5uspin Privacy Policy

1 Introduction

5uspin ("we", "us", "our", or "the Platform") is an online gaming platform operating at 5uspin.app, regulated by the Philippine Amusement and Gaming Corporation (PAGCOR). We are committed to protecting the privacy and personal data of every Filipino player who registers on or interacts with our platform.

This Privacy Policy has been prepared in compliance with Republic Act No. 10173, known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR). It covers all personal data that 5uspin processes in connection with the provision of our online casino, sports betting, bingo, fishing arcade, and related gaming services.

We take our obligations as a personal information controller (PIC) seriously. This document is designed to be clear, honest, and complete — so you know exactly what happens to your data from the moment you visit 5uspin.app to the day you close your account and beyond.

2 Scope and Application

This Privacy Policy applies to all personal data collected and processed by 5uspin in connection with:

• Registration and maintenance of a 5uspin player account
• Use of any games, features, or services on the 5uspin platform, whether accessed via desktop browser or mobile device
• Deposits, withdrawals, and all financial transactions processed through the platform
• Customer support communications, including live chat, email correspondence, and any support ticket submitted to [email protected]
• Participation in promotions, bonuses, loyalty programs, and any competitions hosted by 5uspin
• Responses to surveys, feedback forms, or marketing communications where you have provided consent
• Compliance with PAGCOR regulations, Anti-Money Laundering (AML) obligations, and other applicable Philippine laws

This policy applies equally to players located in Metro Manila, Cebu, Davao, Quezon City, Makati, and all other parts of the Philippines, as well as to any Filipino player accessing 5uspin from abroad in a jurisdiction where such access is lawful.

Third-party websites, services, or platforms that may be linked from 5uspin are not covered by this Privacy Policy. We encourage you to review the privacy policies of any third-party services you access independently.

3 Data We Collect

5uspin collects several categories of personal data depending on how you interact with the platform. Below is a detailed breakdown of what we collect and why:

3.1 Registration and Identity Data

When you create a 5uspin account, we collect:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify the mandatory 21+ age requirement)
• Philippine mobile number and email address
• Username and encrypted password
• Residential address in the Philippines

3.2 KYC and Verification Documents

To comply with PAGCOR's KYC requirements and Philippine AML laws, we collect:

• Scanned copy or photograph of a valid government-issued ID (PhilSys National ID, UMID, Passport, Driver's License, or SSS/GSIS ID)
• Selfie photograph holding the ID for liveness verification
• Proof of address (utility bill, bank statement, or barangay certificate) where required for enhanced due diligence
• Source of funds documentation for accounts flagged under AML thresholds

3.3 Financial and Transaction Data

• GCash, Maya, GrabPay, or bank account details (account number and registered name only — never full card or PIN details)
• Deposit and withdrawal history with timestamps and amounts in Philippine Peso (PHP)
• Payment method verification records
• Bonus and promotional credit records

3.4 Gaming Activity Data

• Game session logs including start/end times, game titles played, wagering amounts, and outcomes
• Sports betting selections, odds accepted, and settlement records
• Bingo and fishing arcade participation records
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.5 Technical and Device Data

• IP address and approximate geolocation (country/city level)
• Device type, operating system, and browser version
• Device fingerprint data used for fraud prevention and duplicate account detection
• Session duration and click-path data within the platform
• Login timestamps and authentication logs

3.6 Communications Data

• Content and metadata of customer support interactions via live chat and email
• Survey responses and feedback submitted voluntarily
• Marketing communication preferences and opt-in/opt-out records

4 How We Collect Data

5uspin collects your personal data through the following channels:

5 Purposes of Processing

5uspin processes your personal data for the following specific purposes:

