pgwin Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how pgwin ("pgwin," "we," "us," or "our") collects, uses, processes, stores, shares, and protects the personal information of users ("you," "your," or "User") who access or use our online gaming platform located at https://pgwin.cam (the "Platform"). This Policy applies to all personal data collected through the Platform, including data provided during account registration, gameplay, customer support interactions, and marketing communications.

pgwin is committed to protecting your privacy and ensuring the security of your personal information in accordance with the Republic of the Philippines Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and applicable international data protection standards. By creating an account, accessing the Platform, or using any pgwin services, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal information as described in this Policy.

This Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which are incorporated herein by reference. If you do not agree with any provision of this Policy, you must immediately discontinue use of the Platform and refrain from creating an account or providing any personal information.

pgwin reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through prominent notice on the Platform or via email to registered users. Continued use of the Platform following any such changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information.

2. Data Controller and Contact Information

pgwin is the data controller responsible for the collection and processing of your personal information. For questions, concerns, or requests regarding your personal data or this Privacy Policy, you may contact our Data Protection Officer through the following channels:

• Email: [email protected]
• Customer Support: Available 24/7 via live chat on the Platform
• Response Time: We aim to respond to all privacy-related inquiries within 72 hours of receipt

When contacting us regarding privacy matters, please provide sufficient information to allow us to verify your identity and locate your account records. We may request additional documentation to confirm your identity before processing certain requests, particularly those involving access to or deletion of personal data.

3. Information We Collect

3.1 Information You Provide Directly

We collect personal information that you voluntarily provide when registering for an account, using our services, or communicating with us. This information includes:

• Registration Information: Full legal name, date of birth, gender, residential address, email address, mobile phone number, username, and password
• Identity Verification Documents: Government-issued identification (Philippine passport, driver's license, national ID, SSS/GSIS ID), proof of address (utility bills, bank statements), and payment method verification documents
• Financial Information: Payment method details (GCash mobile number, Maya account, bank account information), transaction history, deposit and withdrawal records, and payment processor account identifiers
• Communication Data: Content of messages, emails, and live chat conversations with customer support, including attachments and metadata
• Survey and Feedback Data: Responses to voluntary surveys, feedback forms, promotional questionnaires, and player satisfaction assessments
• Responsible Gaming Data: Self-imposed deposit limits, loss limits, session time limits, self-exclusion preferences, and problem gambling assessment responses

3.2 Information Collected Automatically

When you access or use the Platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), mobile network information
• Usage Data: Pages visited, games played, betting patterns, session duration, click-stream data, referral sources, search queries within the Platform
• Location Data: IP address, approximate geographic location derived from IP address, GPS coordinates (if you grant permission on mobile devices)
• Gaming Activity: Bets placed, games played, winnings and losses, bonus usage, tournament participation, gameplay statistics and patterns
• Technical Data: Log files, error reports, performance metrics, bandwidth usage, connection quality, API calls and responses

3.3 Information from Third-Party Sources

We may receive personal information about you from third-party sources, including:

• Payment Processors: Transaction verification, fraud screening results, payment method validation, chargeback notifications
• Identity Verification Services: Age verification, identity authentication, address confirmation, sanctions screening, politically exposed person (PEP) checks
• Marketing Partners: Attribution data, referral source information, advertising campaign performance metrics
• Social Media Platforms: Public profile information if you choose to connect your social media accounts to your pgwin account
• Fraud Prevention Services: Device fingerprinting, behavioral biometrics, risk scores, fraud alerts, shared blacklists

4. How We Use Your Information

pgwin uses your personal information for the following purposes, each of which constitutes a lawful basis for processing under applicable data protection law:

4.1 Account Management and Service Provision

• Creating and maintaining your user account
• Processing deposits, withdrawals, and other financial transactions
• Providing access to games, betting services, and platform features
• Managing bonuses, promotions, and loyalty programs
• Calculating and crediting winnings, debiting losses, and maintaining accurate account balances
• Responding to customer support inquiries and resolving disputes

4.2 Legal and Regulatory Compliance

• Verifying your identity, age, and eligibility to use gaming services
• Complying with anti-money laundering (AML) and know-your-customer (KYC) requirements
• Detecting and preventing fraud, collusion, money laundering, and other illegal activities
• Maintaining records required by Philippine gaming regulations and tax authorities
• Responding to lawful requests from law enforcement, regulators, and courts
• Enforcing our Terms and Conditions and other legal agreements

