1Who We Are and What This Policy Covers
PLWin is an online gaming and sports betting platform operating at plwin.best, designed specifically for players based in the Philippines. When this Privacy Policy refers to "PLWin," "we," "us," or "our," it means the PLWin platform and the team responsible for operating it. When it refers to "you" or "your," it means you as a registered member or visitor to the PLWin website.
This Privacy Policy covers all personal data that PLWin collects, processes, stores, and shares in connection with your use of the PLWin platform — including account registration, gaming activity, financial transactions, customer support interactions, and your use of PLWin's website. It applies whether you access PLWin through a mobile browser, desktop browser, or any other supported interface.
PLWin is committed to handling your personal data responsibly and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. We take data privacy seriously — not just because the law requires it, but because Filipino players deserve to know exactly how their information is being used by the platforms they trust with their money and their personal details.
2Personal Data PLWin Collects
2.1 Data You Provide Directly
When you register and use your PLWin account, you provide us with personal data directly. The categories of data we collect in this way include:
- Identity data: Full legal name, date of birth, gender, nationality, and a copy of your government-issued ID (for KYC verification purposes).
- Contact data: Email address, mobile number, and residential address.
- Account credentials: Your chosen username and encrypted password. PLWin does not store your password in plain text.
- Financial data: GCash number, Maya account details, bank account numbers, or other payment method details used for deposits and withdrawals. PLWin does not store full card numbers — card payments are tokenised through our payment processor.
- Verification documents: Copies of government-issued IDs, selfies submitted for identity matching, and proof of payment method documents submitted during the KYC process.
- Support communications: The content of any messages, emails, or chat transcripts you send to PLWin's support team.
2.2 Data Collected Automatically
When you access and use PLWin, certain data is automatically recorded by our systems:
- Technical data: IP address, device type and model, browser type and version, operating system, and screen resolution.
- Usage data: Pages visited on PLWin, time spent on each page, navigation paths, features used, and referring URLs.
- Gaming activity data: Bets placed, games played, session durations, wager amounts, game outcomes, and bonus activity.
- Transaction logs: Timestamped records of every deposit, withdrawal, and balance adjustment on your PLWin account.
- Location data: General location data derived from your IP address for fraud prevention and regulatory compliance purposes. PLWin does not access your device's GPS location.
3How PLWin Uses Your Personal Data
PLWin uses the personal data we collect for the following specific purposes. We do not use your data for any purpose beyond those listed here without obtaining your additional consent first.
| Purpose | Data Used |
|---|---|
| Account registration and management — Creating and maintaining your PLWin account, verifying your identity, and managing account settings. | Identity data, contact data, account credentials |
| Payment processing — Processing deposits to your PLWin wallet and withdrawals to your GCash, Maya, or bank account. | Financial data, identity data, transaction logs |
| KYC and regulatory compliance — Verifying player identity to meet Philippine gaming regulatory requirements and anti-money laundering obligations. | Verification documents, identity data, financial data |
| Providing gaming services — Delivering the games, bets, and features that make up the PLWin platform experience. | Gaming activity data, usage data, technical data |
| Fraud prevention and security — Detecting, investigating, and preventing fraudulent activity, money laundering, and security breaches. | Technical data, location data, transaction logs, gaming activity data |
| Customer support — Responding to your queries, complaints, and account issues. | Contact data, account data, support communications |
| Responsible gaming monitoring — Identifying patterns that may indicate problematic gambling behaviour and reaching out proactively where appropriate. | Gaming activity data, transaction logs, session data |
| Platform improvement — Analysing usage patterns to improve PLWin's games, features, and user experience. | Usage data, technical data (anonymised/aggregated) |
| Marketing communications — Sending promotional offers and PLWin updates to members who have opted in to receive them. | Contact data, gaming activity data (for relevant offers) |
4Legal Basis for Processing Your Data
Under the Philippine Data Privacy Act and applicable data protection principles, PLWin must have a valid legal basis for processing personal data. PLWin relies on the following legal bases for the data processing activities described in Section 3:
- Contractual necessity: Processing required to perform our contract with you — operating your PLWin account, processing payments, and delivering gaming services. Without this processing, PLWin cannot provide its services to you.
