xdspin Privacy Policy

1. Scope and Data Controller

This Privacy Policy applies to all personal data collected and processed by xdspin in connection with the operation of the xdspin online gaming platform accessible at xdspin.cam and any related mobile or web applications (collectively, the "Platform").

xdspin acts as the Personal Information Controller (PIC) as defined under the Philippine Data Privacy Act of 2012 (Republic Act 10173, or "DPA"). As PIC, xdspin determines the purposes and means of processing your personal data.

This policy applies to all registered players, visitors, and individuals who interact with the xdspin Platform, including residents of Metro Manila, Cebu, Davao, Quezon City, Makati, and all other regions of the Philippines.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register an account, complete KYC verification, make transactions, or contact our support team, xdspin collects the following categories of personal data:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, nationality, government ID details	Registration & KYC verification
Contact Data	Email address, mobile number, residential address	Registration
Financial Data	GCash number, Maya account, bank account details, transaction history	Deposits & withdrawals
Verification Documents	Government ID scans, proof of address, selfie with ID	KYC verification
Communications	Support chat transcripts, email correspondence, feedback submissions	Customer support interactions

2.2 Data Collected Automatically

When you access and use the xdspin Platform, we automatically collect certain technical and behavioral data:

• Device and access data: IP address, device type, operating system, browser type and version
• Usage data: Pages visited, features accessed, time spent on Platform, click patterns, navigation paths
• Gaming data: Games played, bet amounts, win/loss records, session duration, game preferences
• Location data: General geographic location inferred from IP address (country and region level)
• Cookie and tracking data: Session identifiers, preference cookies, analytics data (see Section 6)

2.3 Data from Third Parties

xdspin may receive personal data from third parties in the following circumstances:

• Payment processors (GCash, Maya, BPI, BDO, and others) confirming transaction status and account holder details
• Identity verification service providers conducting automated document checks
• Fraud detection and anti-money laundering screening services
• Game providers transmitting gameplay records and results

3. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, xdspin processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill the xdspin service agreement with you, including account management, payment processing, and game access
• Legal obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering regulations (AMLA), KYC requirements under PAGCOR rules, and tax obligations
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and service improvement, where our legitimate interests are not overridden by your rights
• Consent: Processing for marketing communications, optional analytics features, and cookie categories beyond strictly necessary cookies — where your explicit opt-in consent has been obtained

4. How We Use Your Personal Data

xdspin uses collected personal data for the following specific purposes:

4.1 Account and Service Management

• Creating, verifying, and maintaining your xdspin player account
• Processing deposit and withdrawal transactions in Philippine Peso (PHP)
• Authenticating your identity on login and for security-sensitive actions
• Providing access to all xdspin gaming products including slots, live casino, bingo, and sports betting
• Managing your VIP tier status and loyalty rewards

4.2 Legal and Regulatory Compliance

• Verifying player age (minimum 21 years as required by PAGCOR regulations)
• Conducting Know Your Customer (KYC) identity verification
• Screening transactions for anti-money laundering (AML) compliance
• Maintaining records required by Philippine tax and gaming authorities
• Responding to lawful requests from government agencies and law enforcement

4.3 Platform Security and Fraud Prevention

• Detecting and preventing unauthorized account access, identity theft, and fraud
• Identifying and blocking duplicate account creation
• Monitoring for bonus abuse, collusion, and prohibited betting patterns
• Investigating reported security incidents and account anomalies

4.4 Responsible Gaming

• Monitoring gaming activity to identify patterns associated with problem gambling
• Enforcing player-set deposit limits, loss limits, and session time restrictions
• Processing self-exclusion requests and maintaining exclusion records
• Providing targeted responsible gaming communications where appropriate

4.5 Communications and Support

• Responding to customer support queries via live chat and email
• Sending transactional notifications (deposits, withdrawals, account alerts)
• Delivering promotional and bonus communications where you have opted in
• Conducting satisfaction surveys and service improvement research (opt-in)

4.6 Platform Improvement and Analytics

• Analyzing aggregated usage patterns to improve platform performance and user experience
• Testing new features and game recommendations
• Generating internal reporting on platform usage trends

5. Sharing and Disclosure of Personal Data

xdspin does not sell your personal data to third parties. We share personal data only in the limited circumstances described below:

5.1 Service Providers and Data Processors

xdspin engages third-party service providers who process personal data on our behalf under strict data processing agreements. These include:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), and Philippine banking partners for transaction processing
• Identity verification providers: Automated KYC document verification services
• Cloud infrastructure providers: Secure hosting and database services
• Game providers: Third-party game studios and live dealer platform operators who receive session tokens and gameplay identifiers
• Customer support platforms: Live chat and ticketing systems used to deliver support services
• Analytics providers: Privacy-compliant web analytics tools (data is anonymized or pseudonymized where possible)

All service providers are contractually bound to process personal data solely for the purposes we specify, to maintain appropriate security standards, and not to disclose your data to any other parties.

