plwin Privacy Policy

1 Who We Are

plwin ("plwin," "we," "us," "our") is the operator of the online casino and sports betting platform accessible at plwin.vip. plwin operates as the data controller in respect of all personal data collected from players registered on the platform. As data controller, plwin determines the purposes and means of processing personal data and is responsible for ensuring that such processing complies with applicable data protection legislation, including the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

For any privacy-related inquiries, including data subject access requests, corrections, or objections to processing, please contact plwin's support team via 24/7 live chat on plwin.vip. Contact details for our Data Protection Officer are provided in Section 14 of this Policy.

2 Personal Data We Collect

plwin collects the following categories of personal data in the course of operating the platform and providing services to registered players:

2.1 Identity & Contact Data

• Full legal name as it appears on a government-issued identification document
• Date of birth (used to verify the 21+ age requirement)
• Registered mobile number (Philippine format, used for OTP authentication and GCash linking)
• Email address (used for account communications and password recovery)
• Residential address (collected during KYC verification)

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., PhilSys National ID, UMID, Driver's License, Passport)
• Selfie or live photo taken during identity verification
• Proof of address documentation where required
• Source-of-funds documentation where required for AML compliance

2.3 Financial Data

• GCash or Maya account number (mobile number) used for deposits and withdrawals
• Bank account details where bank transfer is used as a payment method
• Transaction history including deposit amounts, withdrawal requests, and processing timestamps
• Bonus and promotional credit history

2.4 Gaming Activity Data

• Game session logs including games played, bet amounts, win/loss records, and session duration
• Sports betting history including events selected, odds at time of bet, and outcomes
• Responsible gaming tool usage including deposit limits set, session reminders activated, and self-exclusion requests

2.5 Technical & Device Data

• IP address at time of registration and login
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Approximate geolocation derived from IP address (country/region level only)

3 How We Collect Personal Data

plwin collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or submit a complaint.
• Automatically — through cookies, session tokens, and server logs when you access and navigate the plwin website, whether logged in or not.
• From third-party payment processors — transaction confirmation data received from GCash, Maya, BPI, BDO, and other payment providers when you initiate a deposit or withdrawal.
• From identity verification partners — where plwin uses a third-party KYC service provider to perform identity document verification, that provider may share verification results and associated data with plwin.
• From game providers — aggregated and individual gaming activity data is received from plwin's licensed game studio partners for the purpose of calculating balances, applying wagering requirements, and resolving disputes.

4 Legal Basis for Processing

plwin processes your personal data on the following legal bases as defined under the Philippine Data Privacy Act of 2012 and its implementing rules:

• Contractual necessity: Processing is necessary to perform the contract between you and plwin — specifically, to operate your account, process deposits and withdrawals, provide gaming services, and fulfil bonus commitments.
• Legal obligation: Processing is required to comply with applicable laws, including KYC and AML obligations under Philippine anti-money laundering legislation, age verification requirements under PAGCOR regulations, and tax reporting obligations.
• Legitimate interests: plwin processes certain data based on legitimate interests including fraud prevention, platform security, responsible gaming monitoring, and service improvement analytics — where such interests are not overridden by your data protection rights.
• Consent: Where plwin sends you marketing communications or uses non-essential cookies, we do so on the basis of your explicit consent, which you may withdraw at any time.

5 How We Use Your Personal Data

plwin uses collected personal data for the following specific purposes:

• Creating and managing your plwin player account, including authentication and security
• Verifying your identity and age in compliance with PAGCOR regulations and KYC requirements
• Processing deposits, withdrawals, and all financial transactions associated with your account
• Providing customer support and responding to queries, complaints, and disputes
• Administering bonuses, promotions, and loyalty programmes
• Monitoring gaming activity to identify and address problem gambling behaviours in line with plwin's Responsible Gaming commitments
• Detecting, investigating, and preventing fraud, cheating, money laundering, and other prohibited activities
• Complying with legal and regulatory obligations including AML reporting and PAGCOR compliance
• Improving platform performance, user experience, and game library curation based on aggregated usage analytics
• Sending you account-related notifications, transaction confirmations, and — where you have consented — promotional communications

6 Sharing Your Personal Data

plwin does not sell, rent, or trade your personal data. We share personal data with third parties only in the following circumstances and only to the extent strictly necessary:

• Payment processors: GCash (G-Xchange Inc.), Maya (Voyager Innovations), BPI, BDO, UnionBank, and other qualifying payment service providers — for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers engaged by plwin to verify identity documents submitted during account verification.
• Game studio partners: Licensed game providers including PG Soft, Pragmatic Play, Evolution Gaming, and others — for the purpose of delivering game content, calculating outcomes, and recording gaming activity.
• Legal and regulatory authorities: Philippine government agencies including the Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission, and law enforcement — where disclosure is required by law, court order, or regulatory direction.
• Professional advisers: Legal counsel, auditors, and insurers engaged by plwin — bound by confidentiality obligations — where required for the operation of the business.

