Privacy Policy

1 Introduction & Scope

1.1 gwin Casino is committed to protecting the privacy and personal data of all individuals who interact with its platform. This Policy applies to all personal data collected, processed, stored, and shared by gwin in connection with the operation of gwin.cam, its customer support functions, its marketing activities, and its compliance obligations under Philippine law.

1.2 This Policy applies to:

• Registered Players who hold an active or closed gwin Account.
• Visitors to gwin.cam who have not yet registered but whose browsing data may be collected via cookies and analytics tools.
• Individuals who contact gwin support via live chat or email.
• Individuals who subscribe to gwin marketing communications.

1.3 This Policy governs processing activities conducted by gwin in connection with its Philippine-market operations. Where gwin engages third-party processors to handle personal data on its behalf, those processors are required to comply with equivalent data protection standards.

2 Data Controller

2.1 For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), gwin Casino is the Personal Information Controller in respect of the personal data processed under this Policy. As Personal Information Controller, gwin determines the purposes and means of processing your personal data.

2.2 gwin has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with RA 10173. Contact details for gwin's DPO are provided in Section 16 of this Policy.

2.3 Where gwin engages third-party service providers to process personal data on its behalf — such as payment processors, game providers, or identity verification services — those parties act as Personal Information Processors under instruction from gwin and under contractual data protection obligations.

3 Personal Data We Collect

gwin collects the following categories of personal data, depending on how you interact with the platform:

gwin does not collect sensitive personal information (as defined under RA 10173, e.g. health data, religious beliefs, political affiliations) except where required by law — for example, source-of-funds documentation for AML compliance may incidentally include information about employment or income sources.

4 How We Collect Your Data

gwin collects personal data through the following mechanisms:

4.1 Direct Collection

Data you provide directly when you register an Account on gwin.cam, complete identity verification (KYC), make a deposit or withdrawal request, contact gwin support via live chat or email, or subscribe to gwin promotional communications.

4.2 Automated Technical Collection

Data collected automatically when you visit or use the gwin platform, including via cookies, web beacons, server logs, and similar tracking technologies. This includes Technical Data such as IP address, device identifiers, and session information. See Section 8 (Cookies & Tracking) for further details.

4.3 Third-Party Sources

gwin may receive personal data from third parties in limited circumstances, including: identity verification service providers (to validate KYC documents); payment processors (to confirm transaction details); fraud prevention and AML screening services; and regulatory bodies, where required by law. Data received from third parties is handled in accordance with this Policy and applicable law.

5 Legal Bases for Processing

Under the Philippine Data Privacy Act, gwin processes personal data on the following lawful bases:

6 How We Use Your Personal Data

gwin uses your personal data for the following purposes:

• Account creation and management — registering and maintaining your gwin Account, verifying your identity, managing your login credentials, and processing account settings changes.
• Service delivery — providing access to the gwin game lobby, processing bets, calculating and crediting winnings, and operating the overall platform experience.
• Payment processing — facilitating deposits via GCash, Maya, BDO, BPI, UnionBank, 7-Eleven, and other accepted methods; processing withdrawal requests to verified payment accounts.
• Identity verification (KYC) — verifying your identity and age (21+) as required by PAGCOR regulations and Philippine AML law before processing withdrawals.
• AML compliance — monitoring transactions for suspicious patterns, filing Suspicious Transaction Reports (STRs) with the AMLC where required by law, and maintaining mandatory transaction records.
• Responsible gaming — monitoring account activity to identify potential problem gambling patterns, enforcing self-exclusion and deposit limit settings, and providing access to responsible gaming tools.
• Customer support — handling your queries, complaints, and support requests via live chat and email in English and Tagalog.
• Fraud prevention and security — detecting and preventing unauthorized access to your Account, identifying and blocking fraudulent activity, and protecting the integrity of the gwin platform.
• Marketing — sending you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time.
• Platform improvement — analyzing aggregated and anonymized usage data to understand how players use gwin, identify technical issues, and improve the product experience.
• Legal compliance and enforcement — complying with applicable Philippine laws, regulatory requirements, and court orders; enforcing gwin's Terms & Conditions; and pursuing or defending legal claims.