5.2 Legal and Regulatory Disclosure

xdspin may disclose your personal data to government authorities, regulators, or law enforcement agencies when required to do so by applicable Philippine law, court order, or regulatory directive. This includes but is not limited to:

• The Philippine Amusement and Gaming Corporation (PAGCOR)
• The Anti-Money Laundering Council (AMLC)
• The National Privacy Commission (NPC)
• Philippine courts and judicial authorities
• The Bureau of Internal Revenue (BIR) for tax compliance purposes

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of xdspin's business, personal data held by xdspin may be transferred to the acquiring entity as part of the business transaction. Players will be notified of any such transfer and any material changes to data processing terms.

6. Cookies and Tracking Technologies

6.1 Types of Cookies Used

xdspin uses the following categories of cookies and similar tracking technologies on the Platform:

• Strictly Necessary Cookies: Essential for Platform operation, including session management, login authentication, and security functions. These cannot be disabled without disrupting your ability to use xdspin.
• Functional Cookies: Remembering your preferences, language settings, and display options to personalize your experience on the Platform.
• Analytics Cookies: Collecting anonymized data about how players navigate and use the Platform, used to identify usability improvements. These are opt-in only.
• Marketing Cookies: Used to deliver relevant promotional content based on your gaming interests. These are opt-in only and can be withdrawn at any time.

6.2 Managing Your Cookie Preferences

You may manage cookie preferences through the Cookie Settings panel accessible via the banner displayed on your first visit to xdspin. You can also control cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform.

7. Data Retention

xdspin retains personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes. The following general retention periods apply:

• Active player accounts: Data is retained for the duration of the account and for a period of five (5) years following account closure, in compliance with Philippine AML record-keeping requirements
• Transaction records: Minimum five (5) years from the date of transaction, as required by the Anti-Money Laundering Act
• KYC documentation: Retained for five (5) years after the end of the business relationship
• Support communications: Retained for three (3) years from the date of the interaction
• Marketing and analytics data: Retained for two (2) years from collection, or until consent is withdrawn

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be attributed to any individual.

8. Data Security Measures

xdspin implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and xdspin servers is encrypted using TLS 1.2 or higher
• Encryption at rest: Sensitive data stored in xdspin databases is encrypted using AES-256 or equivalent standards
• Access controls: Strict role-based access controls limit staff access to personal data to only those who need it for their specific functions
• Two-factor authentication: Available for all player accounts and mandatory for administrative access
• Regular security assessments: Periodic penetration testing and vulnerability assessments are conducted by qualified security professionals
• Staff training: All xdspin personnel handling personal data receive regular data privacy and security training

9. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by xdspin:

• Right to be Informed: The right to know what personal data xdspin collects about you, why it is collected, and how it is used — as set out in this Privacy Policy.
• Right to Access: The right to request a copy of the personal data xdspin holds about you and information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly from your xdspin profile settings.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary, where consent has been withdrawn, or where processing is unlawful. Note that certain data must be retained to comply with legal obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or based on legitimate interests. You may unsubscribe from marketing communications at any time.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the Philippine National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact xdspin's Data Protection Officer using the details in Section 13. xdspin will respond to all verified requests within 30 calendar days.

10. Minors and Age Restriction

The xdspin Platform is strictly for adults aged 21 years and above in accordance with PAGCOR regulations governing online gambling in the Philippines. xdspin does not knowingly collect or process personal data from individuals under 21 years of age.

If xdspin discovers that personal data has been collected from a person under 21, that account will be immediately closed, all data will be deleted or anonymized promptly, and — where required — the matter will be referred to the relevant Philippine authorities.

Parents and guardians who believe their minor child has registered on xdspin should contact our support team immediately at [email protected].

11. Third-Party Services and Links

The xdspin Platform integrates with third-party services including game providers, payment processors, and customer support tools. While xdspin selects service providers carefully and requires compliance with data protection standards, each third party operates under its own privacy policy.

xdspin is not responsible for the data practices of third-party game studios, payment providers, or any other external services accessed through or in connection with the Platform. We encourage you to review the privacy policies of any third-party services you interact with.

12. Changes to This Privacy Policy

xdspin reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify you by posting the revised policy on this page with an updated effective date, and where appropriate, by sending a notification to your registered email address.

Your continued use of xdspin following notification of material changes constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with any changes, you should cease using the Platform and may request account closure by contacting our support team.

13. Contact and Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data rights, please contact xdspin's designated Data Protection Officer:

• Email: [email protected]
• Subject line: Data Privacy Request – [Your Username]
• Live Chat: Available 24/7 through your xdspin account dashboard
• Response time: All data privacy requests acknowledged within 72 hours; full response within 30 calendar days

If you are not satisfied with xdspin's response to your data privacy concern, you have the right to lodge a complaint with the Philippine National Privacy Commission (NPC), the government body responsible for enforcing data protection rights in the Philippines.