All third-party processors engaged by plwin are contractually required to process personal data only for the specified purpose, maintain appropriate security standards, and comply with applicable data protection law.

7 Cookies & Tracking Technologies

plwin uses cookies and similar tracking technologies on the plwin.vip website. Cookies are small text files placed on your device by your browser when you visit a website. plwin uses the following categories of cookies:

• Strictly necessary cookies: Required for the website to function, including session management, authentication tokens, and load balancing. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences such as language settings and device-specific display configurations to improve your experience across sessions.
• Analytics cookies: Used to collect aggregated, anonymised data about how users navigate the platform — pages visited, session duration, bounce rates — to help plwin improve the website. These are activated only with your consent.
• Marketing cookies: Used where you have consented to receive targeted promotional content. These track interactions with plwin marketing materials across sessions.

You may manage your cookie preferences through your browser settings at any time. Disabling non-essential cookies will not affect your ability to register or use your plwin account.

8 Data Security

plwin implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and plwin servers
• AES-256 encryption for personal data stored in plwin databases
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Multi-factor authentication for internal staff access to systems containing personal data
• Regular security audits and penetration testing conducted by independent third parties
• Incident response procedures for detecting, responding to, and notifying affected individuals of data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, plwin will notify you and the National Privacy Commission as required by the Data Privacy Act of 2012 and its implementing rules without undue delay.

9 Data Retention

plwin retains personal data for the following periods, after which data is securely deleted or anonymised:

• Account and identity data: For the duration of your active plwin account and for five (5) years following account closure, in compliance with AML record-keeping obligations under Republic Act No. 9160 (Anti-Money Laundering Act) as amended.
• Transaction records: Five (5) years from the date of each transaction, in compliance with AML and gaming regulatory requirements.
• KYC documents: Five (5) years from the date of submission or from account closure, whichever is later.
• Customer support correspondence: Three (3) years from the date of last interaction.
• Technical logs (IP address, session data): Ninety (90) days, unless retained for longer in connection with an active fraud or security investigation.
• Marketing consent records: Until consent is withdrawn plus three (3) years to demonstrate compliance.

10 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by plwin:

• Right to be informed: The right to be informed of how your personal data is being processed — fulfilled by this Privacy Policy.
• Right of access: The right to request a copy of the personal data plwin holds about you and information about how it is processed.
• Right to correction: The right to have inaccurate or incomplete personal data corrected. You may update most account information directly in your plwin account settings.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests. plwin will cease such processing unless compelling legitimate grounds exist that override your interests.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and no legal retention obligation applies. Note that certain data must be retained by plwin for AML and gaming regulatory compliance and cannot be deleted on request.
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another controller where technically feasible.
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe plwin has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact plwin's support team via 24/7 live chat on plwin.vip or via the email address displayed in the footer of this page. plwin will respond to all data rights requests within thirty (30) calendar days of receipt.

11 Children's Privacy

The plwin platform is strictly intended for persons aged twenty-one (21) years and above in compliance with PAGCOR regulations and Philippine law. plwin does not knowingly collect personal data from persons under the age of 21. If plwin discovers that personal data has been collected from a person under the required minimum age, that data will be deleted and the associated account will be closed immediately. If you have reason to believe that a person under 21 has registered a plwin account, please contact plwin support immediately via live chat.

12 International Data Transfers

plwin's primary data processing infrastructure is hosted in data centres serving the Asia-Pacific region. In certain circumstances — for example, where a third-party game provider or payment processor operates servers in other jurisdictions — personal data may be transferred outside the Philippines. Where such transfers occur, plwin ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses requiring the recipient to maintain data protection standards equivalent to those required by Philippine law. By using the plwin platform, you acknowledge and consent to the transfer of your personal data as described in this section.

13 Changes to This Privacy Policy

plwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email notification or a prominent on-platform notice, with a minimum of fourteen (14) days' notice before the revised Policy takes effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of the plwin platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should discontinue use of the platform and contact support to close your account.

14 Contact Us & Data Protection Officer

For all privacy-related inquiries, data subject access requests, complaints regarding personal data handling, or requests to exercise any of the rights described in Section 10, please contact plwin using the following channels:

• Live Chat: 24/7 live chat support available directly on plwin.vip — the fastest channel for privacy inquiries.
• Email: Our support email address is displayed as plain text in the footer of every page on plwin.vip. Please include "Privacy Request" in the subject line for prompt routing to our data protection team.

plwin has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012. The DPO can be contacted through the support channels listed above. All privacy inquiries directed to plwin are treated with strict confidentiality and will receive a substantive response within thirty (30) calendar days.

If you are not satisfied with plwin's response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines.