spin000 Privacy Policy

1 Introduction

1.1 spin000 is committed to protecting the privacy of all Filipino players who use the spin000 Casino platform. This Privacy Policy has been prepared in accordance with applicable Philippine data privacy legislation, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

1.2 This Policy explains in plain language what personal data spin000 collects about you, why we collect it, how we use it, who we may share it with, how long we keep it, and what rights you have over your personal information.

1.3 spin000 processes personal data only for legitimate, specified, and declared purposes. We do not process data in a manner that is incompatible with the purposes stated in this Policy. Our data handling practices are designed to be transparent, proportionate, and respectful of your rights as a data subject under Philippine law.

1.4 This Policy applies to all personal data collected through spin000.net, any associated mobile-accessible interface, customer support communications, and any other interaction you have with the spin000 platform.

2 Data Controller

2.1 For the purposes of applicable Philippine data privacy law, spin000 is the data controller responsible for the personal information collected through the spin000 platform. As data controller, spin000 determines the purposes and means by which your personal data is processed.

2.2 If you have any questions about how spin000 handles your personal data, or wish to exercise any of your data subject rights, you may contact spin000's data privacy team using the contact details provided in Section 15 of this Policy.

2.3 spin000 has appointed a Data Privacy Officer (DPO) responsible for overseeing compliance with applicable data privacy obligations and for handling data subject requests and inquiries in accordance with the Data Privacy Act of 2012.

3 Data We Collect

3.1 spin000 collects the following categories of personal data from Players:

3.2 spin000 does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive information is collected (such as government ID details), it is processed under strict security controls and is not used for any purpose beyond those specified in this Policy.

4 How We Collect Data

4.1 Directly from You. The majority of personal data spin000 holds about you is provided directly by you during the account registration process, when completing KYC verification, when making deposits or withdrawal requests, when contacting customer support, or when updating your account profile.

4.2 Automatically. When you access the spin000 platform, certain technical data is collected automatically through cookies, web beacons, and server logs. This includes your IP address, device identifiers, browser information, and session activity data. See Section 8 for full details on cookies.

4.3 From Third-Party Payment Processors. When you make a deposit or withdrawal via GCash, PayMaya, BPI, BDO, Metrobank, or bank transfer, spin000 receives transaction confirmation data from the relevant payment processor. spin000 does not store full payment credentials such as complete bank account numbers or card numbers.

4.4 From Identity Verification Services. To fulfill its KYC and anti-money laundering obligations, spin000 may use third-party identity verification service providers to cross-check the information you provide during registration. These providers operate under data processing agreements with spin000 and may not use your data for their own independent purposes.

4.5 From Publicly Available Sources. In limited circumstances related to fraud prevention or regulatory compliance, spin000 may supplement its records with information from publicly available sources, including sanctions lists and politically exposed persons (PEP) databases maintained by Philippine authorities.

5 Legal Basis for Processing

5.1 spin000 processes personal data only where a lawful basis exists to do so. The primary legal bases on which spin000 relies are:

• Contractual Necessity: Processing is necessary to perform the contract between spin000 and the Player — specifically, to operate the Player's account, process deposits and withdrawals, and provide access to games on the spin000 platform.
• Legal Obligation: Processing is necessary to comply with applicable Philippine legal and regulatory requirements, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, gaming regulatory compliance, and financial record-keeping obligations.
• Legitimate Interests: Processing is necessary for spin000's legitimate business interests, including fraud prevention, platform security, customer service delivery, and platform analytics, provided these interests are not overridden by your rights and interests.
• Consent: Where spin000 relies on your consent as the legal basis for processing — such as for sending marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Data

6.1 spin000 uses the personal data it collects for the following purposes:

• To create, verify, and manage your spin000 player account.
• To process deposits and withdrawals in Philippine Peso (₱) via your nominated payment method.
• To verify your identity and age (21+) in accordance with KYC requirements and applicable Philippine gaming regulations.
• To detect, prevent, and investigate fraud, money laundering, and other illegal or prohibited activity on the spin000 platform.
• To provide customer support via live chat and email, and to maintain records of support interactions.
• To send account-related notifications including transaction confirmations, security alerts, and responsible gaming reminders.
• To send promotional and marketing communications where you have opted in to receive them — you can opt out at any time.
• To monitor gameplay activity for responsible gaming purposes, including identifying signs of problem gambling behavior.
• To fulfill spin000's obligations under applicable Philippine gaming regulations and financial compliance requirements.
• To analyze aggregated, anonymized usage data to improve the performance, security, and user experience of the spin000 platform.

6.2 spin000 does not use personal data to make fully automated decisions that produce significant legal or similarly significant effects on Players without human oversight, except where required by law or expressly agreed to by the Player.

7 Data Sharing & Disclosure

7.1 spin000 does not sell, rent, or trade your personal data to third parties. spin000 may share personal data with the following categories of recipients only to the extent necessary and only for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment facilitators, to process financial transactions on your spin000 account.
• Identity Verification Providers: Third-party KYC and AML service providers who assist spin000 in verifying player identities and screening against regulatory watchlists.
• Technology Service Providers: Hosting, infrastructure, security, and analytics providers who support the operation of the spin000 platform under contractual data processing agreements.
• Regulatory and Law Enforcement Authorities: Philippine gaming regulators, law enforcement agencies, tax authorities, and other government bodies where disclosure is required by law, court order, or regulatory direction.
• Game Content Providers: Licensed game studios and live dealer operators whose game content is accessible through the spin000 platform may receive limited technical session data necessary to deliver the game experience.

