Data & Privacy

Spin7 Privacy Policy – How We Handle Your Personal Data

Your privacy matters to us. This page explains exactly what data Spin7 collects when you use our platform, why we collect it, how we protect it, and what rights you have over your own information.

Last Updated: January 2025
spin7

What Spin7 Commits to When It Comes to Your Privacy

These six commitments define how Spin7 approaches your personal data. The full details are in the policy below — but these are the principles that guide every data decision we make.

We Never Sell Your Data

Spin7 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. Full stop. Your data is used to run your Spin7 account and improve your experience — nothing else.

Minimum Data Collection

Spin7 collects only the personal data that is genuinely necessary for us to operate the platform, comply with our legal and regulatory obligations, and provide you with the services you've asked for. We don't collect data speculatively or unnecessarily.

Secure Storage and Handling

All personal data collected by Spin7 is stored on secure servers with industry-standard encryption in place. Access to player data within Spin7 is restricted on a need-to-know basis, and our team undergoes regular data security training.

Your Rights, Your Control

Spin7 respects your right to access, correct, and request deletion of your personal data. You can exercise these rights at any time by contacting us. We aim to respond to all data subject requests within 30 days.

Transparency About What We Do

This Privacy Policy is written in plain language so you can actually understand what we do with your data. We don't bury the important parts in legal jargon. If something changes, we'll notify you and update this page promptly.

Philippine Data Privacy Act Compliance

Spin7 operates in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as administered by the National Privacy Commission (NPC).


What Kind of Personal Data Does Spin7 Collect?

When you use the Spin7 platform, we collect different types of information depending on how you interact with us. Here's a straightforward breakdown of the categories of data we handle:

Identity Information Full legal name, date of birth, gender, and government-issued ID details collected during registration and KYC verification.
Contact Information Philippine mobile number, email address, and residential address. Used to communicate with you about your account and verify your identity.
Financial Information Payment method details (GCash number, Maya account, bank account references), deposit and withdrawal history, and transaction records. Used to process payments and comply with AML obligations.
Gaming Activity Data Bets placed, games played, wagering amounts, wins and losses, session durations, and account balance history. Used for account management, responsible gaming monitoring, and platform improvement.
Technical Data IP address, device type, browser version, operating system, and session logs. Used for security monitoring, fraud prevention, and technical support.
Communications Data Records of your interactions with Spin7 customer support — chat logs, emails, and support tickets. Retained to verify support interactions and improve service quality.
spin7

Data We Do Not Collect

  • Your full GCash/Maya PIN or banking passwords — Spin7 never requests these
  • Biometric data (fingerprints, face scans) unless required by future regulatory changes
  • Your social media account credentials or access tokens
  • Sensitive personal data beyond what is required for KYC and AML compliance
  • Data about individuals under 18 years of age — minors are prohibited from using Spin7

This Privacy Policy ("Policy") describes how Spin7 ("Spin7", "we", "us", "our") — the operator of the online gaming platform at spin7.my — collects, uses, stores, shares, and protects the personal data of players and visitors ("you", "your"). This Policy applies to all Spin7 products and services, including the website, any associated mobile-optimised interfaces, customer support channels, and promotional communications. This Policy should be read alongside the Spin7 Terms and Conditions.

1Who We Are and How to Contact Us

Spin7 is the data controller for all personal data collected through the spin7.my platform. As the controller, Spin7 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

Spin7 operates in compliance with the Philippine Data Privacy Act of 2012 (R.A. 10173), its Implementing Rules and Regulations, and other applicable privacy regulations. We are registered with and accountable to the National Privacy Commission (NPC) of the Philippines.

If you have any questions, concerns, or requests relating to your personal data, you can reach the Spin7 Data Privacy team at:

  • Email: support@spin7.my
  • Subject Line: "Data Privacy Request – [Your Name]"

2Personal Data We Collect

Spin7 collects personal data through several means: information you provide directly when registering and using your account, information generated automatically through your platform activity, and — in limited cases — information received from third parties such as payment processors and identity verification services.