7 Sharing Your Personal Data

7.1 gwin does not sell your personal data. We share your personal data only in the circumstances described in this section, and only to the extent necessary for the specified purpose.

7.2 Service Providers (Personal Information Processors)

gwin shares personal data with third-party service providers who process data on our behalf under written agreements that impose equivalent data protection obligations. These include:

• Payment processors — GCash (GXI), Maya (Voyager Innovations), BDO, BPI, UnionBank, and other payment partners to facilitate transaction processing.
• Game content providers — licensed game studios such as Pragmatic Play, PG Soft, Jili, and others, who may receive anonymized session data for game operation and RNG certification purposes.
• Identity verification providers — KYC and document verification services that process identity documents to verify Player age and identity.
• Fraud prevention and AML screening services — third-party risk and compliance tools that process transaction and identity data to detect fraud and meet AML obligations.
• IT infrastructure and cloud services — hosting, database, and security service providers who maintain the technical infrastructure on which gwin operates.

7.3 Regulatory and Law Enforcement Disclosure

gwin may disclose personal data to the following authorities without your prior consent, where required or permitted by Philippine law:

• PAGCOR (Philippine Amusement and Gaming Corporation) — for regulatory oversight, licensing compliance, and investigation of player complaints.
• AMLC (Anti-Money Laundering Council) — for mandatory Suspicious Transaction Report (STR) and Covered Transaction Report (CTR) filing under the AMLA.
• National Privacy Commission (NPC) — in connection with data breach notification obligations or regulatory inquiries.
• Courts, law enforcement, and other competent Philippine authorities — where disclosure is required by a valid court order, subpoena, or legal process.

7.4 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or a substantial part of gwin's business assets, personal data held by gwin may be transferred to the acquiring entity. Players will be notified of any such transfer and of any changes to this Policy that result from the transaction, prior to the transfer taking effect.

8 Cookies & Tracking Technologies

8.1 gwin uses cookies and similar tracking technologies on gwin.cam to enable core platform functionality, improve user experience, and — where you have consented — to serve relevant promotional content.

8.2 Types of Cookies Used

• Strictly Necessary Cookies — required for the platform to function. These include session authentication cookies that keep you logged in to your gwin Account and security cookies that protect against cross-site request forgery. These cannot be disabled without affecting platform functionality.
• Functional Cookies — remember your preferences such as language settings, display preferences, and last-played game to provide a more personalized experience.
• Analytics Cookies — collect aggregated, anonymized data about how visitors use gwin.cam — which pages are visited, how long sessions last, and which features are most used. This data helps gwin improve the platform. Analytics cookies are only set with your consent.
• Marketing Cookies — used to deliver promotional content relevant to your gaming interests. These are only set with your explicit consent and may be withdrawn at any time.

8.2 You may manage your cookie preferences at any time via your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the gwin platform — in particular, you will not be able to remain logged in to your Account.

9 Data Storage & Security

9.1 Security Measures. gwin implements appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include TLS encryption for data in transit, encrypted storage for sensitive data at rest, access controls limiting data access to authorized personnel on a need-to-know basis, regular security assessments and penetration testing, and activity monitoring and anomaly detection systems.

9.2 No Absolute Guarantee. While gwin employs industry-standard security practices, no system can guarantee absolute security against all threats. You are also responsible for maintaining the security of your gwin Account credentials. If you believe your Account has been compromised, contact gwin support immediately via live chat at gwin.cam.

9.3 Data Breach Response. In the event of a personal data breach that creates a real risk of serious harm to affected individuals, gwin will: (a) notify the National Privacy Commission within 72 hours of discovering the breach; and (b) inform affected Players without undue delay, providing details of the nature of the breach, categories of data affected, and steps being taken to address it.

