pgwin Privacy Policy

pgwin is an online gaming platform accessible at https://pgwin.live, offering live casino games, slot games, bingo, and related entertainment services to eligible players in the Philippines. For the purposes of this Privacy Policy, pgwin acts as the data controller responsible for the personal data of registered players and website visitors.

pgwin operates within the PAGCOR (Philippine Amusement and Gaming Corporation) regulatory framework and is subject to the requirements of the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations. All personal data processing activities conducted by pgwin are carried out in accordance with the principles of transparency, legitimate purpose, and proportionality as mandated by Philippine law.

pgwin collects the following categories of personal data from players and website visitors, limited to what is necessary for the purposes described in this Privacy Policy:

• Identity Data: Full legal name, date of birth, nationality, and government-issued ID details (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS ID, or PRC ID) collected during account registration and KYC verification.
• Contact Data: Email address, Philippine mobile number, and residential address.
• Account Data: Username, encrypted password, account preferences, and communication settings.
• Financial Data: Payment method details (e.g., GCash account number, Maya account, bank account details for BPI, BDO, Metrobank, UnionBank, Landbank, PNB, or Security Bank), deposit and withdrawal history, and transaction records. pgwin does not store full payment credentials — these are handled by our regulated payment processors.
• Gaming Data: Game history, wager amounts, win/loss records, session durations, and responsible gaming tool usage (e.g., deposit limits set, self-exclusion requests).
• Technical Data: IP address, device type, browser type and version, operating system, and approximate geolocation (country/region level).
• Usage Data: Pages visited on pgwin, features accessed, time spent on the platform, and clickstream data.
• Communications Data: Records of your correspondence with pgwin support, including live chat transcripts and email exchanges.

pgwin collects personal data through the following means:

• Direct Collection: Data you provide when registering a pgwin account, completing KYC verification, making deposits or withdrawal requests, contacting pgwin support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the pgwin platform, through cookies, web beacons, and similar tracking technologies as described in Section 7.
• Third-Party Sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud screening services; payment confirmation data from our regulated payment processors (GCash, Maya, and participating Philippine banks).

pgwin does not collect personal data from social media platforms or purchase data from third-party data brokers. All data collected by pgwin is obtained through the channels described above.

pgwin uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your pgwin account, including processing your registration, verifying your identity, and enabling you to log in securely.
• Service Delivery: To provide you with access to pgwin's games, process your deposits and withdrawals, and deliver the features and functionality of the platform.
• KYC & Regulatory Compliance: To verify your identity and age (21+), comply with PAGCOR requirements, and fulfil our obligations under Philippine anti-money laundering laws (AMLA) and the Data Privacy Act.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the pgwin platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling, enforce deposit limits and self-exclusion requests, and comply with PAGCOR responsible gaming standards.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided your consent to receive such communications. You may withdraw consent at any time.
• Platform Improvement: To analyse usage patterns, conduct internal research, and improve the features, performance, and user experience of the pgwin platform.
• Legal Obligations: To comply with applicable Philippine laws, respond to lawful requests from regulatory authorities, and enforce pgwin's Terms & Conditions.

pgwin processes your personal data on the following legal bases as recognised under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to fulfil our obligations under the pgwin Terms & Conditions, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act.
• Legitimate Interests: Processing necessary for pgwin's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time by contacting pgwin support or updating your account communication preferences.

pgwin does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: GCash, Maya, and participating Philippine banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) receive the minimum data necessary to process your deposits and withdrawals.
• KYC & Identity Verification Providers: Regulated third-party identity verification services that assist pgwin in verifying your identity and age in compliance with PAGCOR and AMLA requirements.
• Fraud Prevention Services: Anti-fraud and risk management service providers that help pgwin detect and prevent fraudulent activity on the platform.
• Game Software Providers: Game providers whose titles are available on pgwin may receive anonymised or pseudonymised gaming data for technical and audit purposes. They do not receive your full identity or financial data.
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where disclosure is required by law or regulatory mandate.
• Legal Proceedings: Courts, law enforcement agencies, or other parties where disclosure is required by a valid court order, subpoena, or other lawful legal process.

All third-party service providers engaged by pgwin are contractually required to process your personal data only for the specified purpose, to maintain appropriate security measures, and to comply with the Philippine Data Privacy Act.

pgwin uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the platform is used. The following types of cookies are used on pgwin:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics Cookies: Collect anonymised data about how players use pgwin — which pages are visited most, where players encounter errors, and how navigation flows are used. This data helps pgwin improve the platform experience.
• Security & Fraud Prevention Cookies: Help pgwin identify suspicious activity, detect bot traffic, and protect the integrity of the platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the pgwin platform. pgwin does not use cookies to serve third-party advertising or to track your activity on other websites.

pgwin implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between your device and pgwin is encrypted using 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data stored on pgwin's servers is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to pgwin personnel and authorised service providers who have a legitimate need to access it. All access is logged and audited.
• Password Security: Player passwords are stored as salted cryptographic hashes. pgwin never stores passwords in plain text and will never ask you for your password.
• Regular Security Audits: pgwin conducts regular security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: pgwin maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, pgwin will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act.

pgwin retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active Account Data: Retained for the duration of your active pgwin account relationship, plus any additional period required by law or regulation.
• KYC & Identity Verification Records: Retained for a minimum of five (5) years following account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of the transaction, in compliance with AMLA and tax record-keeping requirements.
• Gaming History: Retained for a minimum of three (3) years following account closure for regulatory audit purposes.
• Support Communications: Retained for two (2) years following the resolution of the relevant enquiry or dispute.
• Marketing Consent Records: Retained for the duration of your account relationship and for one (1) year following withdrawal of consent, as evidence of the consent given.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify you.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pgwin:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data pgwin holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data pgwin holds about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pgwin's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on pgwin's legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe pgwin has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact pgwin's Data Protection Officer using the contact details in Section 14. pgwin will respond to all data subject requests within thirty (30) days of receipt, in accordance with the Data Privacy Act's requirements.

pgwin is strictly an adult gaming platform. In accordance with Philippine gaming regulations, pgwin does not permit individuals under the age of 21 years to register or use the platform. pgwin does not knowingly collect personal data from individuals under 21 years of age.

If pgwin becomes aware that personal data has been collected from an individual under 21 years of age, that account will be immediately suspended, all associated data will be deleted, and any funds held in the account will be handled in accordance with applicable regulations.

If you are a parent or guardian and believe that your child under 21 has registered on pgwin, please contact pgwin support immediately so that the account can be closed and the data removed.

The pgwin platform may contain links to third-party websites or services, such as payment provider portals (GCash, Maya) accessed during the deposit or withdrawal process. This Privacy Policy applies solely to the pgwin platform and does not cover the privacy practices of any third-party websites or services.

pgwin is not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party services you access in connection with your use of pgwin, particularly your chosen payment provider.

pgwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes to this Privacy Policy are material — meaning they significantly affect how pgwin processes your personal data or your rights as a data subject — pgwin will provide advance notice via email to your registered address or through a prominent notice on the platform, at least fourteen (14) days before the changes take effect.

Your continued use of the pgwin platform following the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with the revised policy, you may request account closure by contacting pgwin support.

pgwin has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact the pgwin DPO:

• Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the pgwin platform
• Response Time: pgwin aims to acknowledge all privacy-related enquiries within 72 hours and to provide a full response within 30 days.

If you are not satisfied with pgwin's response to your privacy enquiry or data subject request, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act.