Data You Provide Directly

  • Registration details: full name, date of birth, mobile number, email address
  • KYC documents: government-issued ID (passport, driver's licence, national ID), proof of address
  • Payment information: GCash number, Maya account, bank account details, card information
  • Communications: messages sent to Spin7 support via chat, email, or in-platform messaging
  • Responsible gaming preferences: deposit limits, self-exclusion requests, cooling-off settings

Data Collected Automatically

  • Technical data: IP address, device ID, browser type and version, operating system
  • Session data: login times, session duration, pages visited, features used
  • Gaming activity: games played, bets placed, wagering amounts, outcomes, balance history
  • Cookie and tracking data: as described in Section 7 of this Policy

Data From Third Parties

In some cases, Spin7 may receive data about you from third-party service providers involved in processing your payments (such as GCash or Maya confirming transaction completion) or from identity verification services used during KYC checks. This data is limited to what is strictly necessary for those specific purposes.

Reminder: Spin7 never asks for your GCash or Maya PIN, your online banking password, or your full card number via customer support. If you receive a request for this information claiming to be from Spin7, it is fraudulent.

3Why We Use Your Personal Data

Spin7 processes your personal data for specific, documented purposes. We do not use your data for any purpose that is incompatible with those listed below.

Purpose Data Used
Account creation and management Identity, contact, and login credentials
Identity verification (KYC) Government ID, date of birth, address, payment method proof
Payment processing (deposits and withdrawals) Payment method details, transaction history
Providing gaming and betting services Account data, gaming activity, session data
Fraud prevention and security monitoring Technical data, IP address, device ID, login history
Anti-money laundering (AML) compliance Identity, financial transactions, gaming activity
Responsible gaming monitoring and tools Gaming activity, deposit history, session data, player-set limits
Customer support Contact data, communications history, account activity
Platform improvement and analytics Aggregated, anonymised usage data
Marketing communications (opt-in only) Contact data, gaming preferences (only with your consent)
Regulatory reporting and compliance Identity, financial, and gaming data as required by applicable law

4Legal Basis for Processing

Spin7 only processes your personal data when we have a valid legal basis under the Philippine Data Privacy Act and applicable regulations. The legal bases we rely on are:

  • Contractual necessity: Processing required to fulfil our contract with you — providing your account, processing payments, and delivering gaming services.
  • Legal obligation: Processing required to comply with laws such as AML regulations, gaming licence conditions, and the Data Privacy Act's data subject rights provisions.
  • Legitimate interests: Processing for fraud prevention, security monitoring, and platform analytics, where our interests are not overridden by your privacy rights.
  • Consent: For optional marketing communications. You may withdraw consent at any time by contacting us or adjusting your account settings.

5Sharing Your Personal Data

Spin7 does not sell your personal data to any third party. We share data only in the following limited and controlled circumstances:

Service Providers (Data Processors)

Spin7 works with third-party service providers who process data on our behalf under strict data processing agreements. These include:

  • Payment processors: GCash, Maya, InstaPay/PESONet network participants, and card payment processors — receive only the minimum payment data necessary to process your transactions.
  • KYC/identity verification providers: Receive your identity documents and details to perform verification checks required by our licence.
  • Game content providers: Receive your account session data to deliver game functionality. They do not receive your financial or identity data.
  • Customer support tools: Support platform providers who host our live chat and ticketing system may process your communications data on our behalf.

Regulatory and Legal Disclosures

Spin7 may disclose personal data to relevant regulatory bodies, law enforcement agencies, or courts of competent jurisdiction when required to do so by applicable law, valid legal process, or our gaming licence conditions. This includes reporting obligations under anti-money laundering regulations.

Spin7 will never share your personal data with third-party advertisers or data brokers, nor will we share it with other gaming platforms or operators without your explicit consent.

spin7

6How Long We Keep Your Data

Spin7 retains personal data only for as long as is necessary for the purposes it was collected, or as required by applicable law. The following general retention periods apply:

  • Active account data: Retained for the duration of your account with Spin7, plus a minimum of 5 years after account closure as required by AML and gaming regulations.
  • KYC documents: Retained for a minimum of 5 years after the end of the business relationship, per AML compliance requirements.
  • Transaction records: Retained for a minimum of 5 years for financial regulation compliance purposes.
  • Customer support communications: Retained for 2 years from the date of the last interaction, unless part of an ongoing dispute or investigation.
  • Technical and session logs: Retained for up to 90 days for security and fraud monitoring purposes, unless longer retention is required for an active investigation.
  • Marketing consent records: Retained for the period of your consent and for 1 year after withdrawal of consent, as evidence of the consent given.

When data is no longer required to be retained, Spin7 will securely delete or anonymise it so it can no longer be associated with you.

7Cookies and Tracking Technologies

Spin7 uses cookies and similar tracking technologies on the spin7.my website and platform. Cookies are small text files placed on your device when you visit a website — they help the platform function correctly and allow us to understand how players use the site.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use the Spin7 platform. Analytics and functional cookies can be disabled without losing core platform access.