4.3 Security and Fraud Prevention

• Monitoring for suspicious activity, unusual betting patterns, and potential security threats
• Preventing unauthorized access, account takeover, and identity theft
• Detecting and blocking automated bots, scripts, and cheating software
• Protecting the integrity of games and ensuring fair play for all users
• Investigating reports of abuse, harassment, or violations of platform rules

4.4 Marketing and Communications

• Sending promotional offers, bonus notifications, and tournament announcements (with your consent)
• Personalizing marketing messages based on your gaming preferences and activity
• Conducting market research, surveys, and player satisfaction assessments
• Communicating important account updates, policy changes, and service announcements
• Managing your communication preferences and opt-out requests

4.5 Platform Improvement and Analytics

• Analyzing user behavior to improve platform design, functionality, and user experience
• Testing new features, games, and services before public release
• Optimizing platform performance, loading times, and technical stability
• Identifying popular games, features, and content to inform business decisions
• Generating aggregated, anonymized statistics for internal reporting and industry benchmarking

4.6 Responsible Gaming Support

• Monitoring for signs of problem gambling behavior
• Enforcing self-imposed limits, cooling-off periods, and self-exclusion agreements
• Providing responsible gaming tools, resources, and support information
• Complying with social responsibility obligations under Philippine gaming regulations

5. Legal Basis for Processing

Under Philippine data protection law and international standards such as GDPR, we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (Terms and Conditions) and provide gaming services you have requested
• Legal Obligation: Processing is required to comply with legal obligations including AML/KYC regulations, gaming license requirements, tax reporting, and law enforcement requests
• Legitimate Interests: Processing is necessary for our legitimate business interests in fraud prevention, security, platform optimization, and business analytics, provided these interests do not override your fundamental rights and freedoms
• Consent: You have provided explicit, informed consent for marketing communications, optional data collection, or uses not covered by the above legal bases. You may withdraw consent at any time without affecting the lawfulness of prior processing

6. Information Sharing and Disclosure

pgwin does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information with the following categories of recipients under appropriate safeguards:

6.1 Service Providers and Business Partners

• Payment Processors: GCash, Maya, banks, and other financial institutions that process deposits and withdrawals on our behalf
• Game Providers: Third-party game developers and studios whose games are available on our platform
• Identity Verification Services: Companies that perform age verification, identity authentication, and fraud screening
• Customer Support Vendors: Third-party providers of customer service tools, live chat software, and helpdesk solutions
• Marketing Service Providers: Email service providers, SMS gateways, advertising platforms, and analytics tools (with your consent for marketing purposes)
• Hosting and Infrastructure Providers: Cloud hosting services, content delivery networks (CDNs), and data storage providers
• Security Vendors: Fraud detection services, DDoS protection providers, cybersecurity consultants

All service providers are contractually obligated to protect your personal information, use it only for the purposes we specify, and maintain appropriate security measures. We conduct due diligence on all vendors before engagement and monitor compliance with our data protection standards.

6.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, law enforcement, regulators, and courts when required or permitted by law, including:

• Philippine gaming regulators and licensing authorities
• Anti-Money Laundering Council (AMLC) and financial intelligence units
• National Police, National Bureau of Investigation (NBI), and other law enforcement agencies responding to valid legal requests
• Tax authorities requiring transaction records for compliance purposes
• Courts and tribunals in connection with legal proceedings

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

6.4 With Your Consent

We may share your information with other third parties when you have provided explicit consent for such sharing, such as connecting your account to social media platforms or participating in third-party promotions.

7. Data Security Measures

pgwin implements industry-standard technical, physical, and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security practices include:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 or higher. Sensitive data stored in our databases is encrypted at rest using AES-256 encryption
• Access Controls: Role-based access controls limit employee access to personal information on a need-to-know basis. Multi-factor authentication is required for administrative access
• Network Security: Firewalls, intrusion detection systems, DDoS protection, and regular security audits protect our infrastructure from external threats
• Secure Development: Security-by-design principles, code reviews, penetration testing, and vulnerability assessments throughout the software development lifecycle
• Employee Training: All employees with access to personal data receive mandatory data protection and information security training
• Incident Response: Documented procedures for detecting, responding to, and reporting security incidents and data breaches
• Third-Party Audits: Regular independent security assessments and compliance certifications from recognized authorities

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously monitor and improve our security practices to minimize risks. You are responsible for maintaining the confidentiality of your account credentials and must notify us immediately of any unauthorized access to your account.