1. Account creation and management — to register your account, verify your identity, maintain your profile, and manage your relationship with the platform.
2. Service delivery — to provide access to all gaming products including slots, live casino, sports betting, bingo, and fishing arcade titles.
3. Payment processing — to process deposits and withdrawals through GCash, Maya, BPI, BDO, and other supported channels; to reconcile financial records.
4. KYC and age verification — to verify that all players are 21 years of age or older, as mandated by PAGCOR, and to authenticate identity before processing withdrawals.
5. AML and fraud prevention — to detect, investigate, and prevent money laundering, fraud, bonus abuse, unauthorized account access, and other prohibited activities in compliance with RA 9160 as amended.
6. Regulatory compliance — to fulfill reporting and record-keeping obligations to PAGCOR, the AMLC, the National Privacy Commission, and other competent Philippine authorities.
7. Responsible gaming enforcement — to monitor gaming patterns, enforce player-set limits, manage self-exclusion requests, and identify players who may be exhibiting signs of problem gambling.
8. Customer support — to respond to your inquiries, complaints, and account-related requests.
9. Platform improvement — to analyze usage patterns, test new features, and improve the performance and user experience of 5uspin.app.
10. Marketing communications — to send you promotional offers, bonus alerts, and platform news, but only where you have given explicit opt-in consent. You may withdraw this consent at any time.

6 Legal Basis for Processing

Under the Data Privacy Act of 2012, 5uspin processes your personal data on the following lawful bases:

7 Data Sharing and Disclosure

7.1 Service Partners

5uspin shares personal data with carefully selected third-party service providers who process data solely on our behalf and under our instruction, pursuant to written data sharing agreements that comply with the DPA. These partners include:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), GrabPay, BPI, BDO, Metrobank, and 7-Eleven payment partners for transaction processing.
• Identity verification providers: Third-party KYC vendors who authenticate government-issued IDs and perform liveness checks.
• Game content providers: Licensed game studios and live casino operators who host games on the 5uspin platform; these providers receive only the minimum session data necessary to run games.
• Cloud infrastructure providers: Secure cloud hosting services that store 5uspin's data on servers located in compliant jurisdictions.
• Fraud and security partners: Cybersecurity vendors providing device fingerprinting, IP analysis, and real-time fraud scoring.
• Customer support platforms: Live chat and ticketing system providers used to deliver 24/7 player support.

7.2 Regulatory and Legal Disclosures

5uspin will disclose personal data to the following authorities without prior notice to the Player where legally required or compelled:

• Philippine Amusement and Gaming Corporation (PAGCOR) — for regulatory reporting, license compliance, and player dispute escalation
• Anti-Money Laundering Council (AMLC) — for mandatory Suspicious Transaction Reports (STRs) and Covered Transaction Reports (CTRs) under RA 9160
• National Privacy Commission (NPC) — in the event of a notifiable personal data breach or compliance investigation
• Philippine law enforcement agencies — pursuant to a valid court order, subpoena, or lawful law enforcement request
• Bureau of Internal Revenue (BIR) — for taxation compliance obligations applicable to gaming operators

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of substantially all of 5uspin's assets, personal data held by 5uspin may be transferred to the acquiring entity. In such cases, 5uspin will notify affected players via their registered email address no less than 30 days before the transfer takes effect, and the acquiring entity will be required to honor this Privacy Policy or provide players with a new policy that offers equivalent or greater protections.

8 Data Retention

5uspin retains personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized using industry-standard data destruction procedures. Anonymized or aggregated data that can no longer identify an individual may be retained indefinitely for statistical and research purposes.

9 Data Security

5uspin implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or unlawful disclosure. Our security framework includes:

• Encryption in transit: All data transmitted between your browser or mobile app and 5uspin's servers is encrypted using TLS 1.3 with forward secrecy.
• Encryption at rest: All stored personal data — including KYC documents, transaction records, and account information — is encrypted using AES-256.
• Access controls: Access to personal data within 5uspin is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication (MFA) for all internal systems.
• Infrastructure security: 5uspin's servers are hosted in ISO 27001-certified data centers with physical access controls, redundant power systems, and 24/7 monitoring.
• Regular security testing: We conduct periodic penetration testing, vulnerability scanning, and security code reviews carried out by qualified independent security firms.
• Incident response: 5uspin maintains a documented personal data breach response plan. In the event of a breach affecting your personal data, we will notify the National Privacy Commission within 72 hours and notify affected individuals as required by the DPA.
• Employee training: All 5uspin staff with access to personal data undergo mandatory data privacy and security training upon onboarding and annually thereafter.

