1. Introduction
PinasWin operates the online gaming platform accessible at pinaswin.best. As the personal information controller under the Philippine Data Privacy Act of 2012 (RA 10173), PinasWin is responsible for how your personal data is collected, processed, stored, and protected.
This Privacy Policy applies to all players, visitors, and users of the PinasWin platform — whether you're browsing as a guest, registered as a member, or interacting with PinasWin through any digital channel. By using PinasWin, you acknowledge that you have read and understood this policy.
We wrote this policy to be readable — not to overwhelm you with legal language. If something is unclear, please contact our Data Protection Officer (DPO) directly. Contact details are in Section 12.
PinasWin is your data controller. This means we determine the purpose and means of processing your personal data. We take that responsibility seriously and are accountable for how your information is handled at every stage.
2. Personal Data We Collect
PinasWin collects personal data through several channels: directly when you register or interact with the platform, automatically through your use of our services, and occasionally from third-party sources as part of compliance checks.
2.1 Information You Provide Directly
- Registration data: Full legal name, date of birth, email address, mobile number, and home address.
- Identity verification (KYC): Government-issued ID (passport, driver's license, UMID, SSS/GSIS card), selfie or facial image, and proof of address.
- Payment information: GCash number, Maya account, bank account details (BDO, BPI, UnionBank), or card details (Visa/Mastercard). Note: PinasWin does not store full card numbers — these are handled by PCI-DSS compliant processors.
- Communications: Messages you send to PinasWin support, feedback submitted through surveys, and any correspondence related to disputes or complaints.
2.2 Data Collected Automatically
- Technical data: IP address, browser type and version, operating system, device type, screen resolution, and language settings.
- Usage data: Pages visited, games played, bets placed, session duration, login timestamps, and navigation patterns within the platform.
- Transaction data: Deposit history, withdrawal history, bet history, bonus activity, and account balance movements.
- Cookies and similar technologies: Session cookies, preference cookies, analytics identifiers, and fraud-detection tokens. See Section 6 for full cookie details.
2.3 Data from Third Parties
In limited circumstances, PinasWin may receive data about you from third parties, including:
- Identity verification agencies for KYC compliance checks.
- Payment processors to confirm transaction status.
- Fraud prevention services to flag unusual account activity.
- Regulatory authorities where required by Philippine law.
3. How PinasWin Uses Your Data
The personal data PinasWin collects is used for the following specific purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, contact details |
| Identity and age verification (KYC) | Government ID, facial image, address proof |
| Processing deposits and withdrawals | Payment details, transaction history |
| Providing gaming and betting services | Account data, usage data, game history |
| Fraud detection and prevention | IP address, device data, transaction patterns |
| Anti-money laundering (AML) compliance | Transaction history, identity data |
| Customer support and dispute resolution | Account data, communication records |
| Responsible gaming tools | Usage data, transaction history, self-exclusion records |
| Platform improvement and analytics | Anonymized usage data, technical data |
| Promotional communications (with consent) | Email address, mobile number, preference data |
PinasWin does not use your personal data for automated decision-making that produces significant legal effects on you, except where required for fraud prevention and AML compliance — and even then, a human review is always available.
4. Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, PinasWin processes your personal data on the following legal grounds:
- Contractual necessity: Processing required to deliver the services you signed up for — account management, payments, game access.
- Legal obligation: Processing required to comply with Philippine laws, including AML regulations, KYC requirements, and gaming license conditions.
- Legitimate interest: Fraud prevention, platform security, and service improvement — where our interests don't override your rights.
- Your consent: For optional communications such as promotional emails and SMS. You can withdraw consent at any time through your account settings.
5. Data Sharing and Disclosure
PinasWin will never sell your personal data. We do share data with trusted third parties, but only to the extent necessary and always under strict confidentiality and data protection agreements.
5.1 Service Providers
PinasWin works with the following categories of processors who handle data on our behalf:
- Payment processors (GCash, Maya, InstaPay partners, card processors) — to handle financial transactions.
- Identity verification providers — to conduct KYC and age checks.
- Cloud infrastructure providers — to host the platform and its data.
- Customer support software providers — to manage player communications.
- Analytics providers — to help us understand how the platform is being used (using anonymized or pseudonymized data wherever possible).
5.2 Regulatory and Legal Disclosure
PinasWin may disclose your personal data to regulatory bodies, law enforcement, and government agencies when required to do so by:
- Philippine gaming regulations and our operating license conditions.
- Court orders, subpoenas, or other valid legal processes.