8How Spin7 Secures Your Data

Spin7 takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction.

SSL/TLS Encryption All data transmitted between your device and Spin7 servers is encrypted using TLS 1.2 or higher.
Encrypted Data Storage Sensitive data including payment details and identity documents is encrypted at rest on Spin7 servers.
Access Controls Internal access to player data is restricted to authorised personnel with a documented need, enforced through role-based access controls.
Fraud Monitoring Automated systems monitor for unusual account activity, suspicious login patterns, and potential fraudulent transactions 24/7.
Staff Training All Spin7 staff who handle player data receive regular privacy and data security training and are bound by confidentiality obligations.
Regular Audits Spin7's data security practices are reviewed and tested regularly to identify and address any vulnerabilities.

Data Breach Response: In the unlikely event of a personal data breach that may affect your rights, Spin7 will notify affected players and the National Privacy Commission as required under the Data Privacy Act, within the legally required timeframes.

9Your Rights Over Your Personal Data

Under the Philippine Data Privacy Act and applicable regulations, you have the following rights regarding your personal data held by Spin7:

Right What It Means How to Exercise It
Right to Access You can request a copy of the personal data Spin7 holds about you, along with information about how it is processed. Email support@spin7.my with subject "Data Access Request"
Right to Correction You can request correction of inaccurate or incomplete personal data that Spin7 holds about you. Update via account settings or contact support
Right to Erasure You can request deletion of your personal data where it is no longer necessary for the original purpose or where you withdraw consent. Subject to legal retention obligations. Email support@spin7.my with subject "Data Deletion Request"
Right to Object You can object to processing based on legitimate interests, including direct marketing communications. Unsubscribe from marketing emails or contact support
Right to Data Portability You can request your personal data in a structured, commonly used, machine-readable format where technically feasible. Email support@spin7.my with subject "Data Portability Request"
Right to Complain If you believe Spin7 has not handled your data correctly, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Visit privacy.gov.ph for NPC complaint procedures

Spin7 aims to respond to all data subject requests within 30 calendar days. In complex cases, we may require an additional 30 days, in which case we will notify you of the extension and reason. We may need to verify your identity before processing your request.

10Children's Privacy

Spin7 is strictly intended for adults aged 18 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18. If you are under 18, you must not use the Spin7 platform or provide any personal data to us.

If Spin7 discovers that personal data has been collected from a minor, we will take immediate steps to delete that data and close the relevant account. If you believe that a minor has registered on Spin7, please contact us at support@spin7.my immediately so we can investigate and act.

11International Data Transfers

Some of the third-party service providers used by Spin7 — such as cloud infrastructure providers, game content providers, and technical support tools — may process data outside of the Philippines. Where this occurs, Spin7 ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act, including:

  • Data processing agreements with all third-party processors that include binding data protection obligations.
  • Transfer only to countries or processors with adequate data protection standards as recognised by relevant authorities.
  • Standard contractual clauses or equivalent mechanisms where required.

Spin7 maintains a record of all third-party processors handling player data and conducts periodic reviews of their data protection practices.

12Updates to This Privacy Policy

Spin7 reviews this Privacy Policy regularly and will update it when our data practices change, when there are legal or regulatory developments that affect how we process data, or when we add new products or services to the platform.

When material changes are made to this Policy, Spin7 will notify registered players via email or in-platform notification before the changes take effect. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

We encourage you to review this Policy periodically to stay informed about how Spin7 handles your personal data. Continued use of the Spin7 platform after a Policy update constitutes your acknowledgement of the revised version.

13How to Contact Spin7 About Privacy

If you have any questions about this Privacy Policy, how Spin7 processes your personal data, or if you want to exercise any of your data subject rights, please reach out through the following channels:

  • Email: support@spin7.my — Use the subject line "Data Privacy" for faster routing to our privacy team.
  • Live Chat: Available 24/7 through your Spin7 account dashboard.
  • Postal: Contact details available upon request for formal written correspondence.

For questions specifically about gaming-related data tools such as deposit limits or self-exclusion, visit the Spin7 Responsible Gaming page or contact support directly. For general platform questions, the Spin7 FAQ may have the answer you're looking for.

Your Data Is Safe at Spin7 – Now Let's Play

Now that you know how Spin7 handles your privacy, create your free account and enjoy PBA betting, live baccarat, fishing games, and more — all in Philippine Peso via GCash or Maya.