1win ph Privacy Policy

1. Overview

1win ph ("we," "us," "our," or the "Platform") is committed to protecting the privacy and personal data of all users ("you," "your," or "User") who access and use the 1win ph website and its associated services. This Privacy Policy forms part of our broader commitment to responsible, transparent, and lawful data processing.

This policy applies to all personal data collected through the 1win ph website, mobile-optimized platform, customer support channels, and any other touchpoints through which you interact with us. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data is used solely to provide, improve, and secure the 1win ph platform and to comply with our legal obligations under Philippine law.

2. Personal Data We Collect

Depending on how you interact with the 1win ph platform, we may collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, government-issued ID number (e.g., PhilSys ID, passport, driver's license, SSS/GSIS number).
• Contact Data: Email address, mobile number, residential address (including barangay, city/municipality, province, and ZIP code).
• Account Data: Username, encrypted password, account registration date, account status, and preferences.
• Financial Data: GCash number, Maya account details, bank account details (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank), debit card details (partial, for verification purposes only), transaction history, deposit and withdrawal records.
• Gaming Data: Game history, betting records, wagering activity, bonus usage, session duration, and game preferences.
• Technical Data: IP address, browser type and version, device type and operating system, time zone, screen resolution, and referring URL.
• Usage Data: Pages visited, features used, click-through data, session logs, and interaction patterns on the 1win ph platform.
• Communications Data: Records of your correspondence with our customer support team, including live chat transcripts and email exchanges.
• Verification Data: Copies of government-issued identification documents and proof of address submitted for Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance purposes.

3. How We Collect Your Data

1win ph collects personal data through the following means:

• Direct Interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technologies: Data collected automatically when you access the platform, including cookies, web beacons, pixel tags, and server logs. See Section 10 for our full Cookies Policy.
• Third-Party Sources: Data received from payment processors (GCash, Maya, banks), identity verification service providers, fraud prevention agencies, and regulatory bodies where permitted by law.
• Publicly Available Sources: In limited circumstances, data from publicly available sources such as government registries or public social media profiles, solely for identity verification or fraud prevention purposes.

4. Purpose of Processing Your Data

We process your personal data for the following specific, legitimate purposes:

• To create, manage, and maintain your 1win ph account.
• To verify your identity and age (21+ requirement) in compliance with PAGCOR regulations and Philippine law.
• To process deposits, withdrawals, and other financial transactions via GCash, Maya, and Philippine bank transfers.
• To detect, prevent, and investigate fraud, money laundering, and other illegal activities.
• To provide customer support and respond to your inquiries and complaints.
• To personalize your gaming experience and deliver relevant promotions and offers.
• To monitor and enforce compliance with our Terms & Conditions and Responsible Gaming Policy.
• To analyze platform usage and improve the performance, security, and features of the 1win ph platform.
• To comply with applicable legal and regulatory obligations, including reporting requirements under Philippine anti-money laundering laws.
• To send you service-related communications, including account notifications, security alerts, and policy updates.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, 1win ph processes your personal data on the following legal bases:

• Consent: Where you have given your explicit consent to the processing of your personal data for one or more specific purposes, such as receiving marketing communications.
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and 1win ph (i.e., the Terms & Conditions), including account management and transaction processing.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which 1win ph is subject, including KYC, AML, and PAGCOR reporting requirements.
• Legitimate Interests: Where processing is necessary for the legitimate interests of 1win ph or a third party, such as fraud prevention, platform security, and service improvement, provided that such interests are not overridden by your rights and freedoms.

6. Data Sharing & Disclosure

1win ph does not sell or rent your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: GCash, Maya, and Philippine banking partners, solely to process your financial transactions.
• Identity Verification Providers: Third-party KYC and AML service providers engaged to verify your identity and comply with regulatory requirements.
• Technology Service Providers: Cloud hosting, cybersecurity, analytics, and customer support platform providers who process data on our behalf under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where required by law or court order.
• Professional Advisors: Legal counsel, auditors, and other professional advisors, subject to confidentiality obligations.

Any third party with whom we share your data is required to handle it in accordance with applicable data protection laws and our data processing agreements. We do not authorize third parties to use your data for their own marketing purposes.

7. Data Retention

1win ph retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with Philippine AML regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended).
• KYC/Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer Support Records: Retained for three (3) years from the date of the last interaction.
• Technical and Usage Data: Retained for up to twelve (12) months, unless required for longer periods for security or legal purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with our data disposal procedures.

8. Data Security

1win ph implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 1win ph platform.
• Encryption of sensitive data at rest, including financial data and government ID information.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing.
• Multi-factor authentication for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use a strong, unique password for your 1win ph account and to enable any available two-factor authentication features.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 1win ph:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed.
• Right of Access: The right to request a copy of the personal data we hold about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data on grounds relating to your particular situation, including processing for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer (DPO) as described in Section 13. We will respond to all verified requests within fifteen (15) business days, as required by the NPC.

10. Cookies & Tracking Technologies

The 1win ph platform uses cookies and similar tracking technologies to enhance your user experience, analyze platform usage, and support security functions. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the operation of the platform, including session management, authentication, and security. These cannot be disabled.
• Performance & Analytics Cookies: Used to collect anonymized data about how users interact with the platform, helping us identify areas for improvement.
• Functional Cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Marketing Cookies: Used to deliver relevant promotional content based on your interests and activity on the platform. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 1win ph platform. For more information on managing cookies, refer to your browser's help documentation.

11. Protection of Minors

The 1win ph platform is strictly intended for users who are at least 21 years of age, as required by PAGCOR regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and take appropriate action in accordance with our legal obligations.

If you are a parent or guardian and believe that your child has provided personal data to 1win ph, please contact us immediately at the details provided in Section 13 so that we can take prompt corrective action.

"Gambling is addictive. Know when to stop." — PAGCOR

12. Changes to This Privacy Policy

1win ph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered users via email or in-platform notification.

We encourage you to review this Privacy Policy periodically. Your continued use of the 1win ph platform following the posting of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised policy, you must cease using the platform and may request account closure in accordance with our Terms & Conditions.

13. Contact Us & Data Protection Officer

1win ph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact our DPO:

• Data Protection Officer: 1win ph Privacy Team
• Email: [email protected]
• Response Time: We aim to acknowledge all data privacy requests within five (5) business days and resolve them within fifteen (15) business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC can be reached through its official government website and offices in Manila.