spin7 Privacy Policy

This Privacy Policy is issued by spin7 ("spin7," "we," "us," or "our"), the operator of the online casino platform accessible at spin7.one. spin7 is the data controller responsible for the personal data of players who register and use the spin7 platform.

spin7 is committed to protecting the privacy and personal data of all players, particularly those accessing the platform from the Philippines. This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as other applicable data protection standards.

By registering a spin7 account or continuing to use the spin7 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

spin7 collects personal data from you directly when you register an account, make a deposit or withdrawal, contact support, or interact with the platform. We also collect certain data automatically as you use the spin7 website. The categories of personal data we collect include:

spin7 uses the personal data we collect for the following purposes:

• Account Registration & Management: To create and maintain your spin7 account, verify your identity and age (21+), and manage your spin7 login credentials.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods in Philippine Peso (PHP).
• Regulatory Compliance: To comply with our obligations under Philippine gaming regulations, anti-money laundering (AML) laws, and the Data Privacy Act of 2012, including Know Your Customer (KYC) verification requirements.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the spin7 platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance related to your spin7 account.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling and to administer responsible gaming tools such as deposit limits, session limits, and self-exclusion requests.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the overall performance and user experience of the spin7 platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and updates about spin7 — but only where you have provided your consent or where we have a legitimate interest in doing so. You may opt out at any time.
• Legal Obligations: To comply with court orders, regulatory requests, or other legal obligations that require spin7 to disclose or retain certain data.

spin7 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

Under the Philippine Data Privacy Act of 2012, spin7 is required to have a lawful basis for processing your personal data. The legal bases on which spin7 relies are as follows:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to perform the contract between you and spin7 — specifically, to operate your account, process transactions, and deliver the gaming services you have requested.
• Legal Obligation: spin7 is required by Philippine law to collect and retain certain data for KYC verification, AML compliance, and regulatory reporting purposes. This processing is mandatory and cannot be opted out of.
• Legitimate Interests: spin7 processes certain technical and gaming data on the basis of its legitimate interests in preventing fraud, ensuring platform security, and improving its services — provided that these interests are not overridden by your rights and interests.
• Consent: Where spin7 relies on your consent as the legal basis for processing — for example, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

spin7 does not sell your personal data to third parties. However, spin7 may share your personal data with the following categories of recipients where necessary and in accordance with this Privacy Policy:

• Payment Processors: spin7 shares financial data with payment service providers (including GCash, PayMaya, and partner banks) solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own data protection obligations.
• Identity Verification Providers: spin7 may use third-party KYC and identity verification services to verify your identity and age as required by Philippine gaming regulations. These providers process your data strictly for verification purposes.
• Regulatory Authorities: spin7 may be required to disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), or other competent Philippine authorities in response to lawful requests, court orders, or regulatory requirements.
• Technology & Infrastructure Providers: spin7 uses third-party cloud hosting, analytics, and security service providers to operate the platform. These providers act as data processors on spin7's behalf and are contractually bound to process your data only on spin7's instructions.
• Game Software Providers: Certain game providers may receive limited gaming data (such as session identifiers) to facilitate the delivery of their games on the spin7 platform. No personally identifiable information is shared with game providers beyond what is strictly necessary.

All third parties with whom spin7 shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the purposes for which it was shared.

spin7 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how players use the spin7 website. The types of cookies used by spin7 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the spin7 platform to function. They enable core features such as your spin7 login session, account security, and navigation. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences — such as your preferred language and display settings — to provide a more personalised experience on spin7.
• Analytics Cookies: spin7 uses analytics cookies to understand how players navigate the platform, which games are most popular, and where technical issues occur. This data is used in aggregate form to improve the spin7 experience.
• Marketing Cookies: With your consent, spin7 may use cookies to deliver relevant promotional content and track the effectiveness of marketing campaigns. You may opt out of marketing cookies at any time through your browser settings or the spin7 cookie preference centre.

spin7 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:

• Account Data: Retained for the duration of your spin7 account and for a minimum of five (5) years following account closure, in accordance with Philippine AML and gaming regulatory requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of 2001 (as amended) and PAGCOR regulations.
• KYC & Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification process.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer retention period is required for dispute resolution or legal proceedings.
• Technical & Log Data: Retained for up to twelve (12) months for security monitoring and fraud prevention purposes.
• Marketing Preferences: Retained until you withdraw your consent or request deletion, subject to any overriding legal retention obligations.

