Privacy Policy — ispin88

§ 1 Scope & Application

This Privacy Policy applies to all personal data collected, processed, stored, or otherwise handled by ispin88 in connection with the operation of the online gaming platform accessible at ispin88.bio. It covers all registered players, prospective players who access the platform without completing registration, and visitors who browse the ispin88 website from any device.

This policy applies to personal data collected through the ispin88 website, any associated mobile-optimised interfaces, customer support communications (including live chat and email), and any other touchpoint through which ispin88 interacts with individuals in its capacity as a personal data controller.

This Privacy Policy should be read together with the ispin88 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By registering an ispin88 Account or by continuing to use the platform after this policy has been made available to you, you acknowledge that you have read and understood its contents.

§ 2 Personal Data We Collect

ispin88 collects only the personal data that is necessary and proportionate to the purposes described in Section 4 of this policy. The categories of personal data we collect are set out in the table below.

§ 3 How We Collect Your Data

3.1 Data You Provide Directly

The majority of personal data ispin88 holds about you is data you provide voluntarily during the following interactions: completing the account registration form; submitting KYC documentation in response to a verification request; initiating a deposit or withdrawal transaction; contacting Customer Support via email or live chat; and responding to optional surveys or promotional communications.

3.2 Data Collected Automatically

When you access the ispin88 platform — whether or not you are logged in — our servers and analytics systems automatically record certain technical data, including your IP address, device identifiers, browser configuration, referring URL, pages visited, session duration, and clickstream data. This data is collected using server logs, cookies, and similar technologies as described in Section 8.

3.3 Data from Third Parties

ispin88 may receive personal data about you from the following third-party sources: payment processors (GCash, PayMaya, BDO, BPI, Metrobank) for the purpose of confirming deposit and withdrawal transactions; KYC and identity verification service providers for the purpose of validating the authenticity of documents you have submitted; and fraud detection and AML screening providers who may share risk signals or watchlist matches relating to your identity.

§ 4 Purposes of Processing

ispin88 processes your personal data for the following specific, legitimate purposes:

• Account creation and management: To register your ispin88 Account, authenticate your identity on login, and maintain the accuracy of your account profile.
• Game provision and platform operation: To deliver the games and features available on the ispin88 platform, process bets, calculate winnings, and maintain game session records.
• Payment processing: To receive your deposits in Philippine Peso (PHP), process your withdrawal requests, and maintain transaction records via GCash, PayMaya, BDO, BPI, and Metrobank.
• KYC and identity verification: To verify that you meet the 21+ age requirement and to confirm the accuracy of the information you have provided, as required by applicable law and our operating context.
• Anti-money laundering (AML) compliance: To monitor transactions for patterns consistent with money laundering, terrorist financing, or other financial crimes, and to report suspicious activity to the Anti-Money Laundering Council (AMLC) where required by law.
• Responsible Gaming: To identify players who may be experiencing gambling-related harm, to apply self-exclusion and deposit limit tools, and to communicate responsible gaming resources.
• Customer support: To respond to your inquiries, investigate complaints, and resolve disputes relating to your account, transactions, or game outcomes.
• Fraud prevention and platform security: To detect and prevent multi-accounting, bonus abuse, unauthorised access, and other fraudulent or prohibited activities.
• Legal and regulatory compliance: To meet our obligations under Philippine law, including RA 10173, the Anti-Money Laundering Act, and applicable PAGCOR regulatory requirements.
• Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving the ispin88 platform, game offerings, and user experience.
• Direct marketing (with consent): To send you promotional communications about ispin88 bonuses, new games, and offers, where you have given your express consent to receive such communications and have not subsequently withdrawn it.

§ 5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, ispin88 must have a lawful basis for processing your personal data. The applicable legal bases for ispin88's processing activities are as follows:

• Contractual necessity: Processing required to perform our obligations under the ispin88 Terms & Conditions to which you are a party — including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML reporting obligations and PAGCOR compliance requirements.
• Legitimate interests: Processing necessary for ispin88's legitimate operational interests, including fraud prevention, platform security, and improving game performance, where these interests are not overridden by your rights and freedoms.
• Consent: Processing of personal data for direct marketing communications, where your prior, specific, and freely given consent has been obtained. You may withdraw marketing consent at any time by contacting support or using the unsubscribe function in any marketing email.

§ 6 Data Sharing & Disclosure

ispin88 does not sell your personal data. We share personal data only in the following limited circumstances and only to the extent necessary for the relevant purpose:

6.1 Service Providers

ispin88 engages trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include: payment processors (GCash, PayMaya, BDO, BPI, Metrobank); KYC and identity verification providers; IT infrastructure and hosting providers; customer support platform providers; and fraud detection and AML screening services. All service providers are contractually required to process data only on ispin88's documented instructions and to implement appropriate security measures.

6.2 Regulatory and Law Enforcement Bodies

ispin88 may disclose personal data to the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), PAGCOR, or other competent Philippine government authorities where we are required to do so by law, court order, or in response to a valid regulatory inquiry. We will notify you of such disclosures where permitted by law.

6.3 Game Content Providers

Certain game providers — such as JILI Games — may receive limited session-level technical data necessary to deliver and verify their game content on the ispin88 platform. Game providers do not receive your identity data, contact data, or financial data.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of ispin88's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy protections applicable to your data under the new operator before the transfer takes effect.

