicable
• Platform interaction logs — pages visited, features used, session timestamps

2.7 Communications Data

• Live chat transcripts and email correspondence with spin8 support
• Survey responses and feedback submissions where voluntarily provided

03 How We Collect Your Data

spin8 collects personal data through the following means:

3.1 Directly From You

The majority of personal data spin8 holds is provided directly by you during the following interactions:

• Completing the spin8 registration form and creating your Account;
• Submitting KYC documentation through the Account verification portal;
• Making a deposit or requesting a withdrawal through the cashier;
• Contacting spin8 support via live chat or email;
• Updating your Account profile or responsible gaming settings;
• Participating in promotions, surveys, or feedback requests.

3.2 Automatically Through Platform Use

When you access spin8, certain technical data is collected automatically through server logs, cookies, and similar technologies:

• Your IP address and approximate location are logged at each login session;
• Device and browser information is captured for security and compatibility purposes;
• Gaming activity data — including every wager, result, and session timestamp — is recorded in spin8's gaming system for regulatory compliance, dispute resolution, and fraud detection;
• Cookies and similar trackers record your preferences and platform navigation behaviour.

3.3 From Third-Party Verification Partners

Where you submit KYC documents, spin8 works with licensed third-party identity verification providers who may cross-reference your submitted details against Philippine government-issued identity databases, sanctions lists, and politically exposed person (PEP) registers. Data returned from these checks is stored alongside your Account record.

3.4 From Payment Processors

When you transact via GCash, Maya, GrabPay, BPI, BDO, Metrobank, QR Ph, or 7-Eleven CLiQQ, the respective payment processor may pass transaction reference data — including masked account identifiers and transaction confirmation codes — back to spin8 for reconciliation and audit purposes.

04 Why We Process Your Data

spin8 processes your personal data for the following specific, legitimate purposes:

• Account creation and management: To register your spin8 account, authenticate your identity at login, and manage your account settings throughout your relationship with spin8.
• Age and identity verification: To verify that you are at least 21 years of age and that your identity matches your registration details, as required by PAGCOR regulations.
• Payment processing: To process deposits and withdrawals in PHP, reconcile transactions, and prevent payment fraud.
• Gaming service delivery: To make games available, record wager and outcome history, allocate bonuses, and resolve disputes arising from technical issues.
• Regulatory compliance: To comply with PAGCOR requirements, anti-money laundering (AML) obligations under Republic Act No. 9160, and data retention requirements under applicable Philippine law.
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling, enforce deposit limits and self-exclusion orders set by the Player, and comply with any regulatory intervention requirements.
• Fraud and security: To detect and prevent unauthorised Account access, bonus abuse, multi-accounting, collusion, money laundering, and other prohibited activities.
• Customer support: To respond to your enquiries, resolve complaints, and maintain records of support interactions for quality assurance.
• Platform improvement: To analyse aggregate, anonymised platform usage data for the purpose of improving spin8's games, features, and user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS, where you have provided consent or where we have a legitimate interest in doing so and you have not opted out.

05 Legal Bases for Processing

Under Republic Act No. 10173, all personal data processing must have a lawful basis. spin8 relies on the following legal bases depending on the purpose of processing:

06 Data Sharing and Disclosure

spin8 does not sell, rent, or commercially trade your personal data. Data is shared only in the following limited circumstances, and only to the minimum extent necessary:

6.1 Payment Service Providers

spin8 shares transaction-relevant personal data with payment processors including GCash, Maya, GrabPay, BPI, BDO, Metrobank, QR Ph, and 7-Eleven CLiQQ, solely for the purpose of processing deposits and withdrawals in PHP. These providers are bound by their own data protection obligations and Philippine financial regulations.

6.2 KYC and Identity Verification Providers

Your identity documents and verification data are processed by licensed third-party KYC providers appointed by spin8. These providers operate under data processing agreements that restrict use of your data to verification purposes only and prohibit any secondary commercial use.

6.3 Game Content Providers

Live dealer and RNG game content on spin8 is supplied by licensed third-party studio and software providers. These providers may receive session-level technical data (device type, connection quality) necessary for game delivery. No financial or identity data is passed to game content providers beyond what is technically required for game session initialisation.

6.4 Regulatory and Law Enforcement Authorities

spin8 is required by law to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine regulatory and law enforcement authorities upon lawful request. spin8 will not notify you of such disclosures where doing so would constitute a criminal offence or interfere with an ongoing investigation.

6.5 Fraud Prevention Networks

spin8 participates in industry fraud prevention networks. Where a Player's Account is closed due to fraud, bonus abuse, or money laundering, a minimal record may be shared with partner platforms operating under the same fraud prevention framework for the purpose of preventing repeated fraudulent conduct across multiple platforms.

07 Cookies and Tracking Technologies

spin8 uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help spin8 operate correctly, remember your preferences, and analyse how the platform is used.

