spitime Privacy Policy

This Privacy Policy ("Policy") describes how spitime ("spitime", "we", "us", or "our") collects, processes, stores, discloses, and protects the personal data of individuals ("you", "your", or "Player") who access or use the spitime online gaming platform available at spitime.net, including all associated sub-pages, mobile web interfaces, and player account features.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It applies to all personal data collected in connection with your use of spitime, regardless of whether you are a registered account holder, a visitor browsing spitime.net, or a participant in any spitime promotion.

By accessing spitime.net or creating a spitime player account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue your use of the spitime platform.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for your personal data is spitime, the operator of the online gaming platform accessible at spitime.net.

As data controller, spitime determines the purposes and means by which your personal data is collected and processed. spitime is responsible for ensuring that all data processing activities conducted in connection with the spitime platform comply with the Data Privacy Act of 2012 and applicable NPC regulations.

If you have any questions about this Policy or wish to exercise any of your data subject rights, you may contact our designated Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.

spitime collects the following categories of personal data in connection with your use of the platform:

A. Identity & Registration Data

• Full legal name as it appears on a government-issued ID
• Date of birth (used to verify you are 21 years of age or older)
• Gender (optional, collected for personalisation purposes)
• Nationality and country of residence
• Username chosen during spitime account registration

B. Contact Data

• Email address (used for account communication, transaction receipts, and support)
• Philippine mobile number (used for SMS verification and two-factor authentication)
• Residential address (collected for KYC verification purposes)

C. Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., Philippine National ID, Passport, SSS ID, PhilHealth ID, Driver's License)
• Proof of address documents where required
• Selfie or liveness check images submitted for identity verification

D. Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references
• GCash, Maya, BPI, BDO, Metrobank, UnionBank, Coins.ph, and USDT TRC20 transaction reference numbers
• Account wallet balances and bonus credit history

E. Gaming Activity Data

• Game session logs, including game type, session duration, bet amounts, and outcomes
• Bonus claims, wagering history, and promotional participation records

F. Technical & Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session timestamps and log-in history
• Cookie identifiers and session tokens (see Section 8 for full cookie details)

G. Communications Data

• Content of support chat conversations and email correspondence with the spitime support team
• Records of any formal complaints or dispute submissions

spitime collects personal data through the following means:

• Direct collection: Data you provide when completing the spitime registration form, submitting KYC documents, contacting our support team, or participating in promotions.
• Automated collection: Technical data collected automatically when you access spitime.net, including IP address, device data, and session activity, via server logs and first-party cookies.
• Payment processors: Transaction reference data relayed to spitime by our integrated Philippine payment partners (GCash, Maya, BDO, BPI, etc.) and USDT TRC20 processing services when you make deposits or request withdrawals.
• Identity verification partners: Results and flags returned by our KYC verification service providers when you submit identity documents, limited to verification outcomes and risk signals — not raw document copies shared onwards.
• Fraud detection systems: Device fingerprint data and behavioural signals collected by our fraud prevention systems to protect the integrity of the spitime platform.

spitime does not purchase personal data lists from data brokers or any third-party marketing databases.

spitime processes your personal data for the following purposes:

spitime does not use your personal data to build or contribute to advertising profiles for third-party platforms, and we do not engage in automated individual decision-making that produces legal or similarly significant effects without human review.

Under the Data Privacy Act of 2012, spitime processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the player account agreement with you — including registration, identity verification, game delivery, and payment processing.
• Legal obligation: Processing required to comply with Philippine law, including anti-money laundering obligations under the AMLA, age verification requirements, and regulatory reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and the improvement of spitime services — where these interests are not overridden by your privacy rights.
• Consent: Processing for the purpose of sending you promotional and marketing communications. You may withdraw this consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

spitime does not sell your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• KYC and identity verification providers: To verify your age and identity as required by applicable regulations. These providers process your identity documents under strict confidentiality agreements and are contractually prohibited from using your data for any other purpose.
• Payment processing partners: Transaction reference data is exchanged with Philippine payment providers (GCash, Maya, BDO, BPI, UnionBank, etc.) and USDT TRC20 processing services solely to facilitate your deposits and withdrawals.
• Fraud prevention and security vendors: Device and behavioural data may be processed by fraud detection service providers to protect the integrity of spitime accounts and prevent unauthorised access.
• Regulatory and law enforcement authorities: spitime will disclose personal data to Philippine regulatory bodies, law enforcement agencies, or courts where required to do so by a valid legal order, subpoena, or regulatory directive under Philippine law.
• Professional advisers: Lawyers, auditors, and compliance consultants may access personal data where strictly necessary to provide professional services to spitime, under binding confidentiality obligations.