- Legal obligation: Processing required to comply with Philippine law, including Know Your Customer (KYC) requirements, anti-money laundering regulations, and gaming regulatory obligations. PLWin is required by law to collect and retain certain data and cannot waive these obligations.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement. PLWin has a genuine legitimate interest in protecting the platform and its players from fraud and harm, and in improving the service it provides.
- Consent: Processing for marketing communications and non-essential cookies. Where PLWin relies on your consent, you have the right to withdraw that consent at any time by updating your preferences in your PLWin account settings or by contacting our support team.
5Who PLWin Shares Your Data With
PLWin does not sell your personal data to any third party under any circumstances. We share your data only in the specific, limited circumstances described below, and only to the extent necessary for the stated purpose.
5.1 Payment Service Providers
To process your deposits and withdrawals, PLWin shares relevant financial data with the payment service providers you choose — including GCash, Maya, GrabPay, Coins.ph, InstaPay, PESONet, BDO, BPI, UnionBank, and card processing networks. These providers act as data processors under PLWin's instruction and are bound by their own security and privacy obligations.
5.2 Identity Verification Services
For KYC purposes, PLWin uses third-party identity verification service providers to assist with document verification and identity matching. These providers receive only the data necessary to perform verification and are contractually prohibited from using it for any other purpose.
5.3 Regulatory Authorities
PLWin may be required by law to disclose player information to Philippine regulatory authorities, law enforcement agencies, or courts when compelled to do so by a valid legal obligation, court order, or government directive. In such cases, PLWin will disclose only the data specifically required and will notify the affected player where legally permitted to do so.
5.4 Technology and Infrastructure Partners
PLWin uses third-party technology providers for hosting infrastructure, platform analytics, and customer support tools. These providers access data only to the extent required to deliver their services to PLWin and operate under data processing agreements that require them to maintain appropriate security standards and restrict the use of data to agreed purposes only.
5.5 Game Content Providers
Where PLWin offers third-party games (such as live dealer tables or third-party slot titles), the game content provider may receive limited technical data — such as a session token and bet amount — necessary to facilitate your gameplay. PLWin game content providers do not receive your full personal profile or payment details.
6How Long PLWin Keeps Your Data
PLWin retains personal data only for as long as necessary for the purposes for which it was collected, and in accordance with our legal retention obligations under Philippine law.
- Account data and KYC records: Retained for a minimum of 5 years after account closure, as required by Philippine anti-money laundering regulations. After this period, data is securely deleted or anonymised.
- Transaction records: Financial transaction records are retained for 5 years after the date of the transaction for regulatory compliance purposes.
- Gaming activity logs: Retained for 2 years from the date of the activity, or longer if required for the resolution of an outstanding dispute or regulatory inquiry.
- Customer support communications: Retained for 2 years from the date of the last communication, or until any related issue is fully resolved.
- Marketing preferences and consent records: Retained while your PLWin account is active and for a reasonable period after account closure to demonstrate compliance with consent requirements.
When data reaches the end of its retention period and no other retention obligation applies, PLWin will securely delete, destroy, or anonymise it so that it can no longer be associated with you as an individual.
7How PLWin Keeps Your Data Secure
Data security is taken seriously at PLWin. We implement a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure.
Technical Security Measures
- 256-bit SSL/TLS encryption on all data transmitted between your device and PLWin's servers.
- Encrypted storage of sensitive data fields including passwords (hashed and salted), financial data, and identity documents.
- Firewalls and intrusion detection systems monitoring PLWin's infrastructure continuously for suspicious activity.
- Two-factor authentication (2FA) available for all player accounts and required for administrative access to PLWin's backend systems.
- Regular security audits and penetration testing conducted by independent third-party security specialists.
- Access controls ensuring that PLWin staff can only access player data to the extent required for their specific role.
Organisational Security Measures
- PLWin staff who handle player data receive regular data privacy and security training.
- Data access is granted on a need-to-know basis and is logged for audit purposes.
- PLWin maintains an incident response plan to address data breaches promptly and notify affected players and regulators as required by law.
8Cookies and Tracking Technologies
PLWin uses cookies and similar tracking technologies on the plwin.best website. Cookies are small data files placed on your device by websites you visit. They serve several functions that are important to how PLWin works and how we improve it over time.