- Anti-money laundering reporting obligations under AMLC guidelines.
- The National Privacy Commission in connection with a data breach or complaint investigation.
Important: PinasWin is legally required to report certain transactions and player information to Philippine authorities. This is not optional. If you're using PinasWin legitimately, these obligations won't affect your experience in any meaningful way.
6. Cookies and Tracking Technologies
PinasWin uses cookies and similar tracking technologies to make the platform work properly, improve your experience, and keep your account secure. Here's what we use and why:
| Cookie Type | Purpose | Required? |
|---|---|---|
| Session cookies | Maintain your login session while you're using the platform | Yes |
| Security cookies | Detect and prevent fraudulent activity and unauthorized access | Yes |
| Preference cookies | Remember your language, display settings, and game preferences | No |
| Analytics cookies | Understand how players navigate the platform (anonymized data) | No |
| Performance cookies | Monitor platform speed and identify technical issues | No |
You can manage non-essential cookies through your browser settings or through PinasWin's cookie preference center. Disabling essential cookies may affect the functionality of the platform.
7. Data Retention
PinasWin retains personal data only for as long as necessary to fulfill the purpose for which it was collected, and to comply with legal obligations. Here are our general retention periods:
- Account data: Retained for the duration of your account and for five (5) years after account closure, in line with AML and gaming license requirements.
- KYC documents: Retained for five (5) years from the date of submission or from the date of the last transaction, whichever is later.
- Transaction records: Retained for ten (10) years as required by Philippine financial regulations.
- Support communications: Retained for three (3) years after the issue is resolved.
- Marketing preferences: Retained until you withdraw consent or close your account.
- Analytics data: Anonymized after 24 months; raw data deleted after 36 months.
When retention periods expire, data is securely deleted or anonymized in line with NPC guidelines.
8. Data Security
PinasWin takes the security of your personal data seriously. The technical and organizational measures we have in place include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and PinasWin's servers.
- AES-256 encryption at rest for all stored personal data and financial records.
- Multi-factor authentication (MFA) available for player accounts and required for administrative access.
- Role-based access controls: PinasWin staff only access player data when necessary for their job function.
- Regular security audits and penetration testing by independent security professionals.
- Secure data centers with physical access controls, redundant backups, and 24/7 monitoring.
- Staff training on data privacy obligations and secure data handling procedures.
While no system is completely immune to security incidents, PinasWin takes every reasonable step to protect your information. In the event of a breach affecting your personal data, we will notify you and the NPC as required by law.
9. Your Data Privacy Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by PinasWin:
Right to Access
Request a copy of all personal data PinasWin holds about you. We'll respond within 15 business days.
Right to Correction
Request that inaccurate or incomplete personal data be corrected. You can update basic details directly in your account settings.
Right to Erasure
Request deletion of your personal data where it's no longer needed. Note: legal retention obligations may prevent full erasure in some cases.
Right to Object
Object to the processing of your data for direct marketing purposes. Opt out at any time through your account settings or by emailing our DPO.
Right to Data Portability
Request your personal data in a structured, machine-readable format so you can transfer it to another service provider.
Right to Complain
Lodge a complaint with PinasWin's DPO or escalate directly to the National Privacy Commission if you believe your rights have been violated.
To exercise any of these rights, email PinasWin's Data Protection Officer at privacy@pinaswin.best with the subject line "Data Rights Request." Include your registered email address and a brief description of your request. We will acknowledge your request within 3 business days and provide a full response within 15 business days.
10. Children's Privacy
PinasWin's services are strictly intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a minor has created an account or submitted personal data without parental consent, we will immediately close the account and delete the associated data.
If you believe a minor has accessed PinasWin using your account or device, contact our support team immediately at support@pinaswin.best so we can assist you.
11. Changes to This Privacy Policy
PinasWin may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will:
- Update the "Last updated" date at the top of this page.
- Send a notification to your registered email address if the changes significantly affect your rights.
- Display a banner on the platform for a reasonable period after the update.
We encourage you to review this policy periodically. Your continued use of PinasWin after changes take effect constitutes your acceptance of the revised policy.
12. Contact Our Data Protection Officer
PinasWin has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any concerns, questions, or requests related to your personal data, please contact:
- Data Protection Officer — PinasWin
- Email: privacy@pinaswin.best
- General Support: support@pinaswin.best
- Response Time: DPO inquiries are acknowledged within 3 business days and resolved within 15 business days.
If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at www.privacy.gov.ph.