spinoy Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how spinoy ("we," "us," "our," or "the Platform"), operating at https://spinoy.cam, collects, uses, discloses, and protects the personal information of users ("you," "Player") who access our online gaming services. By registering an account or using any feature of spinoy, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

spinoy is committed to protecting your privacy and handling your personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and applicable regulations enforced by the National Privacy Commission (NPC) and the Philippine Amusement and Gaming Corporation (PAGCOR).

2. Data Controller

spinoy acts as the data controller for all personal information collected through the spinoy platform. This means we determine the purposes and means of processing your personal data. For privacy-related inquiries or to exercise your data subject rights, please contact our Data Protection Officer at the contact details provided in Section 14 of this Policy.

3. Information We Collect

3.1 Information You Provide Directly

When you register for a spinoy account, we collect the following personal information:

• Identity information: Full legal name, date of birth, nationality, and government-issued identification number (for KYC verification).
• Contact information: Email address, mobile phone number, residential address, and postal code.
• Account credentials: Username and password (stored in encrypted form).
• Payment information: Bank account details, e-wallet account identifiers (GCash, PayMaya), and transaction records.
• Communications: Any messages you send to spinoy customer support, feedback forms, or live chat transcripts.

3.2 Information Collected Automatically

When you use spinoy, we automatically collect certain technical and behavioral data, including:

• Device information: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage data: Pages visited, games played, time spent on the platform, bet sizes, win/loss records, and referral sources.
• Location data: Approximate geographic location derived from your IP address to ensure compliance with territorial restrictions.
• Cookies and tracking technologies: Session cookies, persistent cookies, and similar technologies (see Section 9 for details).

3.3 Information from Third Parties

spinoy may receive personal data from third-party service providers, including:

• KYC verification providers: Identity verification services that confirm your name, age, and address against official records.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard may share transaction status and fraud detection data.
• Game providers: Third-party gaming studios that supply slot, bingo, or live casino content may share gameplay session data.

4. How We Use Your Information

spinoy processes your personal data for the following purposes:

4.1 Account Management

• To create, maintain, and authenticate your spinoy account.
• To verify your identity and comply with KYC (Know Your Customer) requirements mandated by PAGCOR.
• To communicate important account updates, policy changes, and promotional offers (with your consent).

4.2 Transaction Processing

• To process deposits, withdrawals, and refunds via your chosen payment method.
• To reconcile financial records and ensure accurate account balances.
• To detect and prevent fraudulent transactions, money laundering, and other illegal activities.

4.3 Gameplay & Platform Operation

• To enable access to bingo, slot, live casino, fishing games, and sports betting features.
• To deliver personalized game recommendations based on your play history.
• To calculate and credit winnings, apply bonus terms, and enforce wagering requirements.
• To monitor platform performance, identify technical issues, and optimize user experience.

4.4 Regulatory Compliance

• To comply with PAGCOR regulations, including responsible gaming measures and player protection requirements.
• To respond to lawful requests from government authorities, law enforcement, or regulatory bodies.
• To enforce our Terms & Conditions and investigate suspected violations.

4.5 Marketing & Communications (With Consent)

• To send promotional emails, SMS messages, or push notifications about new games, bonuses, and tournaments.
• To conduct surveys and gather feedback to improve spinoy services.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, spinoy processes your personal information on the following legal grounds:

• Contractual necessity: Processing is essential to fulfill our obligations under the Terms & Conditions you accepted when registering.
• Legal obligation: We must process certain data to comply with PAGCOR regulations, anti-money laundering laws, and tax reporting requirements.
• Consent: For marketing communications and optional features, we rely on your explicit consent, which you may withdraw at any time.
• Legitimate interests: We process data to prevent fraud, improve platform security, and enhance user experience, balanced against your privacy rights.

6. Data Sharing & Third Parties

spinoy does not sell, rent, or trade your personal information to third parties for their independent marketing purposes. However, we may share your data in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment processors (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard)
• KYC and identity verification vendors
• Cloud hosting and data storage providers
• Customer support platforms and live chat services
• Game content suppliers and RNG auditors

These providers are contractually bound to use your data only for the specific services they perform for spinoy and must maintain appropriate security measures.

6.2 Legal & Regulatory Authorities

We may disclose your personal information to PAGCOR, the National Privacy Commission, law enforcement agencies, or courts when:

• Required by law or legal process (e.g., subpoena, court order)
• Necessary to enforce our Terms & Conditions or investigate violations
• Needed to protect the rights, property, or safety of spinoy, our users, or the public
• Part of an anti-money laundering (AML) or fraud investigation

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.

