Privacy Policy

1. Introduction

hellspin ("we", "us", "our") operates the online gaming platform accessible at hellspin.one (the "Platform"). We are committed to protecting the privacy and personal data of all users of the Platform, including registered players and visitors from across the Philippines — from Manila and Makati to Cebu, Davao, and Quezon City.

This Privacy Policy describes how hellspin collects, uses, stores, shares, and protects personal data in connection with your use of the Platform. It also describes the rights you have in relation to your personal data and how you can exercise those rights.

By registering for a hellspin account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy should be read together with hellspin's Terms & Conditions and Responsible Gaming Policy.

If you have any questions about how hellspin handles your personal data, please contact our support team using the details provided in Section 13 of this Policy.

2. Personal Data We Collect

hellspin collects the following categories of personal data from users of the Platform:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (e.g., Philippine passport, SSS ID, driver's licence, PhilSys national ID).
• Contact Data: Email address, mobile phone number, and residential address (including city, province, and postal code).
• Account Data: Username, account preferences, communication preferences, and account history.
• Financial Data: Payment method details (e.g., GCash mobile number, PayMaya account, BPI or BDO account details), transaction history, deposit and withdrawal records.
• Technical Data: IP address, browser type and version, device type and operating system, time zone, and other technical identifiers collected automatically when you access the Platform.
• Usage Data: Information about how you use the Platform, including games played, bets placed, session duration, pages visited, and features accessed.
• Communications Data: Records of your communications with hellspin's support team, including live chat transcripts and email correspondence.
• Verification Data: Copies of identity documents and selfie photographs submitted for Know Your Customer (KYC) verification purposes.

3. How We Collect Your Data

hellspin collects personal data through the following means:

• Direct interactions: Data you provide when registering for an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access or use the Platform.
• Third-party sources: Data received from payment processors (e.g., GCash, PayMaya), identity verification service providers, fraud prevention agencies, and other third parties where permitted by applicable law.

4. How We Use Your Data

hellspin uses your personal data for the following purposes:

• To create and manage your hellspin account and verify your identity in accordance with KYC requirements.
• To process deposits, withdrawals, and other financial transactions on the Platform.
• To provide, maintain, and improve the Platform and its features.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
• To comply with applicable legal and regulatory obligations, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements.
• To enforce hellspin's Terms & Conditions and other policies.
• To send you service-related communications, including account notifications, security alerts, and support responses.
• To send you marketing communications about hellspin promotions and offers, where you have consented to receive such communications.
• To conduct responsible gaming monitoring and provide player protection tools in accordance with hellspin's Responsible Gaming Policy.
• To analyse Platform usage and improve user experience through aggregated and anonymised analytics.

5. Legal Basis for Processing

hellspin processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you, including account management, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and CTF obligations.
• Legitimate interests: Processing necessary for hellspin's legitimate business interests, including fraud prevention, security, and Platform improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit consent, including the sending of marketing communications. You may withdraw your consent at any time by contacting hellspin's support team.

6. Sharing Your Data

hellspin does not sell your personal data to third parties. hellspin may share your personal data with the following categories of recipients in the circumstances described below:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to the extent necessary to process your financial transactions.
• Identity verification providers: Third-party KYC and identity verification service providers engaged by hellspin to verify your identity and comply with regulatory requirements.
• Fraud prevention and security providers: Third-party service providers engaged to assist hellspin in detecting and preventing fraud, money laundering, and other prohibited activities.
• Regulatory and law enforcement authorities: Government agencies, regulators (including PAGCOR), law enforcement bodies, and courts, where hellspin is required or permitted to do so by applicable law.
• Professional advisers: Lawyers, auditors, accountants, and other professional advisers engaged by hellspin in connection with its business operations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of hellspin's business, your personal data may be transferred to the relevant third party as part of that transaction.

All third parties with whom hellspin shares personal data are required to handle that data in accordance with applicable data protection laws and hellspin's data processing requirements.

7. Data Retention

hellspin retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

In general, hellspin retains account data and transaction records for a minimum of five (5) years following account closure, in accordance with applicable AML and regulatory record-keeping requirements. Identity verification documents are retained for the period required by applicable law.

Where personal data is no longer required for any lawful purpose, hellspin will securely delete or anonymise that data in accordance with its data retention procedures.

8. Data Security

hellspin implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the hellspin Platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Access controls limiting access to personal data to authorised hellspin personnel on a need-to-know basis.
• Regular security assessments and penetration testing of the Platform's systems.
• Secure session management and multi-factor authentication options for account access.

While hellspin takes all reasonable steps to protect your personal data, no method of data transmission or storage is completely secure. hellspin cannot guarantee the absolute security of your data. In the event of a data breach that is likely to result in a risk to your rights and freedoms, hellspin will notify you and the relevant authorities as required by applicable law.

9. Cookies and Tracking Technologies

hellspin uses cookies and similar tracking technologies on the Platform to enhance your user experience, analyse Platform usage, and support security and fraud prevention functions. The types of cookies used by hellspin include:

• Strictly necessary cookies: Essential for the Platform to function correctly, including session management and security cookies. These cannot be disabled.
• Functional cookies: Used to remember your preferences and personalise your experience on the Platform.
• Analytics cookies: Used to collect aggregated, anonymised information about how users interact with the Platform, helping hellspin improve its services.
• Security cookies: Used to detect and prevent fraudulent activity and protect the integrity of the Platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.

10. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by hellspin:

• Right of access: The right to request a copy of the personal data hellspin holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data in certain circumstances, subject to hellspin's legal and regulatory retention obligations.
• Right to restriction: The right to request that hellspin restricts the processing of your personal data in certain circumstances.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format in certain circumstances.
• Right to object: The right to object to hellspin's processing of your personal data based on legitimate interests, including for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact hellspin's support team using the details in Section 13. hellspin will respond to all valid requests within a reasonable timeframe in accordance with applicable law.

11. Minors and Age Verification

hellspin strictly prohibits access to and use of the Platform by persons under 21 years of age. hellspin does not knowingly collect personal data from persons under 21 years old.

hellspin implements age verification procedures as part of its KYC process to confirm that all registered players meet the minimum age requirement. Any account found to belong to a person under 21 years of age will be immediately closed and all personal data associated with that account will be deleted, except where retention is required by applicable law.

If you believe that hellspin has inadvertently collected personal data from a person under 21 years of age, please contact our support team immediately so that we can take appropriate action.

12. Changes to This Policy

hellspin reserves the right to update or modify this Privacy Policy at any time. When material changes are made, hellspin will notify registered users by email or by displaying a prominent notice on the Platform. The date of the most recent revision is displayed at the top of this page.

Your continued use of the hellspin Platform after any changes to this Privacy Policy have been published constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must cease using the Platform and may close your account in accordance with hellspin's Terms & Conditions.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or hellspin's handling of your personal data, please contact our support team. We are available 24/7 and will respond to all privacy-related enquiries as promptly as possible.

[email protected]

Live Chat: Available 24/7 via the hellspin Platform

When contacting us about a privacy matter, please include your registered account username and a clear description of your request so we can assist you efficiently.