10 Cookies and Tracking Technologies

5uspin uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, remember your preferences, and analyze usage patterns. A cookie is a small text file stored on your device by your browser when you visit 5uspin.app.

10.1 Types of Cookies We Use

5uspin does not use third-party advertising cookies or allow external ad networks to place tracking pixels on our platform. You will not be tracked across other websites for advertising purposes based on your activity on 5uspin.app.

You may manage your cookie preferences at any time through your browser settings or via the cookie consent panel accessible from the footer. Disabling strictly necessary cookies will affect the functionality of the platform.

11 Your Data Subject Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 5uspin:

• Right to be Informed: You have the right to be told what personal data 5uspin collects about you, why it is collected, how it is used, and with whom it is shared — which is the primary purpose of this Privacy Policy.
• Right of Access: You may request a copy of the personal data 5uspin holds about you, including your account data, KYC records, transaction history, and gaming logs.
• Right to Rectification: If any of your personal data held by 5uspin is inaccurate or incomplete, you have the right to request that it be corrected. You may update some information directly through your account profile settings.
• Right to Erasure or Blocking: You may request the deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected — subject to 5uspin's legal obligations to retain certain records under PAGCOR and AML regulations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: If you believe that 5uspin has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. Contact the NPC at privacy.gov.ph or through their official hotline.

11.1 How to Exercise Your Rights

To exercise any of the rights listed above, submit a written request to our Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." Please include your full name, registered email address, and a clear description of the right you wish to exercise. We will acknowledge your request within 3 business days and respond substantively within 15 business days, as required by the DPA.

For verification purposes, we may ask you to confirm your identity before processing a request. This is to prevent unauthorized access to your personal data by third parties.

12 Protection of Minors

5uspin strictly prohibits the use of its platform by any person under the age of 21. This restriction is mandated by PAGCOR and is non-negotiable. The collection of personal data from minors is not permitted under any circumstances on the 5uspin platform.

During the registration process, all applicants are required to declare their date of birth and submit a valid government-issued ID for age verification. Any account found to have been registered using falsified age information will be immediately suspended, all funds frozen pending investigation, and the matter may be referred to the appropriate Philippine authorities.

If 5uspin discovers or has reason to believe that personal data of a person under 21 has been collected inadvertently, we will take immediate steps to delete that data from our systems and close the associated account. If you are a parent or guardian and believe your child has accessed or registered on 5uspin, please contact our DPO immediately at [email protected].

13 Cross-Border Data Transfers

In certain circumstances, personal data processed by 5uspin may be transferred to, stored in, or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or licensed game content studios based in other jurisdictions.

Where such cross-border transfers occur, 5uspin ensures that they are conducted in compliance with Section 21 of the Data Privacy Act of 2012 and the relevant NPC guidelines on cross-border data transfers. Specifically, 5uspin will only transfer personal data internationally where:

• The receiving country or organization provides an adequate level of protection consistent with the DPA and its IRR;
• The data transfer is covered by appropriate contractual safeguards, including standard contractual clauses or binding corporate rules approved by the NPC; or
• The transfer is necessary for the performance of your contract with 5uspin (for example, to allow a licensed game studio to deliver a live dealer game session).

5uspin maintains a Register of Cross-Border Data Transfers which is available to the National Privacy Commission upon request. Players who wish to obtain information about specific cross-border transfers affecting their data may contact the DPO.

14 Changes to This Privacy Policy

5uspin reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal or regulatory requirements, or platform features. The updated policy will always be published at 5uspin.app/privacy-policy with a revised effective date at the top of the document.

Where a change is material — meaning it significantly affects how we collect, use, or share your personal data — 5uspin will provide advance notice to registered players via their registered email address or through a prominent notice on the platform at least 14 days before the change takes effect. For minor or clarificatory changes, the updated policy will be published without individual notification.

Your continued use of the 5uspin platform after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with a material change, you have the right to close your account and request deletion of your data in accordance with the retention limitations described in Section 8.

15 Contact the Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by 5uspin, please contact our Data Protection Officer:

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which has supervisory authority over personal data controllers operating in or targeting residents of the Philippines.

For general account support, game-related queries, or payment issues, please use the same email address with the appropriate subject line so our support team can route your inquiry correctly.