pilwin Privacy Policy

1 Introduction

pilwin is committed to protecting the privacy and security of your personal information. We recognise that when you choose to provide us with information about yourself, you trust us to act responsibly and in your best interests. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have regarding your data.

This Policy applies to all users of the pilwin platform, including registered players, visitors to our website, and any other persons who interact with our services. It should be read in conjunction with our Terms and Conditions, which govern your use of the pilwin platform.

pilwin operates in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission of the Philippines. We are committed to upholding the highest standards of data protection and privacy.

2 Data Controller

For the purposes of this Privacy Policy and applicable data protection laws, pilwin is the data controller responsible for the collection, processing, and protection of your personal information. As the data controller, we determine the purposes and means of processing your personal data.

If you have any questions, concerns, or requests regarding the processing of your personal data, you may contact our Data Protection Officer at: [email protected]

3 Information We Collect

pilwin collects and processes various categories of personal information to provide our services, comply with legal obligations, and ensure the security and integrity of our platform. The types of personal information we collect include:

3.1 Information You Provide Directly:

• Registration Information: Full name, date of birth, gender, residential address in the Philippines, email address, mobile phone number, and username.
• Identity Verification Documents: Government-issued photo ID (e.g., Philippine passport, driver's license, UMID, SSS ID), proof of address (utility bills, bank statements), and proof of payment method ownership.
• Financial Information: Payment method details (GCash account, PayMaya account, bank account information), transaction history, deposit and withdrawal records.
• Communications: Any information you provide when contacting our customer support team, including chat transcripts, emails, and support tickets.

3.2 Information Collected Automatically:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, bet history, session duration, clickstream data, and interaction with platform features.
• Location Data: Approximate geographic location derived from your IP address to ensure compliance with jurisdictional restrictions.
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies (see Section 10 for details).

3.3 Information from Third Parties:

• Payment Processors: Transaction confirmation and verification data from GCash, PayMaya, and banking partners.
• Identity Verification Services: Results of identity checks and fraud prevention screenings conducted by third-party verification providers.
• Regulatory Authorities: Information received from PAGCOR or other regulatory bodies in connection with licensing and compliance obligations.

4 How We Use Your Data

pilwin processes your personal information for the following purposes:

• Account Management: To create and maintain your pilwin account, verify your identity, and authenticate your login credentials.
• Service Provision: To provide access to our gaming platform, process bets and wagers, calculate winnings, and manage your account balance.
• Payment Processing: To process deposits and withdrawals, verify payment methods, and prevent fraudulent transactions.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Legal Compliance: To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under Philippine law, respond to lawful requests from authorities, and fulfill regulatory reporting requirements.
• Security and Fraud Prevention: To detect and prevent fraud, money laundering, underage gambling, account abuse, and other illegal activities.
• Platform Improvement: To analyse usage patterns, improve our services, develop new features, and enhance user experience.
• Marketing Communications: To send you promotional offers, bonuses, and updates about pilwin services (only with your consent, and you may opt out at any time).
• Responsible Gaming: To monitor gambling behaviour, identify problem gambling patterns, and enforce self-exclusion and deposit limits.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, pilwin processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., to provide pilwin services as outlined in our Terms and Conditions).
• Legal Obligation: Processing is required to comply with Philippine laws and regulations, including KYC, AML, and PAGCOR licensing requirements.
• Consent: You have provided explicit consent for specific processing activities, such as receiving marketing communications.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, and platform improvement, provided these interests do not override your fundamental rights and freedoms.

6 Data Sharing & Disclosure

pilwin does not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your data only in the following limited circumstances:

• Service Providers: We engage trusted third-party service providers to perform functions on our behalf, including payment processing (GCash, PayMaya, banks), identity verification, fraud detection, customer support, and IT infrastructure. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
• Regulatory Authorities: We may disclose your information to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), or other Philippine government agencies when required by law or in response to lawful requests.
• Legal Proceedings: We may disclose your data if required to do so by court order, subpoena, or other legal process, or to establish, exercise, or defend our legal rights.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of pilwin's assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.
• Fraud Prevention: We may share information with fraud prevention agencies and other online gaming operators to detect and prevent fraudulent activity, collusion, and account abuse.

7 Data Security

pilwin takes the security of your personal information seriously and implements appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols. Sensitive data stored on our servers is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorised personnel only, on a need-to-know basis. All employees with access to personal data are bound by confidentiality obligations.
• Secure Infrastructure: Our servers are hosted in secure data centres with physical security controls, including 24/7 monitoring, access logs, and intrusion detection systems.
• Regular Audits: We conduct regular security audits and vulnerability assessments to identify and address potential security risks.
• Incident Response: We maintain an incident response plan to promptly detect, investigate, and respond to data breaches or security incidents.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

8 Data Retention

pilwin retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal data associated with active accounts is retained for the duration of your relationship with pilwin.
• Closed Accounts: After you close your account, we retain certain personal data for a period of five (5) years to comply with Philippine legal and regulatory requirements, including AML and tax obligations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years as required by the Anti-Money Laundering Act and its implementing regulations.
• Marketing Data: If you have consented to receive marketing communications, we retain your contact information until you withdraw your consent or your account is closed.

After the applicable retention period expires, your personal data will be securely deleted or anonymised in accordance with our data retention and disposal procedures.

9 Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request deletion of your personal data, subject to legal retention requirements.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or based on legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at: [email protected]. We will respond to your request within fifteen (15) business days.

10 Cookies & Tracking Technologies

pilwin uses cookies and similar tracking technologies to enhance your experience on our platform, analyse usage patterns, and deliver personalised content. Cookies are small text files stored on your device that allow us to recognise you and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: Required for the platform to function properly, including authentication and security features.
• Performance Cookies: Collect anonymous information about how you use pilwin to help us improve our services.
• Functional Cookies: Remember your preferences and settings to provide a personalised experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising (only with your consent).

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of the pilwin platform. For more information about cookies and how to manage them, please visit your browser's help section.

11 Children's Privacy

pilwin is not intended for use by persons under the age of 21. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that information and close the associated account.

If you are a parent or guardian and believe that your child has provided personal information to pilwin, please contact us immediately at: [email protected]

12 International Data Transfers

pilwin primarily processes personal data within the Philippines. However, some of our service providers and technology partners may be located outside the Philippines. When we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012 and its implementing rules.

These safeguards may include standard contractual clauses, adequacy decisions by the National Privacy Commission, or other legally recognised transfer mechanisms. By using pilwin, you consent to the transfer of your personal data to countries outside the Philippines where necessary to provide our services.

13 Changes to This Privacy Policy

pilwin reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes to this Policy, we will notify registered users via email and post a notice on our platform.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of pilwin after any changes to this Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your personal information.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

Email: [email protected]

Customer Support: Available 24/7 via live chat on the pilwin platform.

For complaints or concerns regarding data privacy, you may also contact the National Privacy Commission of the Philippines:

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC)
Vicente Sotto Street, Pasay City, Metro Manila, Philippines
Email: [email protected]