7.1 Types of Cookies Used

7.2 Managing Cookies

You can manage your cookie preferences through the cookie consent panel accessible from any spin8 page. You may also adjust cookie settings through your browser — most browsers allow you to view, block, or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging into your spin8 Account.

08 Data Retention

spin8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with spin8's data disposal procedures. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes, as it can no longer be used to identify any individual.

09 Data Security

spin8 implements a layered data security framework designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser or device and the spin8 platform is encrypted in transit using TLS 1.3 or higher. The spin8 platform enforces HTTPS across all pages.
• AES-256 Encryption at Rest: Sensitive personal data — including KYC documents, financial records, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA via SMS OTP from their Account security settings. spin8 support agents use multi-factor authentication for all internal system access.
• Access Controls: Internal access to Player personal data is restricted to authorised personnel on a strict need-to-know basis. Access logs are maintained and reviewed regularly.
• Regular Security Audits: spin8 engages independent security professionals to conduct regular penetration testing and vulnerability assessments of the platform infrastructure.
• Data Breach Response: In the event of a personal data breach that poses a real risk of harm, spin8 will notify affected Players and the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03.

10 Cross-Border Data Transfers

spin8 is operated for and directed at Filipino players. Some personal data may be processed by third-party service providers — such as KYC verification partners, game content providers, and cloud infrastructure suppliers — whose servers or operations may be located outside the Philippines.

Where personal data is transferred outside the Philippines, spin8 ensures that adequate safeguards are in place in accordance with Section 21 of the Data Privacy Act and NPC guidelines. These safeguards include:

• Data processing agreements incorporating NPC-approved standard contractual clauses;
• Transfers only to jurisdictions that provide an adequate level of data protection as determined by the NPC or recognised international frameworks;
• Binding corporate rules where transfers occur within a corporate group subject to group-wide data protection policies.

You may request information about the specific safeguards applied to cross-border transfers of your data by contacting the spin8 Data Protection Officer (DPO) as described in Section 15.

11 Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights in relation to your personal data held by spin8:

11.1 Right to be Informed

You have the right to be informed of what personal data spin8 collects, how it is used, and with whom it is shared — before or at the time of collection. This Privacy Policy fulfils that obligation.

11.2 Right to Access

You may request a copy of the personal data spin8 holds about you, together with information about the purposes for which it is processed. Requests will be responded to within fifteen (15) working days.

11.3 Right to Rectification

You may request correction of any inaccurate or incomplete personal data. Identity-related corrections (e.g., name, date of birth) may require submission of supporting documentation.

11.4 Right to Erasure or Blocking

You may request deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where processing is unlawful. Erasure requests are subject to spin8's legal retention obligations as outlined in Section 8.

11.5 Right to Object

You may object to the processing of your personal data for direct marketing, profiling, or research purposes. Objections to processing based on legitimate interest will be considered on a case-by-case basis and will not affect processing carried out on the basis of legal obligation or contract performance.

11.6 Right to Data Portability

You may request a copy of certain personal data you have provided to spin8 in a structured, commonly used, machine-readable format (such as CSV), where technically feasible. Portability requests apply to data processed on the basis of consent or contract.

11.7 Right to Lodge a Complaint

If you believe spin8 has processed your personal data in violation of the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. spin8 encourages you to contact the DPO first to allow resolution before escalating to the NPC.

12 Children and Minors

If spin8 discovers that personal data has been collected from an individual under 21 years of age, the associated Account will be immediately closed, all transactions will be voided, deposited funds will be returned, and all personal data relating to the underage individual will be deleted as soon as practicable, subject to any legal reporting obligations that may arise.

If you are a parent or guardian and you believe your child has registered a spin8 Account, please contact support immediately via live chat so that the Account can be closed and the data erased without delay.

13 Third-Party Links and Services

The spin8 platform may contain references to third-party payment services such as GCash, Maya, and BDO in the context of facilitating transactions. When you navigate to a third-party payment provider's platform to complete a transaction, you leave the spin8 environment and are subject to that provider's own privacy policy and data practices.

spin8 is not responsible for the privacy practices or content of third-party platforms. We recommend reviewing the privacy policy of any third-party service you use in connection with your spin8 Account.

14 Policy Amendments

spin8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or platform operations. When material changes are made, spin8 will notify registered Players by:

• Posting a prominent notice on the spin8 platform upon login;
• Sending an email notification to the address registered on your Account; and/or
• Updating the "Effective Date" at the top of this Privacy Policy page.

Continued use of the spin8 platform following notification of a material policy change constitutes acceptance of the updated Privacy Policy. If you do not agree with any amendment, you should discontinue use of the platform and may request Account closure as outlined in the spin8 Terms & Conditions.

15 Contact and Data Protection Officer

spin8 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or the practices described in this Privacy Policy, please contact us through the following channels:

For complaints that cannot be resolved directly with spin8, you may escalate to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.