8spin Privacy
Policy

1. Who We Are

8spin is an online casino and sports betting platform operating at 8spin.bet, offering Filipino players access to slots, live casino games, sports betting, e-sabong, and bingo. 8spin operates under applicable Philippine gaming regulations and is subject to oversight by the Philippine Amusement and Gaming Corporation (PAGCOR).

For the purposes of the Data Privacy Act of 2012 (Republic Act 10173) and its implementing rules and regulations, 8spin acts as the Personal Information Controller in respect of the personal data it collects directly from players. Where 8spin engages third-party service providers to process data on its behalf, those providers act as Personal Information Processors under 8spin's written instruction.

All privacy-related concerns, data subject requests, and complaints may be directed to 8spin's designated Data Protection Officer (DPO) whose contact details are provided in Section 14 of this Policy.

2. Data We Collect

8spin collects personal data through multiple touchpoints across the platform. The categories of data we collect, and the circumstances in which we collect them, are described below.

2.1 Registration Data. When you create an 8spin Account, we collect the following mandatory information:

• Full legal name (as it appears on a valid Philippine government-issued ID);
• Date of birth (for mandatory 21+ age verification);
• Mobile number registered with your Philippine carrier;
• Email address;
• Username and encrypted password;
• City of residence (e.g., Manila, Cebu, Davao, Quezon City, Makati).

2.2 KYC Verification Data. In compliance with PAGCOR regulations and the Anti-Money Laundering Act (AMLA), we collect:

• Government-issued photo ID (e.g., PhilSys National ID, passport, UMID, driver's licence, SSS/GSIS card);
• Proof of address documentation;
• Selfie or live-photo for biometric identity matching;
• Source of funds declaration where required by regulatory threshold.

2.3 Transaction Data. Each time you deposit or withdraw funds, we record:

• Transaction amount in Philippine Peso (PHP);
• Payment method used (e.g., GCash, Maya, BPI, BDO);
• Transaction reference numbers and timestamps;
• Account balance history.

2.4 Gaming Activity Data. We record gameplay metadata including game titles played, bet amounts, outcomes, session durations, and bonus utilisation — primarily for regulatory compliance, responsible gaming monitoring, and platform improvement purposes.

2.5 Technical & Device Data. When you access 8spin, our servers automatically collect:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Referral URLs and on-site navigation path;
• Session timestamps and interaction logs.

2.6 Communications Data. If you contact 8spin support via live chat or email, we retain transcripts and message records to resolve disputes, improve service quality, and meet regulatory recordkeeping requirements.

3. How We Use Your Data

8spin uses the personal data we collect for the following specific, declared purposes:

• Account creation and management — to register your account, verify your identity, and maintain your player profile;
• Age verification — to confirm that all players are 21 years of age or older, as required by Philippine gaming law;
• Payment processing — to facilitate secure deposits and withdrawals via GCash, Maya, QR Ph, and other supported channels;
• Regulatory compliance — to fulfil our obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012;
• Fraud detection and prevention — to identify and investigate suspicious activity, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms and Conditions;
• Responsible gaming — to monitor gaming patterns that may indicate problem gambling behaviour, and to enforce player-initiated self-exclusion and deposit limit settings;
• Customer support — to resolve queries, disputes, and complaints submitted through live chat or email;
• Platform improvement — to analyse aggregated, anonymised usage data and improve the design, performance, and game selection of the 8spin platform;
• Marketing communications — to send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications.

8spin does not use automated decision-making or profiling in a manner that produces significant legal effects on players without human review. Where algorithmic risk-scoring is applied (such as in AML transaction monitoring), flagged cases are reviewed by a compliance team member before any account action is taken.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012 and its implementing rules, 8spin processes personal data on the basis of one or more of the following lawful grounds:

• Consent — you have provided express, freely given, specific, and informed consent, including consent to receive marketing communications where applicable;
• Performance of a contract — processing is necessary to perform our obligations under the 8spin Terms and Conditions, which constitute a binding contract between you and 8spin;
• Legal obligation — processing is required to comply with applicable Philippine law, including PAGCOR regulatory directives, AMLA obligations, and NPC-mandated data practices;
• Legitimate interests — processing is necessary for 8spin's legitimate business interests, including fraud prevention, platform security, and regulatory reporting, provided such interests do not override your fundamental rights and freedoms.