§ 7 Data Retention

ispin88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The key retention periods applicable to your data are set out below:

Upon expiry of the applicable retention period, ispin88 will securely delete or anonymise your personal data in accordance with our internal data disposal procedures. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

§ 8 Cookies & Tracking Technologies

ispin88 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, maintain your login session, and improve your user experience. The categories of cookies used by ispin88 are described below:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a gaming session and security tokens that protect against cross-site request forgery. You cannot opt out of strictly necessary cookies while using the platform.
• Functional cookies: Used to remember your platform preferences, such as language settings, game lobby sort order, and display preferences. These improve your experience but are not essential to platform operation.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the ispin88 platform — such as which pages are visited most frequently and where players encounter navigation difficulties. This data is used solely to improve the platform and is not shared with third-party advertising networks.

ispin88 does not use third-party advertising or behavioural tracking cookies that monitor your activity across websites unrelated to ispin88.

§ 9 Data Security

ispin88 implements a layered security framework designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Encryption in transit: All data transmitted between your device and the ispin88 platform is encrypted using 256-bit SSL/TLS protocols. HTTPS is enforced across the entire ispin88 domain.
• Encryption at rest: Sensitive personal data — including government ID numbers and financial account references — is stored in encrypted form on our servers using industry-standard encryption algorithms.
• Access controls: Access to systems that store personal data is restricted to authorised ispin88 personnel on a strict need-to-know basis. All staff with data access undergo background screening and are bound by confidentiality obligations.
• Access logging and monitoring: All access to personal data stored on ispin88 systems is logged and subject to regular audit. Anomalous access patterns trigger automated security alerts.
• Penetration testing: ispin88 engages independent security professionals to conduct regular penetration tests of our platform and infrastructure.
• Two-factor authentication: ispin88 offers two-factor authentication (2FA) for player accounts and mandates it for internal administrative access to systems containing personal data.

§ 10 Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ispin88. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14.

• Right to be informed: The right to be told what personal data ispin88 holds about you, why it is processed, with whom it is shared, and how long it will be retained — as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data ispin88 holds about you in a structured, commonly used, and machine-readable format.
• Right to rectification: The right to request correction of any personal data that is inaccurate, incomplete, or outdated. You may update basic account information (such as your email address or contact number) directly through your Account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where the data has been unlawfully processed. This right is subject to overriding legal retention obligations described in Section 7.
• Right to object: The right to object to the processing of your personal data on the basis of legitimate interests, and the right to opt out of direct marketing communications at any time without giving reasons.
• Right to data portability: The right to receive a copy of personal data you have provided to ispin88 in a structured, machine-readable format and, where technically feasible, to request its direct transmission to another personal data controller.
• Right to damages: The right to claim compensation where you have suffered damage as a result of inaccurate, incomplete, outdated, false, or unlawfully obtained personal data held by ispin88.
• Right to complain to the NPC: The right to lodge a complaint with the National Privacy Commission if you believe ispin88 has breached its obligations under RA 10173. NPC contact details are available at privacy.gov.ph.

ispin88 will respond to all verified data rights requests within 15 calendar days of receipt. Complex requests may require up to 30 days; in such cases, we will notify you of the extension within the initial 15-day period.

§ 11 Children & Minors

The ispin88 platform is strictly for individuals who are 21 years of age or older, consistent with Philippine regulations governing real-money gaming. ispin88 does not knowingly collect personal data from individuals below the age of 21.

If ispin88 becomes aware that personal data has been collected from a person under the age of 21 — whether through a registration attempt, a KYC review, or any other means — we will immediately suspend the relevant account, delete the associated personal data to the extent permitted by our legal obligations, and take appropriate steps to prevent further access.

If you are a parent or guardian and believe that your child has registered on or accessed the ispin88 platform, please contact our support team immediately at the email address listed in Section 14 so that we can take prompt remedial action.

§ 12 Cross-Border Data Transfers

ispin88 is a Philippines-focused platform and processes the majority of player personal data within the Philippines. However, certain service providers engaged by ispin88 — including hosting infrastructure providers and game content providers — may operate servers or process data in other jurisdictions.

Where personal data is transferred outside of the Philippines, ispin88 ensures that such transfers are subject to appropriate safeguards, including contractual data processing agreements that incorporate data protection standards equivalent to those required under RA 10173. ispin88 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual protections.

§ 13 Amendments to This Policy

ispin88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform operations. Where an amendment is material — for example, where it introduces a new category of personal data processing or changes the way we share data with third parties — ispin88 will notify registered players by email or in-platform notification at least 7 days before the amendment takes effect.

Non-material amendments, such as corrections of typographical errors or clarifications that do not alter the substantive meaning of any provision, may be made without prior notice. The "Last Updated" date displayed at the top of this document will be revised with each amendment.

Your continued use of the ispin88 platform following the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with a material amendment, you may close your Account in accordance with the ispin88 Terms & Conditions.

§ 14 Contact & Data Protection Officer

ispin88 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and this Privacy Policy. If you have questions about how ispin88 processes your personal data, wish to exercise a data right under Section 10, or wish to report a potential data privacy concern, please contact:

ispin88 Data Protection Officer

Email: [email protected]

Platform: ispin88.bio

Operating jurisdiction: Philippines