Privacy Policy

1. Introduction and Scope

Welcome to the 3spin Privacy Policy. 3spin Gaming Corporation ("3spin," "we," "us," or "our") is committed to protecting the privacy and personal data of all users ("you," "User," "Player") who access or use our online gaming platform at https://3spin.cam and associated mobile applications (collectively, the "Platform").

This Privacy Policy describes our practices concerning the collection, use, storage, disclosure, and protection of your personal information in accordance with:

• Republic Act No. 10173 – Data Privacy Act of 2012 (DPA)
• National Privacy Commission (NPC) Circulars and issuances
• Philippine Amusement and Gaming Corporation (PAGCOR) regulations
• Anti-Money Laundering Act (AMLA) and related regulations
• International best practices and standards where applicable

By creating an account or using 3spin Services, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy. If you do not agree with this Policy, please discontinue use of the Platform immediately.

2. Data Controller Information

3spin Gaming Corporation is the data controller responsible for your personal information collected through the Platform. Our Data Protection Officer (DPO) oversees compliance with Philippine data privacy laws and serves as your primary contact for privacy-related inquiries.

Data Controller Details:

• Company Name: 3spin Gaming Corporation
• Business Address: Manila, Metro Manila, Philippines
• Email: [email protected]
• Data Protection Officer: [email protected]
• Customer Support: [email protected] (24/7)
• PAGCOR License Number: [License Number]

3. Information We Collect

3spin collects and processes various categories of personal data necessary to provide gaming services, comply with regulatory obligations, and enhance user experience. We collect information through multiple channels including direct input, automated technologies, and third-party sources.

3.1 Information You Provide Directly

When you register for a 3spin account or use our services, you voluntarily provide:

• Account Registration Data: Full name, date of birth, gender, email address, mobile phone number, residential address, nationality
• Identity Verification Documents: Government-issued ID (passport, driver's license, national ID), proof of address (utility bills, bank statements), selfie photos with ID
• Financial Information: Payment method details (GCash number, bank account information, e-wallet accounts), transaction history, deposit and withdrawal records
• Communication Data: Customer support inquiries, chat messages, email correspondence, survey responses, feedback submissions
• Voluntary Information: Profile preferences, gaming preferences, marketing communication preferences, self-exclusion requests

3.2 Information Collected Automatically

When you access or use the Platform, we automatically collect:

• Device Information: Device type, operating system, browser type and version, device identifiers (IMEI, MAC address), screen resolution, time zone settings
• Usage Data: Pages visited, features used, games played, bet amounts, win/loss records, session duration, click patterns, navigation paths
• Technical Data: IP address, geolocation data (country, city, region), cookies and similar tracking technologies, server logs
• Performance Metrics: Platform errors, crash reports, loading times, connection quality

3.3 Information from Third Parties

• Payment Processors: Transaction verification, payment status updates, fraud detection alerts from GCash, PayMaya, banks, and other payment partners
• Identity Verification Providers: Document authenticity checks, facial recognition matching, sanctions screening results
• Game Providers: Game session data, RNG outcomes, progressive jackpot contributions
• Marketing Partners: Referral source information, campaign performance data (with consent)
• Public Databases: Sanctions lists, politically exposed persons (PEP) databases, adverse media screening (as required by AMLA)

4. How We Use Your Personal Data

3spin processes your personal information for specific, legitimate purposes in compliance with the Data Privacy Act. Our lawful bases for processing include: (1) performance of contract, (2) legal obligation, (3) legitimate interests, and (4) consent where required.

4.1 Account Management and Service Delivery

• Create and maintain your 3spin user account
• Verify your identity and age (21+ requirement)
• Process deposits, withdrawals, and payment transactions
• Provide access to games, promotions, and platform features
• Calculate and credit bonuses, rewards, and winnings
• Maintain transaction records and account statements
• Provide customer support and respond to inquiries

4.2 Legal and Regulatory Compliance

• Comply with PAGCOR licensing requirements and reporting obligations
• Fulfill Anti-Money Laundering Act (AMLA) and Know Your Customer (KYC) requirements
• Conduct enhanced due diligence on high-risk transactions
• Report suspicious transactions to the Anti-Money Laundering Council (AMLC)
• Respond to lawful requests from regulatory authorities, law enforcement, and courts
• Maintain audit trails and records as required by law (minimum 5 years for financial records)
• Enforce age restrictions and prevent access by excluded persons

4.3 Fraud Prevention and Platform Security

• Detect and prevent fraudulent activity, money laundering, and payment fraud
• Identify duplicate accounts and multi-accounting violations
• Monitor for collusion, chip dumping, and other forms of gaming abuse
• Protect against unauthorized access, hacking attempts, and cyber attacks
• Implement risk-based authentication and security measures
• Investigate Terms of Service violations and policy breaches

4.4 Responsible Gaming and Player Protection

• Monitor gaming behavior for signs of problem gambling
• Enforce deposit limits, loss limits, and session time restrictions
• Process self-exclusion requests and maintain exclusion lists
• Provide access to responsible gaming tools and resources
• Share information with PAGCOR's National Council on Problem Gambling when required

4.5 Marketing and Communications (With Consent)

• Send promotional offers, bonuses, and special event notifications
• Deliver personalized game recommendations and content
• Conduct market research and player satisfaction surveys
• Analyze user preferences to improve marketing effectiveness

You may opt out of marketing communications at any time through account settings or by contacting [email protected]. Transactional and regulatory communications cannot be opted out of.

4.6 Platform Improvement and Analytics

• Analyze platform usage patterns to identify improvements
• Optimize game performance, loading times, and user experience
• Conduct A/B testing on features and interfaces
• Generate aggregated, anonymized statistics for business intelligence
• Train machine learning models for fraud detection and personalization (using anonymized data)

5. Data Sharing and Disclosure

3spin does not sell your personal information to third parties. We share your data only in the following limited circumstances, with appropriate safeguards:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers who process data on our behalf under strict confidentiality obligations:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other financial institutions for transaction processing
• Identity Verification Services: KYC providers, document authentication services, facial recognition technology providers
• Game Providers: Licensed casino game suppliers, live dealer streaming partners, sports betting data providers
• Cloud Hosting: Secure server infrastructure and data storage providers
• Customer Support Tools: Live chat platforms, email services, helpdesk software
• Marketing Services: Email campaign platforms, SMS gateways, analytics providers (when you consent to marketing)

All service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with Philippine data privacy laws.

5.2 Regulatory and Legal Disclosures

We disclose personal information when required or permitted by law:

• To PAGCOR for licensing compliance, audits, and regulatory investigations
• To the Anti-Money Laundering Council (AMLC) for suspicious transaction reports
• To law enforcement agencies pursuant to valid court orders, subpoenas, or search warrants
• To government authorities investigating tax evasion, fraud, or criminal activity
• To the National Privacy Commission (NPC) in response to data breach investigations or complaints

5.3 Business Transfers

In the event of a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred to the successor entity. You will be notified via email and platform notice before any such transfer, and the new entity will remain bound by this Privacy Policy unless you consent to a new policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized statistical data that cannot identify individual users with business partners, industry analysts, or researchers. This includes metrics like overall platform usage, popular games, and demographic trends.

6. Data Security Measures

3spin employs industry-leading technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

6.1 Technical Safeguards

• Encryption: All data transmissions use TLS 1.3 encryption. Sensitive data at rest is encrypted using AES-256 encryption standards.
• Access Controls: Role-based access controls (RBAC) ensure only authorized personnel access personal data on a need-to-know basis.
• Authentication: Multi-factor authentication (MFA) for administrative access. Two-factor authentication (2FA) available for user accounts.
• Firewall Protection: Advanced firewall systems and intrusion detection/prevention systems (IDS/IPS) protect against cyber threats.
• Regular Security Audits: Quarterly penetration testing and vulnerability assessments by independent security firms.
• DDoS Protection: Content delivery network (CDN) and DDoS mitigation services protect platform availability.

6.2 Organizational Safeguards

• Comprehensive employee training on data privacy and security protocols
• Confidentiality agreements for all employees and contractors with data access
• Background checks for personnel handling sensitive data
• Incident response plan for data breaches with 72-hour NPC notification requirement
• Regular policy reviews and compliance monitoring by our Data Protection Officer
• Secure disposal protocols for data that is no longer needed (shredding, degaussing, secure erasure)

6.3 Your Security Responsibilities

Account security is a shared responsibility. You must:

• Use a strong, unique password and change it regularly
• Enable two-factor authentication (2FA) in account settings
• Never share your login credentials with others
• Log out after each session, especially on shared devices
• Report suspicious account activity immediately to [email protected]
• Keep your registered email address and mobile number secure

7. Data Retention Periods

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements.

7.1 Retention Schedule

• Active Account Data: Retained for the duration of your account's active status
• Transaction Records: Minimum 5 years from transaction date (AMLA requirement)
• Identity Verification Documents: 5 years following account closure (regulatory requirement)
• Customer Support Communications: 3 years from last interaction
• Marketing Consent Records: Until consent is withdrawn, then deleted within 30 days
• Self-Exclusion Records: Permanently retained to prevent re-registration (even after exclusion period ends)
• Closed Account Data: 90 days for operational purposes, then securely deleted (except records required by law)

7.2 Deletion After Retention Period

Once the retention period expires and no legal obligation requires continued storage, we securely delete or anonymize your personal data using industry-standard data destruction methods. Backups containing personal data are overwritten within 90 days of deletion.

8. Your Data Privacy Rights

Under the Philippine Data Privacy Act, you have the following rights regarding your personal information. 3spin respects and facilitates the exercise of these rights.

8.1 Right to be Informed

You have the right to know how your personal data is collected, used, and shared. This Privacy Policy serves as our primary transparency mechanism. You may request additional details at any time.

