PGWin Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how PGWin ("PGWin," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "your," or "Player") who access or use the PGWin online casino and sports betting platform, available at https://pgwin.pro and through the PGWin mobile application (collectively, the "Platform").

PGWin is committed to protecting the privacy and personal data of all Filipino players who use our Platform. We operate in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all other applicable Philippine laws and regulations governing the collection and processing of personal data.

By registering an account on PGWin, accessing the Platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the PGWin Platform.

2 Data Controller

For the purposes of applicable Philippine data protection law, PGWin is the data controller responsible for your personal information collected through the Platform. As data controller, PGWin determines the purposes and means by which your personal data is processed.

PGWin has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. If you have any questions or concerns about how PGWin handles your personal data, you may contact our DPO using the contact details provided in Section 14 of this Policy.

3 Personal Data We Collect

PGWin collects the following categories of personal data from players who use the Platform:

3.1 Registration and Identity Data

• Full legal name
• Date of birth (used to verify that you are 21 years of age or older)
• Gender
• Nationality and country of residence
• Email address
• Mobile phone number
• Residential address
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence, UMID)
• Proof of address documents (e.g., utility bills, bank statements)
• Selfie or facial image for identity verification purposes
• Source of funds documentation where required by applicable regulations

3.3 Financial and Transaction Data

• Payment method details (e.g., GCash account number, PayMaya account, bank account details, card details)
• Deposit and withdrawal history
• Transaction amounts and timestamps
• Bonus and promotional activity records

3.4 Gaming and Betting Activity Data

• Game history, bet records, and wagering activity
• Session duration and frequency of play
• Responsible gaming tool usage (deposit limits, self-exclusion requests)
• Bonus and free spin usage

3.5 Technical and Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Unique device identifiers
• Log data including access times, pages visited, and error reports

3.6 Communications Data

• Records of communications between you and PGWin's customer support team
• Live chat transcripts and email correspondence
• Feedback and survey responses

4 How We Collect Your Data

PGWin collects personal data through the following means:

• Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, participate in promotions, or otherwise interact with the Platform.
• Automatically: When you access and use the Platform, we automatically collect technical and device data through cookies, web beacons, and similar tracking technologies. See Section 8 for more details on our use of cookies.
• From third-party service providers: PGWin may receive data about you from identity verification providers, payment processors, fraud prevention services, and analytics providers who assist us in operating the Platform.
• From regulatory and law enforcement authorities: In certain circumstances, PGWin may receive information about you from Philippine regulatory bodies or law enforcement agencies in connection with legal obligations or investigations.

5 How We Use Your Personal Data

PGWin uses the personal data we collect for the following purposes:

PGWin will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

6 Legal Basis for Processing

PGWin processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable Philippine regulations:

• Contractual necessity: Processing that is necessary to perform our contract with you, including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing that is required to comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and gaming regulatory requirements.
• Legitimate interests: Processing that is necessary for PGWin's legitimate business interests, including fraud prevention, platform security, and improving our services, provided that such interests are not overridden by your rights and interests.
• Consent: Where PGWin relies on your consent as the legal basis for processing — for example, for sending you marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Sharing Your Personal Data

PGWin does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and in accordance with this Privacy Policy:

• Payment processors and financial institutions: To process your deposits and withdrawals via GCash, PayMaya, BDO, BPI, Metrobank, and other approved payment methods. These providers process your data only as necessary to complete your transactions.
• Identity verification providers: To conduct KYC checks and verify your identity and age in compliance with applicable regulations.
• Fraud prevention and security services: To detect and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
• IT and platform service providers: Including cloud hosting providers, software vendors, and technical support partners who assist PGWin in operating and maintaining the Platform. All such providers are bound by data processing agreements that restrict their use of your data.
• Analytics providers: To help PGWin understand how the Platform is used and to improve user experience. Analytics data is processed in aggregated or anonymized form where possible.
• Regulatory and law enforcement authorities: PGWin may disclose your personal data to Philippine regulatory bodies, law enforcement agencies, or courts where required by applicable law, a valid legal order, or to protect the rights and safety of PGWin, its players, or the public.
• Business successors: In the event of a merger, acquisition, or sale of all or part of PGWin's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

8 Cookies & Tracking Technologies

PGWin uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support our security and fraud prevention measures. The following types of cookies are used on the PGWin Platform:

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Performance and analytics cookies: These cookies collect information about how players use the Platform, such as which pages are visited most frequently and whether error messages are received. This data is used in aggregated form to improve the Platform.
• Functional cookies: These cookies allow the Platform to remember your preferences, such as your language settings and display preferences, to provide a more personalized experience.
• Targeting and advertising cookies: Where you have consented, PGWin may use cookies to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the PGWin Platform. For more information on managing cookies, refer to your browser's help documentation.

