win100 Privacy Policy

This Privacy Policy ("Policy") describes how win100 ("win100," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of users ("you," "Player," or "User") who access or use the win100 online gaming platform at win100.club (the "Platform"). This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an Account on win100 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to close your Account.

1. Introduction

1.1 win100 is committed to protecting the privacy and personal data of all its Players. We understand that trust is the foundation of any lasting relationship, and we take our data protection obligations seriously — not just because the law requires it, but because our Filipino players deserve nothing less.

1.2 This Policy applies to all personal data collected through the win100 Platform, including data collected via the website, mobile site, live chat, email correspondence, and any other channel through which you interact with win100.

1.3 This Policy should be read together with win100's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller

2.1 win100 is the data controller responsible for the personal data collected through the Platform. As data controller, win100 determines the purposes and means of processing your personal data.

2.2 win100 operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to PAGCOR's data governance requirements in addition to the requirements of the Data Privacy Act of 2012.

2.3 win100 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO at [email protected] with the subject line "Data Protection Officer."

3. Personal Data We Collect

win100 collects the following categories of personal data:

3.1 Sensitive Personal Information. In certain circumstances, win100 may collect sensitive personal information as defined under the Data Privacy Act of 2012, including government-issued identification numbers and financial account information. Such sensitive personal information is collected only where strictly necessary for identity verification, regulatory compliance, or the prevention of fraud and money laundering, and is handled with the highest level of care and security.

4. How We Collect Your Data

win100 collects personal data through the following means:

• Direct interactions: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Data collected automatically when you access the Platform, including cookies, web beacons, pixel tags, and server logs that record your IP address, device identifiers, and browsing behavior on the Platform.
• Third-party sources: Data received from identity verification providers, payment processors (such as GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank), fraud prevention services, and PAGCOR where required for regulatory compliance.
• Publicly available sources: In limited circumstances, win100 may verify information against publicly available records for identity verification or fraud prevention purposes.

5. How We Use Your Personal Data

win100 uses your personal data for the following purposes:

1. Account management: To register and maintain your win100 Account, verify your identity, and manage your Account settings and preferences.
2. Service delivery: To provide access to games, process bets, calculate and pay out winnings, and deliver the full range of win100 gaming services.
3. Financial transactions: To process deposits and withdrawals via GCash, PayMaya, and supported Philippine banks, and to maintain accurate financial records.
4. Regulatory compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine laws and regulations.
5. Responsible gaming: To monitor gaming activity for signs of problem gambling, enforce self-exclusion requests, and apply deposit and loss limits set by Players.
6. Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, unauthorized Account access, money laundering, and other illegal activity.
7. Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance through our 24/7 support channels.
8. Marketing communications: To send you promotional offers, bonus notifications, and platform updates, subject to your communication preferences. You may opt out at any time.
9. Platform improvement: To analyze usage patterns, conduct research, and improve the functionality, performance, and user experience of the win100 Platform.
10. Legal proceedings: To establish, exercise, or defend legal claims in connection with your use of the Platform.

6. Legal Basis for Processing

win100 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the win100 Terms & Conditions, including Account management, game delivery, and financial transactions.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA requirements, NPC directives, and other applicable Philippine laws.
• Legitimate interests: Processing necessary for win100's legitimate business interests, including fraud prevention, security monitoring, and platform improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

7.1 win100 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• PAGCOR and regulatory authorities: win100 is required to share certain player data with PAGCOR and other Philippine regulatory bodies as a condition of its gaming license. This may include identity information, transaction records, and gaming activity data.
• Law enforcement and government agencies: win100 may disclose personal data to the Anti-Money Laundering Council (AMLC), the National Bureau of Investigation (NBI), the Philippine National Police (PNP), or other government agencies where required by law or court order.
• Payment processors: Financial data is shared with GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment service providers solely for the purpose of processing your transactions.
• Identity verification providers: win100 uses third-party KYC (Know Your Customer) service providers to verify the identity and age of Players. These providers process identity documents and biometric data under strict confidentiality agreements.
• Game software providers: Certain gaming data may be shared with win100's game software providers to facilitate game delivery, resolve technical disputes, and ensure game integrity.
• IT and security service providers: win100 engages third-party providers for cloud hosting, cybersecurity, fraud detection, and platform maintenance. These providers access personal data only as necessary to perform their contracted services and are bound by data processing agreements.

