pesowin Privacy Policy

1. Who We Are

pesowin ("pesowin," "we," "us," or "our") operates the online gaming platform accessible at pesowin.one (the "Platform"), offering casino games, slots, bingo, live dealer tables, and original titles including Bird Catcher and Monster Mine to players in the Republic of the Philippines.

pesowin is the data controller responsible for the personal data of registered players and visitors to the Platform. We are committed to processing personal data lawfully, fairly, and transparently in accordance with Republic Act No. 10173 (Data Privacy Act of 2012, "DPA") and its Implementing Rules and Regulations.

Our designated Data Protection Officer (DPO) can be contacted at the details provided in Section 13 of this Policy.

2. Personal Data We Collect

pesowin collects the following categories of personal data from players and Platform visitors:

pesowin does not collect sensitive personal information (as defined under Section 3(l) of the DPA) unless strictly required for regulatory compliance, in which case explicit consent will be obtained.

3. How We Collect Your Data

pesowin collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions;
• Automated technologies: Technical data collected automatically when you access the Platform, including via cookies, web beacons, and server logs (see Section 7);
• Third-party sources: Identity and fraud-check data from KYC verification providers; transaction confirmation data from payment processors (GCash, PayMaya, banks); and publicly available information used for AML screening.

4. Legal Basis for Processing

pesowin processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfil our obligations under the pesowin Terms & Conditions, including account management, game provision, and payment processing;
• Legal obligation: Processing required to comply with Philippine law, including PAGCOR regulatory requirements, the Anti-Money Laundering Act (RA 9160 as amended), and NPC directives;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. How We Use Your Personal Data

pesowin uses the personal data we collect for the following purposes:

• To create, verify, and manage your pesowin account;
• To process deposits and withdrawals in Philippine Peso via your chosen payment method;
• To verify your identity and age (21+) in compliance with PAGCOR and AML requirements;
• To provide, maintain, and improve the Platform, including all games and features;
• To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited conduct;
• To monitor gameplay patterns for responsible gaming purposes and to apply player protection tools where appropriate;
• To communicate with you regarding your account, transactions, promotions, and important policy updates;
• To respond to your customer support enquiries and resolve disputes;
• To send you marketing communications about pesowin promotions and new games, where you have opted in to receive such communications;
• To comply with our legal and regulatory obligations under Philippine law;
• To enforce our Terms & Conditions and protect the rights, property, and safety of pesowin, our players, and the public.

6. Data Sharing & Disclosure

pesowin does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya / Maya, BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, and debit card processors — solely to facilitate your deposits and withdrawals;
• KYC and identity verification providers: Third-party services that assist pesowin in verifying player identity and age in compliance with PAGCOR and AML requirements;
• Game content providers: Licensed game studios whose titles are hosted on the pesowin Platform, who may receive anonymised gameplay data for technical and licensing purposes;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or regulatory directive;
• Law enforcement: Philippine law enforcement agencies, where disclosure is required by a valid court order, subpoena, or applicable law;
• Professional advisers: Lawyers, auditors, and insurers who are bound by confidentiality obligations and process data only as necessary to provide their services to pesowin.

All third-party recipients are required to handle your personal data in accordance with the Data Privacy Act of 2012 and are bound by appropriate data processing agreements or confidentiality undertakings.

pesowin does not transfer personal data outside the Philippines unless adequate safeguards are in place as required by the NPC, and only where strictly necessary for the provision of services.

7. Cookies & Tracking Technologies

pesowin uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your pesowin account. These cannot be disabled without breaking core Platform functionality;
• Performance cookies: Collect anonymised data about how players use the Platform (e.g., pages visited, time on site) to help us improve user experience. No personally identifiable information is collected by these cookies;
• Functional cookies: Remember your preferences such as language settings and game display options to personalise your pesowin experience;
• Analytics cookies: Used to understand aggregate player behaviour and Platform performance. Data collected is anonymised and used for internal reporting only.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the pesowin Platform. For strictly necessary cookies, no consent is required as they are essential to the service you have requested.

8. Data Retention

pesowin retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Account and identity data: For the duration of your active pesowin account, plus five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act;
• Financial transaction records: Five (5) years from the date of each transaction, as required by the AMLC and Bureau of Internal Revenue regulations;
• Gaming history: Three (3) years from the date of each gaming session, for dispute resolution and responsible gaming monitoring purposes;
• Customer support communications: Two (2) years from the date of the last interaction, for quality assurance and dispute resolution;
• Marketing consent records: Until you withdraw consent, plus one (1) year thereafter as evidence of the consent obtained.

Where retention beyond these periods is required by a specific legal obligation or ongoing legal proceedings, pesowin will retain the relevant data until that obligation or proceeding is resolved.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012, Filipino players have the following rights with respect to their personal data held by pesowin:

• Right to be informed: The right to know that your personal data is being collected and processed, and the purposes for which it is used — as set out in this Privacy Policy;
• Right of access: The right to request a copy of the personal data pesowin holds about you, along with information about how it is processed;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account details directly through your pesowin account settings;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to pesowin's legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe pesowin has violated your data privacy rights.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13. pesowin will respond to all valid data subject requests within fifteen (15) business days of receipt, as required by NPC guidelines. We may need to verify your identity before processing your request.

10. Data Security

pesowin implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and pesowin's servers;
• Encryption of sensitive data at rest, including financial information and government ID details;
• Role-based access controls ensuring that pesowin staff can only access personal data necessary for their specific job function;
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified third-party security professionals;
• Multi-factor authentication requirements for all pesowin administrative systems;
• Staff training on data privacy obligations and secure data handling practices.

While pesowin takes all reasonable steps to protect your data, no internet transmission or electronic storage system is 100% secure. You are responsible for maintaining the confidentiality of your pesowin login credentials. If you suspect unauthorised access to your account, please contact our support team immediately.

11. Children's Privacy

The pesowin Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. pesowin does not knowingly collect personal data from individuals under the age of 21.

If pesowin becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data, and report the matter to the appropriate regulatory authority where required.

If you are a parent or guardian and believe your child has registered on the pesowin Platform, please contact our Data Protection Officer immediately using the details in Section 13.

12. Changes to This Privacy Policy

pesowin reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, we will notify registered players via the email address associated with their account and display a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically to stay informed about how pesowin protects your personal data. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

13. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or pesowin's data processing practices, please contact our Data Protection Officer:

Data Protection Officer, pesowin

Email: privacy@pesowin.one

General Support: support@pesowin.one

Our DPO is available Monday to Friday, 9:00 AM to 6:00 PM Philippine Standard Time (PST). We aim to acknowledge all privacy-related enquiries within two (2) business days and to resolve them within fifteen (15) business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at complaints@privacy.gov.ph or by visiting the NPC's official offices.

This Privacy Policy was last reviewed and updated in May 2026. Previous versions are available upon written request to our DPO.