7. Data Retention

spinoy retains your personal information for as long as your account remains active, and for a period thereafter as required by PAGCOR regulations and Philippine law. Specific retention periods include:

• Account data: Retained for the duration of your active account, plus seven (7) years following account closure, in accordance with PAGCOR record-keeping requirements.
• Transaction records: Retained for a minimum of seven (7) years to comply with anti-money laundering and tax regulations.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period to demonstrate compliance.
• Technical logs: Retained for up to twelve (12) months for security monitoring and troubleshooting purposes.

After the applicable retention period expires, we will securely delete or anonymize your personal data so that it can no longer be associated with you.

8. Security Measures

spinoy takes the protection of your personal data seriously. We implement a layered security approach that includes the following safeguards:

• Encryption: All data transmitted between your device and spinoy servers is protected by 256-bit SSL/TLS encryption.
• Access controls: Personal data is accessible only to authorized spinoy personnel on a strict need-to-know basis.
• Secure storage: Player data is stored on secured servers with firewall protection, intrusion detection, and regular vulnerability assessments.
• Password hashing: Account passwords are stored using industry-standard one-way cryptographic hashing — we cannot view your password in plain text.
• Two-factor authentication (2FA): Optional 2FA is available for all spinoy accounts to provide an additional layer of login security.
• Regular audits: Our security infrastructure is reviewed periodically by internal teams and independent third-party security assessors.

9. Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit spinoy. They help us recognize your browser, remember your preferences, and understand how you interact with our platform. We also use similar tracking technologies such as web beacons and pixel tags.

9.2 Types of Cookies We Use

• Essential cookies: Required for basic platform functionality such as login sessions, account security, and navigation. These cannot be disabled without affecting your ability to use spinoy.
• Performance cookies: Collect anonymous data on how players use spinoy — which games are most popular, where errors occur, and how pages load — to improve overall performance.
• Preference cookies: Remember your settings such as language preferences, game filters, and display options to personalize your experience.
• Analytics cookies: Help us understand traffic patterns, user behavior, and platform engagement through aggregated, anonymized data.

9.3 Managing Cookies

You can control or delete cookies through your browser settings at any time. Please note that disabling essential cookies may impair key functionality on spinoy, including the ability to log in or maintain an active session. Disabling non-essential cookies will not affect your access to the core platform but may result in a less personalized experience.

10. Your Privacy Rights

Under the Data Privacy Act of 2012 (RA 10173) of the Philippines, you have the following rights with respect to your personal data held by spinoy:

• Right to be informed: You have the right to know what personal data spinoy collects, how it is used, and with whom it is shared — as described in this Policy.
• Right of access: You may request a copy of the personal data we hold about you, including transaction records, account details, and gameplay history.
• Right to rectification: You may request the correction of inaccurate or incomplete personal data in your spinoy account.
• Right to erasure: Subject to legal and regulatory retention obligations, you may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
• Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to file a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact the spinoy Data Protection Officer using the details provided in Section 14. We will respond to all verified requests within thirty (30) days. In complex cases, we may extend this period by an additional thirty (30) days with prior notice to you.

11. Children's Privacy

spinoy is strictly an adults-only platform. We do not knowingly collect personal information from individuals under the age of twenty-one (21) years, in accordance with Philippine gaming regulations. If we discover that a user under the minimum age has registered an account, we will immediately suspend that account, delete all associated personal data, and reverse any transactions where possible.

If you believe that a minor has registered on spinoy, please contact our support team immediately so we can take prompt action.

12. International Transfers

spinoy primarily stores and processes player data within the Philippines. However, some of our third-party service providers — such as cloud infrastructure providers or game content suppliers — may operate in other countries. Where personal data is transferred outside the Philippines, spinoy ensures that appropriate safeguards are in place, consistent with the requirements of the Data Privacy Act of 2012, to protect your information to an equivalent standard.

13. Changes to This Policy

spinoy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or business operations. When we make material changes, we will notify registered players via email or a prominent notice on the spinoy platform at least seven (7) days before the changes take effect.

The "Effective Date" at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically. Your continued use of spinoy after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by spinoy, please reach out to our Data Protection Officer. Our team is available twenty-four (24) hours a day, seven (7) days a week:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available from within your spinoy account dashboard.
• Response Time: We aim to acknowledge all privacy inquiries within 48 hours and resolve them within 30 calendar days.