All third parties who receive personal data from spitime are required to implement appropriate technical and organisational security measures and are contractually prohibited from processing that data for any purpose beyond the scope for which it was shared.

spitime does not transfer your personal data to recipients outside the Philippines except where compliant data transfer mechanisms are in place as required by the National Privacy Commission.

spitime uses first-party cookies and similar tracking technologies to operate and improve the platform. We do not use third-party advertising cookies or cross-site tracking pixels. The cookies used on spitime.net are categorised as follows:

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from completing spitime Login and accessing your account. Disabling analytics cookies will not affect your ability to use the platform.

spitime retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is either securely deleted using industry-standard data destruction methods or rendered permanently anonymous so that it can no longer be linked to any identifiable individual.

Under the Data Privacy Act of 2012, as a Filipino player you have the following enforceable rights with respect to your personal data held by spitime:

• Right to be Informed: You have the right to be told what personal data spitime holds about you, how it is being used, and with whom it has been shared. This Privacy Policy is spitime's primary mechanism for satisfying this right.
• Right to Access: You may request a copy of the personal data that spitime holds about you at any time. spitime will provide this within 15 business days of a verified request.
• Right to Correction (Rectification): If any personal data held by spitime is inaccurate, incomplete, or outdated, you have the right to request that it be corrected. Many fields can be updated directly through your spitime account settings.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. Note that data subject to mandatory retention obligations under the AMLA cannot be deleted before the legally mandated retention period expires.
• Right to Data Portability: You may request that spitime provide your personal data in a structured, commonly used, and machine-readable format so that it can be transferred to another controller where technically feasible.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on spitime's legitimate interests on grounds relating to your particular situation.
• Right to Lodge a Complaint: If you believe your data privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact spitime's Data Protection Officer using the contact details in Section 14. We will acknowledge your request within 3 business days and provide a substantive response within 15 business days.

The spitime platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law governing casino-style gambling activities. spitime does not knowingly collect personal data from any person under the age of 21.

If spitime discovers or is informed that personal data has been collected from a person under the age of 21, the following steps will be taken immediately:

• The associated player account will be permanently closed.
• All personal data related to the underage account will be deleted as soon as is legally permissible, and no later than the applicable legal retention period requires.
• Any deposited funds will be returned to the originating payment method following identity verification of the rightful account holder.

If you are a parent or guardian and believe that your child has created a spitime account, please contact our support team immediately at [email protected]. We treat reports of underage account use as a high-priority matter and will investigate and act on all verified reports without delay.

spitime implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security controls include:

• Encryption in transit: All data exchanged between your browser or device and spitime servers is encrypted using TLS 1.3, the current industry standard for secure web communications.
• Encryption at rest: Personal data stored in spitime databases, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
• Access controls: Internal access to personal data is governed by strict role-based access controls. Only personnel with a legitimate operational need to access specific data categories are granted access, and all internal access is logged and auditable.
• Two-factor authentication (2FA): spitime's internal systems require 2FA for all staff access to production environments. Players are strongly encouraged to enable 2FA on their spitime accounts after completing spitime Login.
• Security monitoring: spitime operates continuous security monitoring across its infrastructure to detect and respond to anomalous activity, potential intrusions, and data integrity threats in real time.
• Vulnerability management: Regular penetration testing and vulnerability assessments are conducted by qualified security professionals to identify and remediate weaknesses in the spitime platform before they can be exploited.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, spitime will notify affected players and the National Privacy Commission within the timeframes prescribed by R.A. 10173 and NPC regulations.

spitime reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. The "Last Updated" date at the top of this page will always reflect the date on which the most recent version of the Policy became effective.

Where a change to this Policy materially affects your rights or the way we process your personal data, spitime will notify you by email to the address registered on your account and/or by displaying a prominent notice on spitime.net at least 14 days before the change takes effect. Your continued use of the spitime platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically so that you remain informed about how spitime is protecting your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way spitime handles your personal data, please contact our Data Protection Officer (DPO) using the details below:

If you are not satisfied with spitime's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing R.A. 10173.

spitime is committed to resolving all data privacy concerns fairly, transparently, and in accordance with Philippine law. We take every privacy inquiry seriously, and our DPO will personally review all requests submitted in connection with this Policy.