Privacy Policy – 90phspin

1 Data Controller

90phspin ("we," "us," or "our") is the data controller responsible for the personal information collected through the 90phspin website at https://90phspin.vip and all associated services, games, and features. As data controller, 90phspin determines the purposes and means of processing your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, you may contact our Data Protection Officer (DPO) at:

We will respond to all data privacy inquiries within fifteen (15) business days in accordance with the requirements of the National Privacy Commission (NPC) of the Philippines.

2 Data We Collect

90phspin collects personal data that you provide directly, data generated through your use of the platform, and data received from third-party service providers. The categories of personal data we collect include:

2.1 Registration Data

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — you must be 21 or older)
• Email address and mobile phone number
• Residential address (city, province, postal code)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

• Government-issued photo ID (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license)
• Proof of address documents
• Selfie or liveness verification image for identity matching
• Payment method ownership documentation

2.3 Financial Data

• GCash or PayMaya account reference numbers
• BPI, BDO, or Metrobank account details (masked, for withdrawal processing)
• Transaction history: deposits, withdrawals, wagers, and bonus credits

2.4 Technical and Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, pages visited, and game activity logs
• Cookie identifiers and similar tracking technologies

2.5 Communications Data

• Records of your communications with 90phspin customer support
• Feedback, survey responses, and promotional opt-in preferences

3 Purpose of Processing

90phspin processes your personal data for the following purposes:

1. Account Management: To create, maintain, and administer your 90phspin player account, including authentication and account security.
2. Age and Identity Verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with PAGCOR requirements and Philippine AML regulations.
3. Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, and to maintain accurate financial records.
4. Game Provision: To deliver the 90phspin gaming experience, including slot games, live dealer tables, bingo, and specialty games, and to maintain game integrity.
5. Regulatory Compliance: To comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws and regulations.
6. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the platform.
7. Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
8. Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer self-exclusion, deposit limit, and other responsible gaming tools.
9. Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent. You may withdraw consent at any time.
10. Platform Improvement: To analyze usage patterns and improve the 90phspin platform, user experience, and game offerings.

4 Legal Basis for Processing

90phspin processes your personal data on the following legal bases under the Data Privacy Act of 2012 (RA 10173):

• Contractual Necessity: Processing required to perform the contract between you and 90phspin (i.e., providing gaming services, processing payments, managing your account).
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, AMLA, and NPC requirements.
• Legitimate Interests: Processing necessary for 90phspin's legitimate interests in fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing

90phspin does not sell your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank receive transaction data necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers receive identity documents and biometric data solely for the purpose of verifying your identity and age.
• Game Software Providers: Game developers and RNG auditors may receive anonymized gameplay data for game integrity and certification purposes.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies may receive data as required by law or regulatory directive.
• IT and Security Service Providers: Cloud hosting, cybersecurity, and fraud detection vendors who process data on our behalf under strict data processing agreements.
• Legal and Professional Advisors: Lawyers, auditors, and compliance consultants where disclosure is necessary for legal proceedings or regulatory compliance.

All third-party service providers engaged by 90phspin are contractually required to process personal data only for the specified purpose, maintain appropriate security measures, and comply with RA 10173.

6 Data Retention

90phspin retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention periods:

• Active Account Data: Retained for the duration of your account's active status plus five (5) years after account closure, in compliance with PAGCOR record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC and Identity Documents: Retained for five (5) years after account closure or the last transaction, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction.
• Marketing Consent Records: Retained until you withdraw consent, plus one (1) year for audit purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with NPC guidelines. Where data must be retained beyond these periods due to ongoing legal proceedings or regulatory investigations, it will be retained until the matter is resolved.

7 Data Security

90phspin implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data transmitted between your device and 90phspin servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest is encrypted using AES-256.
• Access Controls: Access to personal data is restricted to authorized personnel on a strict need-to-know basis. All staff with data access undergo background checks and regular privacy training.
• Firewalls and Intrusion Detection: 90phspin employs enterprise-grade firewalls, intrusion detection systems, and 24/7 security monitoring.
• Regular Security Audits: The platform undergoes periodic penetration testing and security audits by independent third-party security firms.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their 90phspin accounts for additional login security.

In the event of a personal data breach that is likely to result in harm to affected individuals, 90phspin will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with RA 10173 and NPC Circular 16-03.

8 Cookies Policy

90phspin uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how the platform is used.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game lobby layout, and responsible gaming limits you have set.
• Analytics Cookies: Help us understand how players use the 90phspin platform so we can improve performance and user experience. Data collected is aggregated and anonymized.
• Marketing Cookies: Used to deliver relevant promotional content to you based on your interests and gaming activity. These are only set with your consent.

8.2 Managing Cookies

You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the 90phspin platform. Instructions for managing cookies in common browsers are available in your browser's help documentation.

9 Your Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 90phspin:

• Right to Be Informed: The right to know what personal data 90phspin collects about you and how it is processed — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data 90phspin holds about you, along with information about how it is being used.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update basic account information directly through your account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 90phspin's legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You may unsubscribe from marketing communications at any time.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We will respond within fifteen (15) business days. We may need to verify your identity before processing your request.

10 Minors

The 90phspin platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. 90phspin does not knowingly collect personal data from individuals under the age of 21.

If 90phspin becomes aware that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all associated data will be deleted, and any deposits will be returned at 90phspin's discretion after deducting amounts wagered. If you believe a minor has registered on the platform, please notify us immediately at [email protected].

11 International Data Transfers

Some of 90phspin's service providers — including cloud hosting and KYC verification partners — may process personal data outside the Philippines. Where such transfers occur, 90phspin ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under RA 10173.
• Transfers only to jurisdictions recognized by the NPC as providing adequate data protection.
• Data processing agreements that restrict the use of your data to the specified purpose only.

By using the 90phspin platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

12 Policy Amendments

90phspin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the Privacy Policy was most recently revised. Your continued use of the 90phspin platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy.

We encourage you to review this Privacy Policy periodically. The current version is always available at 90phspin.vip/privacy-policy.