wwin Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected, processed, stored, and used by wwin ("wwin," "we," "our," or "the Company") in connection with the operation of the wwin platform located at wwin.asia, including all associated games, services, promotions, customer support interactions, and any mobile applications offered by wwin.

For the purposes of applicable Philippine data protection law, wwin is the personal information controller in respect of all personal data collected through the wwin platform. This means that wwin determines the purposes for which and the means by which your personal data is processed.

This Policy applies to all individuals who interact with the wwin platform, including registered account holders, individuals who browse the platform without registering, applicants for employment at wwin (whose data is processed separately under recruitment processes), and individuals who contact wwin's customer support team.

This Policy should be read in conjunction with wwin's Terms and Conditions, which govern the overall legal relationship between wwin and registered players.

wwin collects personal data from you directly when you provide it, automatically when you use the platform, and in limited circumstances from third parties such as payment processors and identity verification services. The categories of personal data we collect include the following:

• Full legal name as it appears on your government-issued Philippine ID;
• Date of birth (for age verification — players must be 21 years of age or older);
• Philippine mobile number (in +63 format);
• Email address;
• Username chosen at registration;
• Residential address in the Philippines.

• Copies of government-issued Philippine identification documents (UMID, Driver's License, Passport, PhilSys ID, SSS ID, PRC License, Voter's ID, or equivalent);
• Selfie photographs taken during the verification process;
• Proof of address documentation where requested;
• Source of funds documentation where required for enhanced due diligence.

• Deposit and withdrawal amounts, dates, and payment method details (GCash, Maya, BPI, BDO, UnionBank, Metrobank, USDT, Coins.ph, and other supported channels);
• Account balance history;
• Betting and wagering history, including game names, bet amounts, and outcomes;
• Bonus and promotion participation records.

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, and browser version;
• Session duration, login timestamps, and page navigation patterns;
• Cookies and similar tracking technologies (see Section 8).

• Records of live chat conversations, email correspondence, and support ticket submissions;
• Feedback, complaints, and survey responses where provided.

wwin processes personal data only where a lawful basis exists under applicable Philippine data protection law. The lawful bases on which wwin relies for its processing activities include:

• Contractual necessity: Processing required to enter into or perform the contract between wwin and the Player, including account management, game delivery, payment processing, and customer support;
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, age verification requirements, regulatory reporting, and court orders;
• Legitimate interests: Processing necessary for wwin's legitimate business interests, including fraud prevention, network security, platform improvement, and responsible gaming monitoring, where these interests are not overridden by your data protection rights;
• Consent: Processing for optional purposes such as direct marketing communications, where you have provided clear, affirmative, and freely given consent that may be withdrawn at any time.

wwin uses the personal data it collects for the following purposes:

• Account creation and management: Establishing and maintaining your wwin account, including processing login authentication and account security features;
• Identity verification (KYC): Verifying your identity, age, and eligibility to use the wwin platform in accordance with regulatory requirements;
• Payment processing: Facilitating deposits, withdrawals, and refunds via your chosen payment method;
• Game service delivery: Enabling access to and participation in all games and features available on the wwin platform;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, bonus abuse, and other unlawful activities on the platform;
• Responsible gaming: Monitoring player behaviour to identify signs of problem gambling and providing appropriate responsible gaming tools and interventions in accordance with wwin's obligations and commitments;
• Customer support: Responding to inquiries, resolving disputes, and providing technical assistance;
• Regulatory compliance: Meeting anti-money laundering, counter-terrorism financing, and other regulatory obligations, including mandatory reporting to competent Philippine authorities;
• Platform improvement: Analysing aggregated usage data to improve the performance, functionality, and user experience of the wwin platform;
• Marketing communications: Where you have provided consent, sending promotional emails, SMS notifications, and in-platform messages about wwin offers, new games, and events.

wwin does not sell, rent, or trade your personal data to third parties for commercial purposes. wwin may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

wwin engages third-party service providers who process personal data on wwin's behalf and under wwin's instructions as personal information processors. These include payment processing companies (such as the technical operators behind GCash, Maya, BPI, and other payment channels), identity verification and KYC service providers, cloud hosting and IT infrastructure providers, customer support technology platforms, and fraud detection and prevention services. All service providers are bound by data processing agreements that require them to process personal data only for the specified purpose and to maintain appropriate security standards.

The game software providers whose titles are available on wwin — including JILI, PG Soft, Pragmatic Play, and others — may receive limited technical data necessary for game functionality, including Player ID, session tokens, and bet/win records. Such data sharing is limited to what is technically required for game operation and is governed by contractual data protection obligations.

wwin may be required by law, court order, or regulatory direction to disclose personal data to Philippine government agencies, law enforcement, PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent authorities. wwin will comply with such requirements and will notify the affected Player where legally permissible to do so.

In the event of a merger, acquisition, restructuring, or sale of all or part of wwin's business, personal data held by wwin may be transferred to the acquiring or successor entity as part of the transaction, subject to equivalent data protection obligations being assumed by the receiving entity.

