win021 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how win021 ("win021", "we", "us", "our") — the online casino and sports betting platform accessible at win021.cam — collects, uses, stores, shares, and protects the personal data of players and website visitors ("you", "your") in connection with your use of our platform and services.

This Policy is issued pursuant to the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines (the "DPA"), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission. By creating a win021 account or otherwise using our platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with win021's Terms & Conditions, which govern the overall legal relationship between you and win021.

2. Personal Data We Collect

win021 collects personal data in the categories set out below. In all cases, we aim to collect only what is genuinely necessary for the identified purpose.

2.1 Registration and Identity Data

When you create a win021 account, we collect the information you provide during the registration process, which includes:

• Full legal name as it appears on a government-issued identification document;
• Date of birth (for age verification — players must be 21 years or older);
• Email address and mobile phone number;
• Residential address (city, province, country);
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

To comply with PAGCOR licensing requirements and the Anti-Money Laundering Act of the Philippines, win021 may collect copies of the following documents:

• Government-issued photo identification (e.g., Philippine passport, SSS ID, UMID, PhilSys National ID, driver's license, PRC ID);
• Proof of address documents (e.g., utility bill, bank statement);
• Proof of payment method ownership;
• Facial photographs or video, where required for identity verification.

2.3 Financial and Transaction Data

win021 processes financial data as necessary to facilitate deposits, withdrawals, and the maintenance of your account balance. This includes:

• Deposit and withdrawal transaction records (amounts, timestamps, payment methods);
• GCash account details, Maya account details, or bank account identifiers associated with your registered payment methods;
• Transaction history, including bonus credits received and wagering activity.

2.4 Usage and Technical Data

When you access and use the win021 platform, we automatically collect certain technical information, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Pages visited, features used, and session duration;
• Referring URL and search terms used to find win021;
• Login timestamps and authentication records.

2.5 Communications Data

When you contact win021's support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the resolution applied. This allows us to maintain a consistent support history and improve our service quality.

3. How We Collect Personal Data

win021 collects personal data through the following methods:

• Directly from you: Information you provide when you register for an account, complete KYC verification, make deposits or withdrawal requests, contact our support team, or respond to surveys or promotions.
• Automatically: Technical and usage data collected through cookies, log files, and similar tracking technologies as you navigate and use the win021 platform (see Section 7).
• From third parties: Identity verification data from KYC service providers; payment status information from payment processors such as GCash, Maya, and Philippine banking partners; fraud screening data from risk management service providers.

4. Purposes of Processing Your Personal Data

win021 processes your personal data for the following specified and legitimate purposes:

Purpose	Description
Account Management	Creating, maintaining, and administering your win021 account, including processing logins, password resets, and account settings changes.
Age & Identity Verification	Verifying that you meet the minimum age requirement of 21 years and confirming your identity as required by PAGCOR and KYC regulations.
Payment Processing	Processing deposits, withdrawals, and bonus credits via GCash, Maya, BPI, BDO, Metrobank, and other supported Philippine payment methods.
Regulatory Compliance	Meeting obligations under Philippine gaming regulations, the Anti-Money Laundering Act, and the Data Privacy Act of 2012.
Security & Fraud Prevention	Detecting and preventing fraud, account takeover, money laundering, bonus abuse, and other prohibited activities.
Customer Support	Responding to player inquiries, resolving complaints, and providing technical assistance via live chat and email.
Service Improvement	Analysing aggregated usage data to improve platform performance, user experience, and game offering relevance for Filipino players.
Responsible Gaming	Monitoring gaming behaviour to support responsible gambling tools including deposit limits, self-exclusion, and session controls.
Marketing Communications	Sending you promotions, bonus offers, and platform updates by email or in-platform notification, subject to your communication preferences.

5. Legal Basis for Processing

win021 processes personal data on the basis of one or more of the following legal grounds under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Consent: Where you have provided your freely given, specific, informed, and unambiguous consent to the processing, including by accepting these terms at the point of account registration.
• Contractual Necessity: Where processing is necessary to perform the contract between you and win021 (i.e., operating your player account, processing transactions, providing gaming services).
• Legal Obligation: Where processing is necessary to comply with win021's legal and regulatory obligations under Philippine law, including PAGCOR requirements, AMLA obligations, and the Data Privacy Act.
• Legitimate Interests: Where processing is necessary for win021's legitimate business interests, such as platform security, fraud prevention, and service improvement, provided those interests do not override your fundamental rights and freedoms.

6. Sharing of Personal Data

win021 does not sell your personal data. We share personal data only in the following limited and necessary circumstances:

6.1 Service Providers

win021 engages third-party service providers to support platform operations. These may include KYC and identity verification providers, payment processing partners (including e-wallet providers operating in the Philippines), cloud hosting infrastructure providers, fraud detection and risk management services, and customer support platform vendors. All service providers are contractually bound to process personal data only as directed by win021, to maintain appropriate security standards, and not to disclose data for their own commercial purposes.

6.2 Regulatory and Legal Authorities

win021 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, or courts where required to do so by applicable Philippine law, regulation, court order, or lawful government request.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of win021's assets, personal data held by win021 may be transferred to the successor entity. Players will be notified of any such transfer and the privacy practices of the successor entity prior to the transfer becoming effective.

7. Cookies and Tracking Technologies

win021 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and understand how players interact with the site. The types of cookies we use include:

• Essential Cookies: Required for the platform to function correctly, including maintaining your logged-in session, security tokens, and language preferences. These cannot be disabled without affecting platform functionality.
• Analytics Cookies: Used to collect aggregate, anonymised data about how visitors use win021, including page views, session duration, and navigation patterns. This helps us identify areas for improvement.
• Functional Cookies: Used to remember your preferences, such as your preferred game view, notification settings, and last visited game categories.
• Security Cookies: Used to detect fraudulent activity, enforce session timeouts, and support account security monitoring.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to use the win021 platform. win021 does not use third-party advertising cookies or share your browsing behaviour with external ad networks.

8. Data Retention

win021 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. Our standard retention guidelines are as follows:

• Account and identity data: Retained for the duration of your win021 account and for a minimum of five (5) years following account closure, as required by PAGCOR and AMLA obligations.
• Transaction and financial records: Retained for a minimum of five (5) years in compliance with Philippine financial record-keeping regulations.
• Support communications: Retained for a period of two (2) years following the resolution of the relevant inquiry.
• Technical and usage data: Retained in anonymised or aggregated form for analytics purposes. Identifiable log data is retained for up to twelve (12) months.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Data Security

win021 implements and maintains a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and win021's servers;
• Encryption of sensitive personal data at rest within our database infrastructure;
• Strict access controls ensuring that only authorised personnel with a legitimate operational need can access personal data;
• Regular security audits and vulnerability assessments of our platform infrastructure;
• Two-factor authentication availability for player accounts;
• Automatic session timeouts to protect accounts on shared or unattended devices;
• Login anomaly detection to flag and respond to suspicious access attempts.

Despite these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. If you suspect that your win021 account has been compromised, please contact our support team immediately via live chat.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by win021:

• Right to be Informed: The right to be informed about how win021 processes your personal data, as set out in this Policy.
• Right of Access: The right to request a copy of the personal data win021 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request the correction of inaccurate or incomplete personal data held in your win021 account.
• Right to Erasure: The right to request the deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose it was collected and no overriding legal retention obligation applies.
• Right to Restrict Processing: The right to request that win021 limit the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Object: The right to object to processing based on win021's legitimate interests, including direct marketing communications.
• Right to Damages: The right to claim compensation for damages suffered as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data in accordance with the DPA.

To exercise any of these rights, please contact win021's support team via live chat or email at the address in Section 15. We will respond to your request within thirty (30) days of receipt, or within the timeframe prescribed by applicable law.

11. Children's Privacy and Age Restriction

Parents and guardians who believe that a person under 21 years of age has registered on win021 without authorisation are encouraged to contact our support team immediately. Age verification is part of win021's mandatory KYC process, and accounts where the 21+ requirement cannot be confirmed will be suspended pending verification.

12. Cross-Border Data Transfers

win021's primary operations and data storage are Philippines-based. However, certain service providers — including cloud infrastructure providers and KYC verification partners — may process data in data centres located outside the Philippines. Where such cross-border transfers occur, win021 ensures that:

• The recipient country or organisation provides an adequate level of data protection consistent with Philippine standards;
• Appropriate contractual safeguards, such as data processing agreements with standard contractual clauses, are in place between win021 and the receiving party;
• The transfer is notified to the National Privacy Commission where required under the DPA and its implementing rules.

13. Third-Party Links

The win021 platform may contain references to third-party services, payment providers, or game developers. This Policy applies exclusively to data collected and processed by win021 in connection with the win021 platform. win021 is not responsible for the privacy practices of third-party game providers, payment processors, or any other external entities whose services are accessed in connection with win021. We encourage you to review the privacy policies of any third-party services you use in conjunction with win021.

14. Updates to This Privacy Policy

win021 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. Material changes to this Policy will be communicated to registered players via email notification and/or a prominent notice on the win021 platform no less than seven (7) days prior to the change taking effect.

The effective date of the most recent version of this Policy is displayed at the top of this page. Your continued use of win021 following the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree with the changes, please contact our support team to discuss your options, including account closure.

15. Contact Information and Complaints

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or have a complaint about how win021 has handled your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the live chat widget on win021.cam. Our Filipino-speaking support agents can assist with all privacy-related inquiries and will escalate data subject requests to our data privacy team.
• Email: [email protected] — for formal data subject requests, privacy complaints, and any inquiry requiring written documentation. We aim to acknowledge your request within two (2) business days and provide a substantive response within thirty (30) days.

If you are not satisfied with win021's response to a privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), the government body responsible for enforcing the Data Privacy Act of 2012. Information about the NPC's complaint process is available on the NPC's official website.