7.2 All third-party service providers with whom spin000 shares personal data are required to process that data only in accordance with spin000's instructions and applicable data protection obligations. spin000 does not permit third-party service providers to use Player data for their own independent marketing or commercial purposes.

7.3 In the event that spin000 undergoes a business restructuring, merger, or acquisition, Player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to data handling practices that result from it.

8 Cookies & Tracking

8.1 The spin000 platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalized experience to Filipino players. Cookies are small data files stored on your device when you visit spin000.net.

8.2 spin000 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the basic operation of the spin000 platform, including maintaining your login session and ensuring platform security. These cookies cannot be disabled without affecting core platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, responsible gaming limits, and display preferences, so you do not need to reset them on each visit to spin000.
• Analytics Cookies: Used to collect aggregated, anonymized information about how Players use the spin000 platform, enabling spin000 to identify areas for improvement. These cookies do not identify individual users.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats to the spin000 platform and player accounts.

8.3 You may configure your browser to refuse or delete cookies. Please note that disabling strictly necessary cookies will affect the functionality of the spin000 platform and may prevent you from accessing certain features, including your account login.

8.4 spin000 does not use third-party advertising or behavioral tracking cookies to serve targeted advertisements based on your activity on the spin000 platform.

9 Data Retention

9.1 spin000 retains personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of the active player relationship and for a minimum of 5 years following account closure, in compliance with applicable Philippine AML and financial record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with applicable Philippine financial and gaming regulatory requirements.
• KYC verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for up to 3 years from the date of the interaction, unless required for ongoing dispute resolution or regulatory purposes.
• Technical and usage data: Retained in identifiable form for up to 24 months, after which it may be anonymized and retained for statistical analysis purposes indefinitely.

9.2 Where personal data is no longer required for its stated purpose and no legal retention obligation applies, spin000 will delete or anonymize it in a secure and irreversible manner.

10 Data Security

10.1 spin000 implements a range of technical and organizational security measures designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and spin000's servers.
• Encrypted storage of sensitive data including identity documents and financial information.
• Access controls limiting internal access to personal data on a need-to-know basis.
• Regular security assessments and platform monitoring for unauthorized access attempts.
• Two-factor authentication options available to Players for additional account security.
• Staff training on data privacy obligations and information security practices.

10.2 While spin000 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, spin000 will notify you and the applicable Philippine data privacy authority in accordance with its legal obligations under the Data Privacy Act of 2012.

10.3 You are responsible for maintaining the security of your spin000 account credentials. spin000 strongly recommends using a unique, strong password for your spin000 account and enabling available two-factor authentication features.

11 Your Rights

11.1 Under the Data Privacy Act of 2012 and applicable Philippine data privacy regulations, you have the following rights with respect to your personal data held by spin000:

11.2 To exercise any of your data subject rights, please contact spin000's data privacy team using the details in Section 15. spin000 will respond to all verified data subject requests within 30 days of receipt. Complex requests may require additional time, and spin000 will notify you if an extension is necessary.

11.3 spin000 will not charge a fee for handling routine data subject requests. However, spin000 reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded, excessive, or repetitive in nature.

11.4 If you are dissatisfied with spin000's response to a data subject request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

12 Children & Minors

12.1 The spin000 platform is strictly intended for individuals who are 21 years of age or older. spin000 does not knowingly collect personal data from individuals under the age of 21. If spin000 discovers that personal data has been collected from a person under 21 years of age, that account will be closed immediately, all associated data will be deleted, and any deposits made will be returned.

12.2 If you believe that a minor has registered on the spin000 platform or that spin000 has inadvertently collected data from a person under 21, please contact us immediately at the address provided in Section 15 so that we may take prompt corrective action.

12.3 spin000 employs age verification procedures during the registration process and may request additional documentation at any time to confirm that a Player meets the minimum age requirement of 21 years.

13 Third-Party Links

13.1 The spin000 platform may contain references to third-party services such as payment processors (GCash, PayMaya, BPI, BDO, Metrobank) that you interact with in the course of making deposits or withdrawals. When you leave the spin000 platform to interact with a third-party service, that service's own privacy policy and terms of use will apply.

13.2 spin000 is not responsible for the privacy practices, data handling, or content of third-party platforms or services. spin000 encourages Players to review the privacy policies of any third-party service they access in connection with their use of spin000.

14 Policy Amendments

14.1 spin000 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or spin000's data processing practices. The most current version of this Policy will always be available at spin000.net/privacy-policy.

14.2 Material changes to this Privacy Policy will be communicated to registered Players via a notification on the spin000 platform or by email to the address associated with your account. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.

14.3 Your continued use of the spin000 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with a material change, you should stop using the spin000 platform and may request account closure in accordance with the Terms & Conditions.

15 Contact & Complaints

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or spin000's handling of your personal data, please contact the spin000 data privacy team through the following channels:

• Live Chat: Available 24/7 directly on the spin000 platform — the fastest channel for general privacy inquiries and account-related data requests.
• Email: support@spin000.net — for formal data subject requests, privacy complaints, or written inquiries requiring a documented response.

15.2 spin000 aims to acknowledge all formal privacy-related inquiries within 5 business days and to resolve data subject requests within 30 calendar days of receipt of a verified request. Where additional time is required, spin000 will notify you of the expected resolution timeframe.

15.3 If you are not satisfied with spin000's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012. Information about filing a complaint with the NPC is available through official Philippine government channels.