Upon expiry of the applicable retention period, spin7 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by spin7:

• Right to Be Informed: You have the right to be informed about how spin7 collects and uses your personal data — which is the purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data that spin7 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request that spin7 correct any inaccurate or incomplete personal data held about you. You can update most of your account information directly through your spin7 account settings.
• Right to Erasure: You have the right to request that spin7 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to spin7's legal retention obligations.
• Right to Object: You have the right to object to spin7's processing of your personal data where that processing is based on legitimate interests or for direct marketing purposes.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that spin7 transmit that data to another controller where technically feasible.
• Right to Withdraw Consent: Where spin7 processes your data on the basis of your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

spin7 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised party. You will not be charged a fee for exercising your data rights unless your request is manifestly unfounded or excessive.

spin7 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the spin7 platform is encrypted using industry-standard SSL/TLS protocols.
• Password Hashing: Your spin7 login password is stored using a strong cryptographic hashing algorithm. spin7 staff cannot view your password in plain text.
• Two-Factor Authentication (2FA): spin7 offers 2FA for all player accounts. We strongly recommend enabling 2FA to add an additional layer of security to your spin7 login.
• Access Controls: Access to personal data within spin7's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Regular Security Audits: spin7 conducts regular security assessments and penetration testing to identify and address potential vulnerabilities in the platform.
• Incident Response: spin7 maintains a data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, spin7 will notify the relevant Philippine regulatory authority and affected players in accordance with applicable law.

While spin7 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your spin7 login credentials and for notifying spin7 support immediately if you suspect any unauthorised access to your account.

The spin7 platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. spin7 does not knowingly collect personal data from individuals under the age of 21.

If spin7 becomes aware that personal data has been collected from a person under the age of 21, spin7 will immediately suspend the relevant account, delete the associated personal data (subject to any mandatory legal retention requirements), and return any funds deposited by the underage individual.

With your consent, spin7 may send you promotional emails, SMS messages, and in-platform notifications about bonuses, new games, special events, and other spin7 offers. You can manage your marketing preferences at any time through your spin7 account settings.

If you no longer wish to receive marketing communications from spin7, you may opt out by:

• Clicking the "unsubscribe" link in any marketing email received from spin7.
• Updating your communication preferences in your spin7 account settings.
• Contacting spin7 support and requesting removal from all marketing lists.

Please note that opting out of marketing communications will not affect transactional communications that spin7 is required to send you in connection with your account — such as deposit confirmations, withdrawal notifications, and security alerts. These communications are necessary for the operation of your spin7 account and cannot be opted out of.

spin7 does not share your contact details with third-party marketers. All marketing communications you receive will be sent directly by spin7 or by a service provider acting on spin7's behalf under a strict data processing agreement.

spin7 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Privacy Policy, spin7 will notify registered players via email or through a prominent notice on the spin7 platform prior to the changes taking effect.

The date of the most recent revision to this Privacy Policy is displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how spin7 protects your personal data.

Your continued use of the spin7 platform following the publication of any updates to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any changes, you should stop using the spin7 platform and may request account closure by contacting spin7 support.

If you have any questions, concerns, or complaints about this Privacy Policy or about how spin7 handles your personal data, please contact the spin7 Data Protection team. We are committed to resolving all privacy-related enquiries promptly and transparently.

You can reach the spin7 support and data protection team via live chat on the spin7 platform, or by sending a written enquiry to the following email address:

Please include your registered spin7 username, a clear description of your query or complaint, and — where relevant — the specific personal data or processing activity your enquiry relates to. spin7 aims to respond to all privacy-related written enquiries within ten (10) business days.

If you are not satisfied with spin7's response to your privacy complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

This Privacy Policy was last reviewed and updated in January 2026. spin7 reserves all rights not expressly granted herein.