9 Data Retention

PGWin retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

The following general retention periods apply to the main categories of personal data held by PGWin:

• Account and registration data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with applicable Philippine AML and gaming regulatory requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Financial and transaction records: Retained for a minimum of five (5) years following the date of the transaction, in accordance with applicable financial record-keeping requirements.
• Gaming and betting activity records: Retained for a minimum of three (3) years following the date of the activity, or longer where required by applicable regulations.
• Customer support communications: Retained for a minimum of two (2) years following the resolution of the relevant matter.
• Technical and device data: Retained for up to twelve (12) months from the date of collection, unless required for longer periods for security or fraud investigation purposes.

Upon expiry of the applicable retention period, PGWin will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

10 Data Security

PGWin takes the security of your personal data seriously and implements a range of technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the PGWin Platform is encrypted using industry-standard Secure Socket Layer (SSL) / Transport Layer Security (TLS) protocols.
• Secure data storage: Personal data is stored on secure servers with restricted access controls. Access to personal data is limited to authorized PGWin personnel and service providers who require it to perform their functions.
• Password security: Account passwords are stored in encrypted form using strong hashing algorithms. PGWin staff cannot view your password in plain text.
• Access controls: PGWin implements role-based access controls to ensure that employees can only access personal data that is necessary for their specific job functions.
• Security monitoring: PGWin continuously monitors the Platform for suspicious activity, unauthorized access attempts, and potential security vulnerabilities.
• Staff training: All PGWin staff who handle personal data receive regular training on data protection obligations and security best practices.

While PGWin takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, PGWin will notify you and the relevant Philippine authorities in accordance with applicable law.

11 Your Data Protection Rights

Under the Data Privacy Act of 2012 and applicable Philippine regulations, you have the following rights in relation to your personal data held by PGWin:

• Right to be informed: You have the right to be informed about how PGWin collects and uses your personal data. This Privacy Policy fulfils that obligation.
• Right of access: You have the right to request a copy of the personal data that PGWin holds about you, along with information about how it is processed.
• Right to rectification: You have the right to request that PGWin corrects any inaccurate or incomplete personal data held about you. You may update certain account details directly through your PGWin account settings.
• Right to erasure: You have the right to request that PGWin deletes your personal data in certain circumstances, such as where the data is no longer necessary for the purpose for which it was collected. This right is subject to PGWin's legal obligations to retain certain data.
• Right to object: You have the right to object to PGWin's processing of your personal data where that processing is based on legitimate interests or for direct marketing purposes.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that PGWin transmit that data to another controller where technically feasible.
• Right to withdraw consent: Where PGWin processes your data on the basis of your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that PGWin has processed your personal data in violation of applicable data protection law.

To exercise any of the above rights, please contact PGWin's Data Protection Officer using the contact details in Section 14. PGWin will respond to all valid requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified accordingly.

12 Children's Privacy

The PGWin Platform is strictly intended for adults aged 21 years and above. PGWin does not knowingly collect personal data from individuals under the age of 21. The minimum age requirement is enforced through our account registration process and identity verification procedures.

If PGWin becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds held in such an account will be handled in accordance with PGWin's Terms & Conditions.

If you are a parent or guardian and believe that your child has registered an account on PGWin, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

13 Updates to This Privacy Policy

PGWin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made to this Policy, PGWin will notify registered players by email or through a prominent notice on the Platform prior to the changes taking effect.

The updated Privacy Policy will be published on this page with a revised "Last Updated" date. We encourage you to review this Policy periodically to stay informed about how PGWin protects your personal data.

Your continued use of the PGWin Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should cease using the Platform and may request account closure by contacting our support team.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or PGWin's handling of your personal data, please contact our Data Protection Officer using the details below. We are committed to addressing all privacy-related inquiries promptly and transparently.

Data Protection Officer — PGWin

Email: [email protected]
Please include "Data Privacy Request" in the subject line of your email.

Response Time: PGWin aims to acknowledge all privacy-related inquiries within 48 hours and to provide a substantive response within 30 days of receipt.

If you are not satisfied with PGWin's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

This Privacy Policy was last updated on January 1, 2026. Previous versions are available upon request by contacting PGWin support.