win86 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how win86 ("the Platform," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "the Player," or "the User") who access or use the win86 website and its associated services, including online casino games, sports betting, live dealer games, bingo, fishing games, slot games, account management features, and promotional programs.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission ("NPC"). It should be read together with our Terms and Conditions and our Responsible Gaming Policy.

By registering an account on win86 or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use win86.

2. Data Controller

win86 is the data controller responsible for the personal information collected through the Platform. As data controller, win86 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable Philippine data protection law.

win86 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection legislation. You may contact the DPO at any time using the contact details provided in Section 15 of this Policy.

3. Data We Collect

win86 collects the following categories of personal data:

3.1 Identity Data

Full legal name, date of birth, nationality, government-issued identification number (e.g., Philippine National ID, passport, driver's license, SSS/GSIS number), and a photograph or scan of your identification document where required for KYC verification.

3.2 Contact Data

Email address, mobile phone number, and residential address (including barangay, city/municipality, province, and postal code).

3.3 Account Data

Username, encrypted password, account registration date, account status, and records of any account settings changes you make.

3.4 Financial Data

Payment method details (e.g., GCash mobile number, PayMaya / Maya account reference, bank account name and number for BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, or debit card details), deposit and withdrawal history, and transaction records. win86 does not store full card numbers; payment data is tokenized by our payment processors.

3.5 Gaming Data

Game session history, wager amounts, win/loss records, bonus usage, and responsible gaming tool settings (deposit limits, session reminders, self-exclusion status).

3.6 Technical Data

IP address, device type and model, operating system, browser type and version, screen resolution, time zone, and session duration logs.

3.7 Usage Data

Pages visited on win86, features accessed, links clicked, search queries within the Platform, and interaction patterns with promotional content.

3.8 Communications Data

Records of your communications with win86 support, including live chat transcripts, email correspondence, and any feedback or complaints submitted.

4. How We Collect Data

win86 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access the win86 website, via cookies, web beacons, server logs, and similar tracking technologies.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment confirmation data from payment processors (GCash, PayMaya, banks).
• Publicly available sources: Where permitted by law, win86 may supplement your data with information from publicly available Philippine government databases for identity verification purposes.

5. How We Use Your Data

win86 uses your personal data for the following purposes:

6. Legal Basis for Processing

win86 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you — operating your account, processing transactions, and delivering gaming services.
• Legal obligation: Processing required to comply with Philippine law, including AML obligations under the Anti-Money Laundering Act, age verification requirements, and regulatory reporting to PAGCOR and other authorities.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving our services, where such interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit, informed consent. You may withdraw consent at any time.

7. Data Sharing & Disclosure

win86 does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya / Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services that assist win86 in verifying your identity and age in compliance with Philippine regulations.
• AML and fraud screening providers: Compliance technology partners that help win86 detect and prevent money laundering, fraud, and other illegal activity.
• Game content providers: Licensed third-party game studios whose games are hosted on win86 may receive limited session data necessary to operate their games.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies where disclosure is required by law or court order.
• IT and hosting providers: Cloud infrastructure and cybersecurity service providers who process data on win86's behalf under strict data processing agreements.

All third-party service providers who process personal data on behalf of win86 are bound by contractual data protection obligations consistent with the DPA and this Policy.

8. Cookies & Tracking Technologies

win86 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage patterns, and deliver relevant content. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled. They include session authentication tokens, security cookies, and load-balancing cookies.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations.
• Analytics cookies: Help win86 understand how players use the Platform so we can improve performance and user experience. Data collected is aggregated and anonymized where possible.
• Marketing cookies: Used only with your consent to deliver relevant win86 promotions. You may opt out at any time via your account settings or browser cookie controls.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to use win86.

9. Data Retention

win86 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with Philippine AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Gaming history: Retained for three (3) years from the date of each session, or longer if required for dispute resolution or regulatory purposes.
• Support communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for ongoing dispute resolution.
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent as evidence of compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with win86's data disposal procedures.

10. Data Security

win86 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and win86 servers.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing.
• Multi-factor authentication for administrative access to win86 systems.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

11. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by win86:

To exercise any of these rights, contact win86's Data Protection Officer using the details in Section 15. win86 will respond to your request within fifteen (15) business days. We may need to verify your identity before processing your request.

If you believe win86 has not handled your personal data in accordance with the DPA, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

12. Children's Privacy

win86 is strictly intended for individuals aged 21 years and above. win86 does not knowingly collect personal data from persons under the age of 21. If win86 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all data will be deleted, and any deposits will be returned to the payment source.

If you are a parent or guardian and believe your child has registered on win86, please contact our support team immediately at the details provided in Section 15.

13. Cross-Border Data Transfers

win86 primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure located outside the Philippines — for example, cloud hosting or international KYC providers — win86 ensures that such transfers are made only to countries or organizations that provide an adequate level of data protection, or under contractual safeguards consistent with the DPA and NPC guidelines.

win86 will not transfer your personal data to jurisdictions that do not provide adequate protection without your explicit consent or a lawful basis under the DPA.

14. Changes to This Policy

win86 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page. Where changes are material, win86 will notify registered players via email or an in-platform notification prior to the changes taking effect.

Your continued use of win86 following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the revised Policy, you must cease using win86 and may request account closure by contacting our support team.

15. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by win86, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data rights have been violated. For responsible gaming concerns, please visit our Responsible Gaming page.