Types of Cookies PLWin Uses
- Strictly necessary cookies: Required for the core operation of the PLWin website — keeping you logged in, maintaining your session, and enabling basic security features. These cannot be disabled without preventing PLWin from functioning.
- Functional cookies: Remember your preferences such as language settings, preferred game categories, and display options to personalise your PLWin experience.
- Analytics cookies: Collect anonymised data about how visitors use PLWin — which pages are visited most, where users navigate from, and which features are used — to help us improve the platform. This data does not identify you personally.
- Security cookies: Used to detect fraudulent activity, unusual login patterns, and bot traffic to protect PLWin accounts and platform integrity.
You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect the functionality of PLWin. Strictly necessary cookies cannot be disabled as they are essential for the platform to operate. PLWin does not use cookies to serve third-party advertising.
9Your Data Privacy Rights as a PLWin Player
Under the Philippine Data Privacy Act of 2012, you have a set of rights with respect to your personal data held by PLWin. PLWin respects these rights and provides straightforward ways to exercise them.
Right to Access
Request a copy of the personal data PLWin holds about you at any time. We will provide this within 30 days of a verified request.
Right to Correction
Request correction of any inaccurate or outdated personal data in your PLWin account. Most data can be updated directly in your account settings.
Right to Erasure
Request deletion of personal data that PLWin no longer has a legal basis to hold. Subject to retention obligations under Philippine law.
Right to Object
Object to PLWin processing your data for direct marketing at any time. We will stop immediately upon receipt of a verified objection.
Right to Data Portability
Request your PLWin data in a structured, machine-readable format so you can transfer it to another service provider if you choose.
Right to Withdraw Consent
Withdraw consent for any processing activity PLWin performs on the basis of consent — such as marketing emails — at any time without penalty.
To exercise any of these rights, contact PLWin's support team at support@plwin.best or through the in-platform support chat. PLWin will verify your identity before processing any data rights request. We aim to respond to all verified data rights requests within 30 days. Complex requests may take longer, in which case we will notify you of the expected timeline.
If you are not satisfied with PLWin's response to a data rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.
10Children's Privacy
PLWin's services are strictly for adults. Under PLWin's Terms and Conditions, you must be at least 21 years of age to register and play. PLWin does not knowingly collect personal data from individuals under 21 years of age.
If PLWin becomes aware that a player account has been registered by someone under the minimum age, that account will be immediately suspended, any funds on the account will be returned to the source payment method, and all associated data will be deleted in accordance with our obligations under the Data Privacy Act.
If you are a parent or guardian and believe that your child has registered a PLWin account, please contact us immediately at support@plwin.best so we can take prompt action.
11Updates to This Privacy Policy
PLWin may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to our platform. When material changes are made, PLWin will notify you by one or more of the following methods: in-platform notification displayed at login, email to your registered email address, or a prominent notice on the plwin.best website.
The effective date of the current version of this Privacy Policy is always displayed at the top of this page. We encourage you to review this page periodically so you stay informed about how PLWin protects your data. Continued use of PLWin after a policy update constitutes acceptance of the updated policy.
If you have concerns about a policy update, contact PLWin support before the effective date of the change. If you do not agree with an update, you may close your PLWin account at any time. Data retained after account closure is subject to the retention periods described in Section 6.
12How to Contact PLWin About Your Privacy
PLWin takes privacy questions seriously and has designated a point of contact for all data privacy matters. If you have questions about this Privacy Policy, want to exercise your data rights, or have a concern about how PLWin is handling your personal information, please get in touch through any of the following channels:
- Email: support@plwin.best — for formal data privacy requests, mark your subject line "Data Privacy Request."
- In-platform support chat: Available 24/7 for general privacy questions and to initiate a formal data rights request.
PLWin's support team includes Filipino staff who are trained in data privacy matters and can assist you in English or Filipino. We aim to acknowledge all privacy-related inquiries within 48 hours and to resolve them within the timeframes required by Philippine law.
If you feel that PLWin has not adequately addressed your privacy concern, you have the right to submit a complaint to the National Privacy Commission of the Philippines, which is the regulatory authority responsible for enforcing the Data Privacy Act of 2012.