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal. Withdrawal of consent for certain data uses (such as KYC verification) may result in restrictions to your account access as required by regulatory obligations.

5. Sharing Your Data

8spin does not sell or rent your personal data to third parties for their own marketing purposes. We share personal data only in the circumstances described below, and only to the extent strictly necessary for each purpose:

5.1 Game Providers. To deliver casino games and sports betting markets on the 8spin platform, we share limited player data (such as player ID and currency) with licensed third-party game content providers. These providers are contractually bound to process such data solely for game operation purposes.

5.2 Payment Processors. Transaction data is shared with your chosen payment service provider (such as GCash, Maya, BPI, or BDO) solely to process your deposit or withdrawal request. These processors operate under their own privacy policies and are independently regulated by the Bangko Sentral ng Pilipinas (BSP).

5.3 Identity Verification Partners. KYC verification is conducted with the assistance of third-party identity verification technology providers who process document images and biometric data under 8spin's written data processing instructions and applicable NPC requirements.

5.4 Fraud & AML Compliance. Where our fraud detection or AML monitoring systems identify suspicious activity, relevant transaction and identity data may be shared with the Anti-Money Laundering Council (AMLC) or other Philippine law enforcement agencies as required by the AMLA and its implementing regulations.

5.5 Regulatory Authorities. PAGCOR and other duly authorised Philippine regulatory bodies may request access to player data as part of their licensing oversight functions. 8spin will comply with such requests to the extent required by applicable law.

5.6 Professional Advisors. Legal counsel, auditors, and insurance providers may access limited personal data on a need-to-know basis and are bound by professional confidentiality obligations.

6. Cookies & Tracking Technologies

8spin uses cookies and similar tracking technologies to operate, secure, and improve the platform. The categories of cookies we use are described below:

• Essential Cookies — required for the platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing platform functionality.
• Analytics Cookies — used to collect aggregated, anonymised data on how players navigate the platform, which pages are most visited, and where errors occur. This data helps us improve platform performance and user experience.
• Preference Cookies — store your language preferences, display settings, and other personalisation choices to improve your platform experience across sessions.
• Marketing Cookies — with your consent, used to deliver relevant promotional content and measure the effectiveness of 8spin marketing campaigns. You may opt out of marketing cookies at any time via your Account settings or by rejecting non-essential cookies at the cookie consent banner.

You may control cookie settings through your browser preferences. Please note that disabling essential cookies will prevent you from accessing core platform features including login and cashier functions. For full details on individual cookies used, please refer to our Cookie Notice available within the 8spin platform settings.

7. Data Security

8spin implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• TLS 1.3 encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data fields stored at rest in our databases;
• Bcrypt password hashing — your password is never stored in recoverable plain text;
• Payment tokenisation — we do not store raw card or e-wallet credentials; payment references are tokenised by our payment processor partners;
• Two-factor authentication (2FA) — available to all players and required for certain high-value withdrawal transactions;
• Role-based access controls (RBAC) — internal access to player data is restricted to authorised personnel on a strict need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent third-party security firms;
• 24/7 security monitoring with automated anomaly detection and incident response protocols.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, 8spin will notify affected players and the National Privacy Commission (NPC) in accordance with the NPC's breach notification requirements, which mandate notification within 72 hours of becoming aware of a qualifying breach.

8. Data Retention

8spin retains personal data for the periods necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by applicable Philippine law. Our standard retention schedule is as follows:

At the end of an applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data forms part of an ongoing investigation, legal proceeding, or regulatory inquiry, retention will be extended until that matter is fully resolved.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and NPC implementing regulations, you hold the following rights in respect of your personal data held by 8spin:

• Right to be Informed — you have the right to know what personal data 8spin holds about you, how it is being used, and with whom it has been shared.
• Right of Access — you may request a copy of the personal data 8spin holds about you in a commonly used electronic format.
• Right to Rectification — if any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it. For certain fields (such as your registered name), correction will require documentary evidence such as a government-issued ID.
• Right to Erasure — in certain circumstances, you may request that 8spin delete your personal data. This right is subject to overriding retention obligations under PAGCOR regulations and the AMLA. We will inform you of any data we are legally required to retain following a deletion request.
• Right to Data Portability — you may request that your personal data be transferred to you or to another controller in a structured, commonly used, machine-readable format, to the extent technically feasible.
• Right to Object — you may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you believe your fundamental rights override those interests.
• Right to Withdraw Consent — where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint — if you believe 8spin has mishandled your personal data, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact 8spin's Data Protection Officer as described in Section 14. We will acknowledge your request within five (5) Philippine business days and provide a substantive response within thirty (30) calendar days, or within any shorter period required by applicable NPC regulations.

10. Children & Minors

8spin is strictly an adult gaming platform. We do not knowingly collect personal data from individuals under the age of 21. The minimum age to register an account and participate in any gaming or betting activity on 8spin is 21 years, in accordance with Philippine gaming regulations applicable to casino-style online gambling.

During registration, all applicants are required to declare their date of birth. Where our age verification systems identify a potential underage registration — or where a player's submitted KYC documents reveal they are under 21 — the account will be immediately suspended pending investigation. Any funds deposited by a verified underage player will be returned to the source payment method after deducting the cost of any withdrawals previously processed. Any winnings accumulated during the underage usage period will be forfeited in full.

If you are a parent or guardian and have reason to believe a person under 21 has accessed 8spin using your payment details or personal information, please contact our support team immediately via live chat so we can investigate and take appropriate action without delay.

11. International Data Transfers

8spin's primary data infrastructure is hosted within or operated in compliance with Philippine data residency requirements. However, some of our third-party service providers — including game content providers, cloud infrastructure partners, and fraud detection vendors — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, 8spin ensures that such transfers are conducted only to recipients who provide an adequate level of data protection, as determined either by NPC guidance, by contractual mechanisms such as Standard Contractual Clauses, or by the recipient's participation in an equivalent recognised data protection framework.

By using the 8spin platform and accepting this Privacy Policy, you consent to the transfer of your personal data to the countries and service providers described in this Policy, subject to the safeguards outlined above. If you would like further information about the specific safeguards in place for any international transfer, please contact our Data Protection Officer.

12. Third-Party Services & Links

The 8spin platform may reference or link to third-party services such as payment providers (GCash, Maya, BPI, BDO), game content platforms, or PAGCOR's official regulatory resources. These third-party services operate under their own independent privacy policies, and 8spin is not responsible for the data practices of any third party.

When you initiate a payment through GCash or Maya, for example, you are engaging directly with those platforms' systems and your transaction data on their side is governed by their respective privacy notices. We encourage you to review the privacy policies of any third-party service you interact with in connection with your 8spin Account.

8spin does not embed third-party advertising scripts or social media tracking pixels on its platform that would enable external parties to profile your gaming behaviour for advertising purposes without your knowledge and consent.

13. Amendments to This Policy

8spin reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. When material changes are made, 8spin will notify registered players via email and/or a prominent notice on the platform at least seven (7) days before the changes take effect — except where immediate changes are required by law or regulatory directive.

The "Last Updated" date displayed at the top of this page indicates when the current version of the Privacy Policy became effective. Your continued use of the 8spin platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree to the revised Policy, you should stop using 8spin and request account closure in accordance with our Terms and Conditions.

All previous versions of this Privacy Policy are archived and available upon written request to our Data Protection Officer. We recommend reviewing this page periodically to stay informed of any changes to how your personal data is handled.

14. Contact & Data Protection Officer

For all privacy-related queries, data subject access requests, consent withdrawals, or complaints regarding 8spin's handling of your personal data, you may contact our designated Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24/7 through the 8spin platform — select "Privacy / Data Request" from the support topic menu for priority routing to our DPO team.
• Email: [email protected] — please use the subject line "Data Privacy Request" to ensure prompt handling.

Please include your registered Account username, a clear description of your request or concern, and any relevant reference numbers or dates when reaching out. This will allow our DPO team to locate your records and respond as efficiently as possible.

If you are not satisfied with 8spin's response to a privacy concern, you have the right to escalate your complaint directly to the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory body responsible for enforcing the Data Privacy Act of 2012.