8.2 Right to Access

You may request a copy of all personal data we hold about you. Access requests will be fulfilled within 15 days. You can download your account data directly through the account settings page.

8.3 Right to Rectification

If your personal data is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most information directly in your account settings. For changes requiring verification (name, date of birth), contact our support team with supporting documentation.

8.4 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent (where consent was the legal basis for processing)
• The data was unlawfully processed
• There is no overriding legitimate interest for continued processing

Limitations: We cannot delete data required by law (e.g., 5-year financial records under AMLA) or data needed to establish, exercise, or defend legal claims. Self-exclusion records are permanently retained to protect your welfare.

8.5 Right to Object

You may object to processing of your personal data for:

• Direct marketing purposes (opt-out links provided in all marketing emails)
• Automated decision-making and profiling
• Processing based on legitimate interests (we will cease unless we demonstrate compelling legitimate grounds)

8.6 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (CSV or JSON) and to transmit that data to another service provider. Data portability requests are fulfilled within 30 days.

8.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal. To withdraw marketing consent, click "Unsubscribe" in any promotional email or adjust preferences in account settings.

8.8 How to Exercise Your Rights

To exercise any of these rights, contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: "Data Subject Rights Request – [Your Name]"
• Include: Your full name, registered email address, specific right you wish to exercise, and any supporting documentation

We will respond to verified requests within 15 days. If we need additional time (up to 30 days for complex requests), we will notify you and explain the delay. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive.

9. Cookies and Tracking Technologies

3spin uses cookies and similar technologies to enhance platform functionality, analyze usage patterns, and deliver personalized content. This section explains what cookies we use and how to manage them.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for platform operation (session management, security, authentication). Cannot be disabled.
• Functional Cookies: Remember your preferences (language, currency, game favorites). Can be disabled, but functionality will be limited.
• Performance Cookies: Collect anonymous usage statistics to improve platform performance. Used for analytics and optimization.
• Marketing Cookies: Track your activity for personalized advertising and promotional offers. Require explicit consent.

9.2 Third-Party Cookies

We use Google Analytics, Facebook Pixel, and other third-party analytics tools to understand user behavior. These services may set their own cookies. You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on.

9.3 Managing Cookie Preferences

You can manage cookie settings through your browser settings (Chrome, Firefox, Safari, Edge all provide cookie management tools). Disabling certain cookies may affect platform functionality. To adjust marketing cookies, use the cookie consent banner on your first visit or manage preferences in account settings.

10. International Data Transfers

3spin primarily stores data within the Philippines. However, some service providers (cloud hosting, game providers, payment processors) may process data in other jurisdictions. When we transfer personal data outside the Philippines, we ensure adequate protection through:

• European Commission-approved Standard Contractual Clauses (SCCs)
• Service providers certified under internationally recognized security frameworks (ISO 27001, SOC 2)
• Contractual obligations requiring equivalent data protection standards
• National Privacy Commission-approved cross-border data transfer mechanisms

All international transfers comply with NPC Circular No. 16-03 on cross-border data transfers.

11. Protection of Minors' Privacy

3spin strictly prohibits use of the Platform by individuals under 21 years of age. We do not knowingly collect, use, or disclose personal information from minors. Our registration process includes age verification mechanisms.

If we discover that a minor has created an account or provided personal information, we will:

• Immediately suspend the account
• Delete all personal information associated with the account
• Forfeit any funds or winnings (as required by PAGCOR regulations)
• Notify the National Privacy Commission if required

If you believe a minor has accessed 3spin, report it immediately to [email protected].

12. Changes to This Privacy Policy

3spin reserves the right to update this Privacy Policy to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated via:

• Email notification to your registered email address (at least 14 days prior to changes taking effect)
• Prominent notice on the Platform homepage
• In-app notification for mobile users

The "Last Updated" date at the top of this Policy indicates when changes were made. We encourage you to review this Policy periodically. Continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

If changes require new consent (e.g., processing data for new purposes), we will request explicit consent through account login prompts or email confirmation.

13. Contact Information and Complaints

13.1 Privacy Inquiries

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

• Data Protection Officer: [email protected]
• Privacy Team: [email protected]
• Customer Support: [email protected] (24/7)
• Phone: +63 (2) 8123-4567
• Live Chat: Available on Platform 24/7

13.2 Filing Complaints with the NPC

If you believe your data privacy rights have been violated, you have the right to file a complaint with the National Privacy Commission:

• National Privacy Commission
• 5th Floor, Philippine International Convention Center (PICC)
• CCP Complex, Roxas Boulevard, Pasay City 1308
• Email: [email protected]
• Hotline: (02) 8234-2228
• Website: https://www.privacy.gov.ph

We encourage you to contact us first to resolve any concerns, but you may file a complaint with the NPC at any time.

By using 3spin Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. Your privacy is our priority, and we are committed to protecting your personal data in accordance with Philippine law.