10 Data Retention

10.1 gwin retains personal data for no longer than is necessary to fulfill the purposes for which it was collected, or as required by Philippine law. The following general retention periods apply:

• Account and identity data — retained for the duration of the Account and for a minimum of 5 years after Account closure, in compliance with AMLA record-keeping requirements.
• Transaction records — retained for a minimum of 5 years from the date of each transaction, as required under the AMLA.
• KYC documents — retained for the duration of the Account plus 5 years after closure, or longer where required by a regulatory investigation or legal proceeding.
• Customer support records — retained for 3 years from the date of the support interaction, unless a complaint or legal dispute is ongoing.
• Marketing data — retained until you withdraw consent or opt out, plus a short administrative period for processing the opt-out.
• Technical / analytics data — anonymized or aggregated data may be retained indefinitely; identifiable technical data (e.g., IP logs) is retained for up to 12 months.

10.2 When retention periods expire and no lawful basis for continued retention exists, personal data is securely deleted or permanently anonymized in accordance with gwin's data disposal procedures.

11 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by gwin:

To exercise any of these rights, contact gwin's Data Protection Officer using the details in Section 16. gwin will respond to verified data subject requests within 30 days of receipt. Requests may require identity verification before gwin can act on them, to protect against unauthorized access to your data by a third party.

If you believe gwin has not handled your personal data in accordance with this Policy or RA 10173, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. NPC contact details are available at the NPC's official website.

12 Children & Minors

12.1 The gwin platform is strictly intended for persons who are 21 years of age or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. gwin does not knowingly collect personal data from individuals under the age of 21.

12.2 Where gwin discovers that personal data has been collected from a person who is under 21 years of age, gwin will immediately close the Account, void any associated balance, delete the personal data, and — where relevant — report the incident in accordance with applicable regulatory obligations.

12.3 Parents and guardians are encouraged to use device-level parental control tools to prevent underage access to online gambling platforms, including gwin.cam.

13 Marketing Communications

13.1 gwin may send you promotional communications — including bonus offers, game updates, and platform news — via email and SMS where you have provided consent at the time of registration or subsequently through Account Settings.

13.2 You may opt out of marketing communications at any time by:

• Updating your communication preferences in your gwin Account Settings.
• Clicking the "unsubscribe" link included in every marketing email sent by gwin.
• Replying "STOP" to any marketing SMS from gwin.
• Contacting gwin support via live chat or email and requesting removal from marketing lists.

13.3 Opting out of marketing communications will not affect your ability to use the gwin platform or receive service-related communications (e.g., transaction confirmations, account security alerts, support responses) which are essential to the operation of your Account.

13.4 gwin does not share your contact details with third-party marketers for their independent marketing purposes.

14 Cross-Border Data Transfers

14.1 In connection with the operation of the gwin platform, personal data may be transferred to and processed in countries other than the Philippines — for example, where gwin's hosting infrastructure or third-party game providers are located outside the Philippines.

14.2 Where such transfers occur, gwin ensures that appropriate safeguards are in place to protect transferred data to a standard equivalent to the protection afforded under RA 10173. Safeguards may include contractual data protection clauses with the receiving party, adequacy determinations, or other lawful transfer mechanisms recognized by the National Privacy Commission.

14.3 By registering an Account on gwin and accepting this Policy, you consent to the transfer of your personal data outside the Philippines where necessary for the purposes described in this Policy and subject to the safeguards described above.

15 Changes to This Privacy Policy

15.1 gwin reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law, or changes to the gwin platform. The "Last Updated" date at the top of this Policy will be revised whenever material changes are made.

15.2 For material changes — particularly changes that affect the legal basis for processing, the categories of data collected, or your rights — gwin will provide prior notice to registered Players via their registered email address where reasonably practicable, or via a prominent notice on gwin.cam.

15.3 Continued use of the gwin platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept changes to this Policy, you should close your Account and cease using the platform.

16 Contact & Data Protection Officer

If you have questions about this Privacy Policy, wish to exercise your data subject rights under RA 10173, or need to report a privacy concern, please contact gwin's Data Protection Officer through the following channels:

• Live Chat: Available 24/7 at gwin.cam — initial privacy queries handled by the support team, escalated to the DPO where appropriate.
• Email: [email protected] — for formal data subject requests, please indicate "Data Privacy Request" in your subject line. gwin will acknowledge receipt within 3 business days and provide a substantive response within 30 days.
• Languages: Privacy inquiries may be submitted in English or Tagalog.