pokerwin Privacy Policy

1. Overview & Data Controller

pokerwin is the data controller responsible for the personal information collected through the pokerwin.one platform. As data controller, pokerwin determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with the Data Privacy Act of 2012 and all applicable Philippine regulations.

This Policy applies to all personal data collected through the pokerwin website, mobile platform, customer support channels, and any other service operated by pokerwin. It does not apply to third-party websites or services that may be linked from our platform — those third parties operate under their own privacy policies, and pokerwin is not responsible for their data practices.

If you have any questions about how pokerwin handles your personal data, please refer to Section 13 (Contact & DPO) of this Policy.

2. Personal Data We Collect

pokerwin collects the following categories of personal data from its members and platform users:

2.1 Identity & Contact Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (for age verification — you must be 21 or older);
• Philippine mobile number;
• Email address;
• Residential address (province, city, barangay);
• Government-issued ID number (e.g., Philippine passport, driver's license, SSS/UMID).

2.2 Financial Data

• GCash or PayMaya account number linked to your pokerwin account;
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where applicable;
• Transaction history, including deposits, withdrawals, and wager records;
• Source of funds documentation where required for compliance purposes.

2.3 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Login timestamps and session duration;
• Pages visited, games played, and features used on the pokerwin platform;
• Cookies and similar tracking technologies (see Section 9).

2.4 Communications Data

• Records of live chat conversations with pokerwin support agents;
• Email correspondence with pokerwin;
• Feedback, complaints, and dispute records.

2.5 Responsible Gaming Data

• Deposit limit settings and modification history;
• Self-exclusion requests and status;
• Session time reminder preferences;
• Any responsible gaming assessments or declarations made by the member.

3. How We Collect Your Data

pokerwin collects personal data through the following means:

• Direct collection — Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions;
• Automated collection — Technical data collected automatically when you access the pokerwin platform, including through cookies, log files, and analytics tools;
• Third-party sources — Identity verification data from KYC service providers; fraud detection signals from payment processors; geolocation data from IP intelligence services;
• Regulatory sources — Information received from Philippine government agencies or law enforcement in connection with legal obligations.

4. Purpose of Processing

pokerwin processes your personal data for the following purposes:

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, pokerwin processes your personal data on the following legal bases:

• Contractual necessity — Processing required to perform the contract between you and pokerwin (e.g., account management, payment processing, game delivery);
• Legal obligation — Processing required to comply with Philippine law, including KYC, AML obligations, and PAGCOR regulatory requirements;
• Legitimate interests — Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights;
• Consent — Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time by contacting our support team.

6. Data Sharing & Disclosure

pokerwin does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors — G Cash, PayMaya, BPI, BDO, Metrobank, and InstaPay partners, solely for the purpose of processing your deposits and withdrawals;
• KYC & identity verification providers — Third-party services that assist pokerwin in verifying your identity and age in compliance with Philippine regulations;
• Fraud prevention services — Providers that help pokerwin detect and prevent fraudulent activity, money laundering, and bonus abuse;
• IT infrastructure providers — Cloud hosting and data storage providers that process data on pokerwin's behalf under strict data processing agreements;
• Regulatory authorities — Philippine government agencies, PAGCOR, the Anti-Money Laundering Council (AMLC), and law enforcement bodies where disclosure is required by law or court order;
• Professional advisers — Legal counsel, auditors, and compliance consultants bound by confidentiality obligations.

All third-party service providers engaged by pokerwin are contractually required to process your personal data only for the specified purpose, to maintain appropriate security standards, and to comply with the Data Privacy Act of 2012.

7. Data Retention

pokerwin retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data — Retained for the duration of your membership and for a minimum of five (5) years following account closure, in compliance with AML and PAGCOR record-keeping requirements;
• Financial transaction records — Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine financial regulations;
• Customer support records — Retained for three (3) years from the date of the last interaction;
• Marketing consent records — Retained until you withdraw consent, plus one (1) year for audit purposes;
• Technical and usage data — Retained for up to twelve (12) months, after which it is anonymised or deleted.

When personal data is no longer required, pokerwin will securely delete or anonymise it in accordance with our data disposal procedures.

8. Data Security

pokerwin takes the security of your personal data seriously. We implement a comprehensive set of technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption — All data transmitted between your device and the pokerwin platform is encrypted in transit;
• Encryption at rest — Sensitive personal and financial data stored on pokerwin servers is encrypted at rest;
• Access controls — Access to personal data is restricted to authorised pokerwin personnel on a strict need-to-know basis, with role-based access controls enforced;
• Two-factor authentication (2FA) — Available to all members to add an additional layer of security to their pokerwin accounts;
• Regular security audits — pokerwin conducts periodic security assessments and penetration testing of its platform infrastructure;
• Incident response — In the event of a personal data breach, pokerwin will notify affected members and the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by the Data Privacy Act of 2012.

9. Cookies & Tracking Technologies

pokerwin uses cookies and similar tracking technologies to enhance your experience on the platform, analyse usage patterns, and deliver relevant content. The following types of cookies are used:

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the pokerwin platform. For marketing cookies, you may withdraw consent at any time by contacting our support team.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by pokerwin. To exercise any of these rights, please contact our Data Protection Officer (see Section 13).

pokerwin will respond to all data privacy rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with notice provided to you. If you are not satisfied with pokerwin's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11. Minors & Age Restriction

If you are a parent or guardian and believe that a minor has registered on the pokerwin platform, please contact our support team immediately at [email protected] so that we can take prompt action.

12. Changes to This Privacy Policy

pokerwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, pokerwin will notify registered members via email or an in-platform notification at least seven (7) days before the changes take effect, where practicable.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the pokerwin platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how pokerwin protects your personal data.

13. Contact & Data Protection Officer

pokerwin has appointed a Data Protection Officer (DPO) in compliance with the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us through the following channels:

If you are not satisfied with pokerwin's response to your data privacy concern, you may file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012.