win1 Privacy Policy

win1 ("we," "us," "our," or "the Platform") operates the online gaming platform accessible at win1.one, offering casino games, slots, bingo, and related entertainment services to players in the Philippines. win1 is the data controller responsible for the personal data of all registered players and platform visitors.

This Privacy Policy applies to all personal data collected through the win1.one website, any associated mobile applications, and all interactions between you and win1, including customer support communications, promotional activities, and payment transactions.

win1 is committed to protecting the privacy and personal data of all Filipino players in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

win1 collects the following categories of personal data from players and platform visitors:

win1 does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect biometric data, health information, or political affiliations.

win1 collects personal data through the following means:

• Direct collection: Data you provide when registering a win1 account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access and interact with the win1 platform, including through cookies, web beacons, and server logs.
• Third-party sources: Data received from payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), identity verification service providers, fraud prevention agencies, and regulatory bodies where permitted by law.
• KYC verification: Identity documents and supporting information submitted during the Know Your Customer verification process, which may be processed with the assistance of accredited third-party verification providers.

win1 uses your personal data for the following purposes:

• Account management: Creating, maintaining, and managing your win1 player account, including processing registrations, verifying your identity, and managing account settings.
• Service delivery: Providing access to all win1 games, features, and services, processing deposits and withdrawals, and crediting bonuses and winnings to your account.
• Regulatory compliance: Fulfilling win1's obligations under applicable Philippine gaming regulations, anti-money laundering (AML) laws, and data privacy legislation, including reporting to relevant authorities where required.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct on the win1 platform.
• Responsible gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling, and administering responsible gaming tools such as deposit limits and self-exclusion.
• Customer support: Responding to your inquiries, resolving disputes, and providing technical assistance related to your win1 account and gaming experience.
• Platform improvement: Analyzing usage data to improve the win1 platform, optimize game offerings, and enhance the overall player experience.
• Marketing communications: Sending you information about win1 promotions, bonuses, and new game releases, where you have consented to receive such communications or where win1 has a legitimate interest in doing so.

win1 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

win1 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfill win1's obligations under the player account agreement, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML obligations, gaming regulatory requirements, and tax reporting.
• Legitimate interests: Processing carried out for win1's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly for marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

win1 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and in accordance with applicable law:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals on your win1 account.
• Identity verification providers: Accredited KYC and AML service providers engaged to assist win1 in verifying player identities and complying with regulatory requirements.
• Game providers: Third-party game software providers whose games are available on the win1 platform, to the extent necessary for game operation and dispute resolution.
• IT and platform service providers: Cloud hosting, data storage, cybersecurity, and platform infrastructure providers engaged by win1 to operate and maintain the platform.
• Regulatory and law enforcement authorities: Philippine gaming regulators, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and law enforcement agencies, where disclosure is required by law or court order.
• Professional advisers: Legal counsel, auditors, and other professional advisers engaged by win1, subject to strict confidentiality obligations.

win1 uses cookies and similar tracking technologies to enhance your platform experience, remember your preferences, and analyze how the platform is used. The following types of cookies are used on the win1 platform:

• Essential cookies: Strictly necessary for the operation of the win1 platform, including maintaining your login session and enabling core platform functionality. These cookies cannot be disabled without affecting platform performance.
• Functional cookies: Used to remember your preferences and settings, such as language preferences and display options, to provide a more personalized experience.
• Analytics cookies: Used to collect anonymized data about how players use the win1 platform, including pages visited and features used, to help win1 improve the platform over time.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and other security threats on the win1 platform.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the win1 platform. For detailed information on the specific cookies used by win1, please refer to our Cookie Notice available within the platform settings.

win1 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account data: Retained for the duration of your active win1 account, and for a minimum of five (5) years following account closure, in accordance with Philippine AML and gaming regulatory requirements.
• Transaction records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and related regulations.
• KYC documents: Identity verification documents are retained for the period required by applicable regulatory guidelines, typically five (5) years from the end of the business relationship.
• Communications data: Customer support records and correspondence are retained for up to three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Technical and usage data: Log data and usage analytics are typically retained for up to twelve (12) months, after which they are anonymized or deleted.

Upon expiry of the applicable retention period, win1 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

win1 implements a comprehensive range of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the win1 platform is protected using 256-bit SSL/TLS encryption. Sensitive data stored on win1 systems is encrypted at rest.
• Access controls: Access to personal data is restricted to win1 personnel and authorized service providers who have a legitimate need to access it for the purposes described in this Policy. All access is logged and monitored.
• Firewalls and intrusion detection: win1 employs enterprise-grade firewalls, intrusion detection systems, and continuous security monitoring to protect platform infrastructure.
• Regular security audits: win1 conducts regular security assessments and penetration testing to identify and address potential vulnerabilities in the platform.
• Staff training: All win1 personnel with access to personal data receive regular data privacy and security training.

In the course of operating the win1 platform, your personal data may be transferred to and processed in countries outside the Philippines, for example where win1's cloud infrastructure providers or game software providers are located in other jurisdictions.

Where such international transfers occur, win1 ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized under Philippine law;
• Implementing contractual data transfer agreements that impose data protection obligations equivalent to those required under the Data Privacy Act of 2012;
• Applying additional technical and organizational safeguards where necessary to ensure the security of transferred data.

By using the win1 platform, you acknowledge and consent to the transfer of your personal data outside the Philippines where necessary for the operation of the platform, subject to the safeguards described above.

The win1 platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. win1 does not knowingly collect personal data from individuals under the age of 21.

If win1 becomes aware that personal data has been collected from a person under the age of 21, it will take immediate steps to delete that data and close the associated account. All funds associated with an underage account will be handled in accordance with applicable regulatory requirements.

win1 may send you promotional communications about bonuses, new games, special offers, and platform updates. We will only send you marketing communications where you have consented to receive them, or where win1 has a legitimate interest in contacting you about services similar to those you have already used.

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email from win1;
• Updating your communication preferences in your win1 account settings;
• Contacting win1 customer support and requesting removal from marketing lists.

Please note that opting out of marketing communications will not affect transactional communications related to your win1 account, such as deposit confirmations, withdrawal notifications, and security alerts, which are necessary for the operation of your account.

win1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. When material changes are made, win1 will notify registered players by email or through a prominent notice on the win1 platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this Privacy Policy. We encourage you to review this Policy periodically to stay informed about how win1 protects your personal data. Your continued use of the win1 platform following any update to this Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way win1 handles your personal data, please contact our Data Privacy team:

Data Privacy Officer, win1
Email: [email protected]
Available: 24/7 via live chat on the win1 platform

win1 will acknowledge all data privacy inquiries promptly and respond within the timeframes required by the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

If you are not satisfied with win1's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.