8. Data Retention

pgwin retains your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal information is retained for the duration of your active account plus seven (7) years after account closure, as required by Philippine gaming and financial regulations
• Transaction Records: Financial transaction records, including deposits, withdrawals, bets, and winnings, are retained for a minimum of seven (7) years for audit, tax compliance, and regulatory purposes
• Identity Verification Documents: KYC/AML documentation is retained for seven (7) years after the business relationship ends
• Marketing Communications: Marketing data is retained until you opt out or withdraw consent, after which it is deleted within 30 days
• Technical Logs: Server logs, access logs, and technical data are typically retained for 12-24 months for security and troubleshooting purposes
• Legal Holds: Data subject to ongoing legal proceedings, investigations, or regulatory inquiries is retained until the matter is resolved

After retention periods expire, we securely delete or anonymize personal information in accordance with our data destruction policies. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes.

9. Your Privacy Rights

Under Philippine data protection law, you have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal information we hold about you, including details about how it is processed
• Right to Rectification: You may request correction of inaccurate or incomplete personal information
• Right to Erasure: You may request deletion of your personal information, subject to legal retention requirements and legitimate business needs
• Right to Object: You may object to processing of your personal information for direct marketing purposes or based on legitimate interests
• Right to Restrict Processing: You may request that we limit how we use your personal information in certain circumstances
• Right to Data Portability: You may request a machine-readable copy of your personal information to transfer to another service provider
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting prior lawful processing
• Right to Lodge a Complaint: You may file a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to verified requests within 30 days. In some cases, we may need to verify your identity before processing your request, and we may deny requests that are manifestly unfounded, excessive, or would compromise the rights of others.

10. Cookies and Tracking Technologies

pgwin uses cookies, web beacons, pixels, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and understand how you use our services.

Types of Cookies We Use:

• Essential Cookies: Required for platform functionality, including login authentication, session management, and security features. These cannot be disabled
• Performance Cookies: Collect anonymous usage statistics to help us understand how visitors interact with the Platform and identify areas for improvement
• Functional Cookies: Remember your preferences, language settings, and customizations to provide a more personalized experience
• Marketing Cookies: Track your activity across websites to deliver relevant advertisements and measure marketing campaign effectiveness (only with your consent)

You can manage cookie preferences through your browser settings. However, disabling essential cookies may prevent you from using certain features of the Platform. Most browsers accept cookies automatically, but you can configure your browser to refuse cookies or alert you when cookies are being sent. For more information about cookies and how to manage them, visit www.allaboutcookies.org.

11. International Data Transfers

pgwin primarily operates within the Philippines and stores data on servers located in the Philippines or other jurisdictions with adequate data protection standards. However, some of our service providers and business partners may be located in other countries. When we transfer personal information internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant data protection authorities
• Adequacy decisions recognizing the recipient country's data protection laws as substantially equivalent to Philippine standards
• Binding corporate rules for transfers within multinational corporate groups
• Your explicit consent for specific transfers

12. Children's Privacy

pgwin's services are not directed to individuals under the age of 21. We do not knowingly collect, use, or disclose personal information from persons under 21 years of age. If we discover that we have inadvertently collected personal information from a minor, we will promptly delete such information from our systems and terminate the associated account. If you believe a minor has provided personal information to pgwin, please contact us immediately at [email protected].

13. Changes to This Privacy Policy

pgwin reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting a prominent notice on the Platform homepage
• Sending an email notification to your registered email address
• Requiring your acknowledgment upon your next login to the Platform

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of the Platform after changes become effective constitutes your acceptance of the revised Policy.

14. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

• Data Protection Officer: [email protected]
• Customer Support: Available 24/7 via live chat on the Platform
• General Inquiries: [email protected]

We are committed to resolving privacy concerns promptly and transparently. If you are not satisfied with our response, you have the right to file a complaint with the National Privacy Commission of the Philippines.