As an online platform serving Filipino players, wwin's operations involve certain service providers and technology infrastructure that may be located outside the Philippines. Where personal data is transferred to a country that does not provide a level of data protection equivalent to that required under Philippine law, wwin implements appropriate safeguards to protect the transferred data, including contractual clauses that bind the receiving party to data protection standards consistent with Philippine requirements.

You may request further information about the specific safeguards applied to international transfers of your personal data by contacting wwin at [email protected].

wwin retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active account data: Retained for the duration of your wwin account and for a period of five (5) years following account closure, to meet anti-money laundering regulatory requirements and to handle any late-arising disputes or legal claims;
• KYC documents: Retained for a minimum of five (5) years from the date of account closure or last transaction, as required by applicable AML regulations;
• Transaction records: Retained for five (5) years from the date of the transaction for regulatory compliance purposes;
• Customer support records: Retained for three (3) years from the date of the last interaction, to support dispute resolution and service improvement;
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of the consent given;
• Technical logs: Retained for up to twelve (12) months for fraud prevention and platform security purposes.

When personal data is no longer required and no legal obligation to retain it exists, wwin securely deletes or anonymizes the data in accordance with its internal data lifecycle procedures.

wwin uses cookies and similar tracking technologies (including local storage and session tokens) on the wwin platform. Cookies are small text files placed on your device when you visit a website. They serve a range of functions as described below:

• Strictly necessary cookies: Required for the platform to function, including session authentication, login state management, and security features. These cannot be disabled without affecting your ability to use the platform;
• Functional cookies: Remember your preferences, language settings, and display configurations to personalise your experience on wwin;
• Analytical cookies: Collect aggregated, anonymised data about how players use the platform — such as which game categories are most frequently visited — to help wwin improve performance and navigation. This data does not identify individual players;
• Security cookies: Help wwin detect and prevent fraudulent activity, including account takeover attempts and session hijacking.

You can manage or disable non-essential cookies through your browser settings. Please be aware that disabling certain cookies may affect the functionality of parts of the wwin platform. wwin does not currently use third-party advertising cookies or retargeting cookies that track your behaviour across external websites.

wwin implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, and disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and wwin servers;
• Encrypted storage of sensitive personal and financial data at rest;
• Role-based access controls ensuring that only authorised wwin personnel with a legitimate operational need can access personal data;
• Multi-factor authentication for wwin administrative system access;
• Regular security assessments and penetration testing of the wwin platform;
• Anomaly detection systems that monitor for unusual account access patterns and trigger alerts for suspected unauthorised activity.

In the event of a personal data breach that is likely to result in high risk to your rights and freedoms, wwin will notify affected players and the National Privacy Commission within the timeframes required by applicable Philippine law.

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, you have the following rights in respect of your personal data held by wwin:

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Privacy Request" and include your registered email address and a description of the right you wish to exercise. wwin will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days, or within any shorter period required by applicable law. Requests that are manifestly unfounded or excessive may be subject to a reasonable administrative fee or may be declined, with written reasons provided.

If you are a parent or guardian and have reason to believe that your minor child has submitted personal data to wwin, please contact us immediately at [email protected]. wwin will investigate and, where confirmed, take prompt action to delete the data and close any associated account.

Where you have provided your consent during registration or subsequently through account settings, wwin may send you promotional communications via email or SMS about wwin offers, new games, tournaments, and platform updates. You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email from wwin;
• Updating your communication preferences in your wwin account settings;
• Contacting wwin support at [email protected] with a request to unsubscribe.

Withdrawal of consent to marketing communications will not affect the lawfulness of processing based on consent before its withdrawal. You will continue to receive transactional communications related to your account (such as security alerts, deposit confirmations, and KYC requests) regardless of your marketing communication preferences, as these are sent on the basis of contractual necessity rather than consent.

The wwin platform may contain references to or integrations with third-party services, including payment gateway interfaces. These third parties operate their own privacy policies and data practices that are independent of wwin. wwin is not responsible for the privacy practices, content, or security of third-party services. You should review the privacy policies of any third-party services you use in connection with your wwin account, including your GCash, Maya, or banking application.

wwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The effective date at the top of this Policy will be updated whenever a material change is made. Where changes are significant, wwin will notify registered players via their registered email address and/or a prominent notice on the platform prior to the changes taking effect.

Your continued use of the wwin platform following publication of an updated Policy constitutes your acknowledgement of the changes. wwin recommends that you review this Policy periodically to stay informed of how your personal data is being handled.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by wwin, please contact us using the following channels:

• Email: [email protected] — with subject line "Data Privacy Request" for data subject rights requests
• Live Chat: Available 24 hours a day, 7 days a week through the wwin platform when logged into your account

wwin's data protection team will acknowledge all written privacy-related requests within five (5) business days and resolve them within thirty (30) calendar days unless an extension is required due to the complexity or volume of requests, in which case you will be informed in writing of the reason for the extension and the expected resolution date.

If you are not satisfied with wwin's response to a privacy-related concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data protection matters under the Data Privacy Act of 2012. Information about how to file a complaint with the NPC is available on the NPC's official Philippine government website.