7.2 All third parties with whom win100 shares personal data are required to maintain appropriate technical and organizational security measures and to process personal data only in accordance with win100's instructions and applicable Philippine data protection law.

7.3 Cross-border transfers. Where personal data is transferred outside the Philippines (for example, to cloud service providers with servers in other countries), win100 ensures that appropriate safeguards are in place in accordance with NPC guidelines on cross-border data transfers.

8. Cookies and Tracking Technologies

8.1 win100 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support security and fraud prevention functions.

8.2 The following types of cookies are used on the win100 Platform:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display options, and game history to provide a more personalized experience.
• Analytics cookies: Collect anonymized data about how Players use the Platform, including pages visited and features used, to help win100 improve its services.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of win100's marketing campaigns. These cookies are only set with your consent.

8.3 You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the win100 Platform. For strictly necessary cookies, disabling them through browser settings may prevent you from accessing certain features of the Platform.

9. Data Retention

9.1 win100 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the duration of your Account and for a period thereafter as required by applicable law.

9.2 The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your Account plus a minimum of five (5) years after Account closure, as required by PAGCOR regulations and AMLA compliance obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with AMLA requirements.
• Gaming activity data: Retained for a minimum of three (3) years from the date of the activity, for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, after which it is deleted or anonymized within thirty (30) days.

9.3 Upon expiry of the applicable retention period, win100 will securely delete or anonymize your personal data in accordance with NPC guidelines on data disposal.

10. Data Security

10.1 win100 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• AES-256 encryption for data stored at rest on win100 servers;
• TLS 1.3 encryption for all data transmitted between your device and the win100 Platform;
• Multi-factor authentication options for Player Accounts;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• 24/7 security monitoring and intrusion detection systems;
• Regular staff training on data protection and information security best practices.

10.2 Data Breach Notification. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, win100 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay, in accordance with the Data Privacy Act of 2012 and NPC Circular No. 16-03.

10.3 While win100 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your win100 Account credentials and for notifying us immediately of any suspected unauthorized access.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by win100:

11.1 To exercise any of the above rights, please contact win100's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." win100 will respond to all valid requests within fifteen (15) business days. In complex cases, this period may be extended by a further thirty (30) days, with prior notice to you.

11.2 win100 may request proof of identity before processing a data subject rights request to ensure that personal data is not disclosed to unauthorized parties.

12. Children's Privacy

12.1 The win100 Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine law and PAGCOR regulations. win100 does not knowingly collect personal data from individuals under the age of 21.

12.2 If win100 becomes aware that it has inadvertently collected personal data from a person under 21 years of age, it will take immediate steps to delete that data and close the associated Account. Any funds deposited by an underage player will be returned to the payment method used for deposit, subject to verification.

12.3 If you believe that win100 may have collected personal data from a person under 21 years of age, please contact us immediately at [email protected].

13. Third-Party Links

13.1 The win100 Platform may contain links to third-party websites or services. This Privacy Policy applies solely to the win100 Platform and does not cover the privacy practices of any third-party websites. win100 is not responsible for the content or privacy practices of any third-party sites and encourages you to review the privacy policies of any external sites you visit.

14. Changes to This Privacy Policy

14.1 win100 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Where changes are material, win100 will provide reasonable advance notice to Players via email or a prominent notice on the Platform.

14.2 The date of the most recent revision is indicated at the top of this Policy. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

15. Contact Us & Filing Complaints

15.1 If you have any questions, concerns, or requests regarding this Privacy Policy or win100's data processing practices, please contact our Data Protection Officer:

• Email: [email protected] (Subject: "Data Protection Officer")
• Live Chat: Available 24/7 via the win100 Platform
• Response Time: Within 15 business days for formal data subject requests

15.2 Filing a Complaint with the NPC. If you believe that win100 has violated your data privacy rights under the Data Privacy Act of 2012 and you are not satisfied with win100's response to your complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available through the NPC's official government channels.