pesowin Privacy Policy

pesowin ("we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the pesowin platform at pesowin.xyz. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you access or use our website, games, and related services.

This policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). It also reflects our obligations under PAGCOR's data governance requirements for licensed online gaming operators.

By registering a pesowin account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the platform and contact support to close your account.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, pesowin acts as the Personal Information Controller (PIC) in respect of the personal data it collects from players and site visitors.

As the Personal Information Controller, pesowin determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with RA 10173.

pesowin has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data privacy laws. You may contact the DPO through the contact details provided in Section 15 of this policy.

pesowin collects the following categories of personal data from players and site visitors. We only collect data that is necessary, adequate, and not excessive in relation to the purposes for which it is processed.

pesowin collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the pesowin platform, including through cookies, web beacons, log files, and similar tracking technologies (see Section 8).
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment transaction data from GCash, PayMaya, BPI, BDO, and Metrobank.
• Publicly available sources: In limited circumstances, pesowin may verify information against publicly available records for fraud prevention or regulatory compliance purposes.

pesowin does not collect personal data from individuals who have not registered an account, except for technical data collected automatically from all site visitors for security and analytics purposes.

pesowin uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your pesowin account, including password resets and two-factor authentication.
• Identity and age verification: Confirming that you meet the 21+ age requirement and verifying your identity in compliance with PAGCOR and AML regulations.
• Transaction processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, and maintaining accurate financial records.
• Regulatory compliance: Meeting our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and RA 10173.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, and other security threats.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behavior and applying responsible gaming tools where appropriate.
• Customer support: Responding to your inquiries, resolving disputes, and improving our support services.
• Platform improvement: Analyzing usage data to improve game performance, user experience, and platform features.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates – only where you have provided consent or where permitted by law.

Under the Data Privacy Act of 2012, pesowin processes your personal data on the following legal bases:

• Consent: Where you have given clear, informed consent to the processing of your personal data for a specific purpose, such as receiving marketing communications.
• Contractual necessity: Where processing is necessary to perform our contract with you – i.e., to provide the pesowin gaming services you have registered for.
• Legal obligation: Where processing is required to comply with a legal obligation, including PAGCOR licensing requirements, AMLA obligations, and NPC directives.
• Legitimate interests: Where processing is necessary for pesowin's legitimate interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, contact pesowin support or update your account preferences.

pesowin does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and under appropriate safeguards:

• KYC and identity verification providers: Third-party services that assist in verifying your identity and age in compliance with PAGCOR and AML requirements.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers involved in processing your deposits and withdrawals.
• Fraud prevention and AML partners: Compliance screening services used to detect and prevent money laundering, fraud, and other financial crimes.
• Game providers: Third-party game developers and providers whose games are available on the pesowin platform, to the extent necessary for game operation and fairness auditing.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other government bodies where disclosure is required by law or court order.

pesowin uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather analytics data. The following types of cookies are used:

• Essential cookies: Required for the platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the pesowin platform, helping us identify areas for improvement. No personally identifiable information is included in analytics reports.
• Preference cookies: Store your platform preferences, such as language settings and display options, to provide a more personalized experience.
• Marketing cookies: Used to deliver relevant promotional content within the pesowin platform. These are only activated where you have provided consent.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the pesowin platform. For detailed information on the specific cookies used, please refer to our Cookie Notice available in your account settings.

pesowin retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC guidelines. Where data is anonymized, it may be retained indefinitely for statistical and analytical purposes.

pesowin implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the pesowin platform
• AES-256 encryption for sensitive data stored in our databases, including financial information and government ID data
• Two-factor authentication (2FA) available for all player accounts to prevent unauthorized access
• Role-based access controls ensuring that pesowin staff can only access personal data necessary for their specific job functions
• Regular security audits and penetration testing conducted by independent cybersecurity professionals
• Intrusion detection systems and 24/7 security monitoring to identify and respond to threats in real time
• Secure data centers with physical access controls, redundant power systems, and environmental protections

While pesowin takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the security of your account credentials and should notify pesowin immediately if you suspect unauthorized access to your account.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by pesowin:

• Right to be informed: The right to be notified of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data pesowin holds about you, along with information about how it is being used.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held by pesowin.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pesowin's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact pesowin's Data Protection Officer using the contact details in Section 15. pesowin will respond to all data subject requests within 15 business days of receipt, in accordance with NPC guidelines. We may request proof of identity before processing your request.

The pesowin platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing online casino gaming in the Philippines. pesowin does not knowingly collect personal data from individuals under the age of 21.

If pesowin becomes aware that personal data has been collected from an individual under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and return any deposited funds subject to identity verification. Age verification is conducted as part of the KYC process for all new accounts.

In certain circumstances, pesowin may transfer your personal data to recipients located outside the Philippines – for example, to international game providers, cloud infrastructure providers, or fraud prevention services. Any such cross-border transfer of personal data is conducted in compliance with Section 21 of RA 10173 and the NPC's rules on cross-border data flows.

Before transferring personal data outside the Philippines, pesowin ensures that:

• The recipient country provides an adequate level of data protection, as determined by the NPC; or
• Appropriate safeguards are in place, such as contractual clauses approved by the NPC or binding corporate rules; or
• The transfer is necessary for the performance of a contract with you, such as processing a payment through an international payment network.

You may request information about the specific safeguards applied to any cross-border transfer of your personal data by contacting pesowin's Data Protection Officer.

pesowin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The most current version of this Privacy Policy will always be available on this page, with the effective date displayed at the top.

When material changes are made to this Privacy Policy, pesowin will notify registered players by email or through an in-platform notification at least 7 days before the changes take effect, where practicable. Your continued use of the pesowin platform after the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how pesowin is protecting your personal data. If you have any concerns about changes to this policy, please contact our Data Protection Officer before the effective date of the amendment.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by pesowin, please contact our Data Protection Officer through the following channels:

• Email: [email protected]
• Subject line: Data Privacy Request – [Your Full Name]
• Response time: Within 15 business days of receipt

For general account support, game inquiries, or technical issues, please use the standard support contact available in your pesowin account dashboard.