This Privacy Policy explains how win69 collects, uses, stores, shares, and protects personal data belonging to registered players and visitors to the win69 platform. It is issued in compliance with Republic Act No. 10173 — the Philippine Data Privacy Act of 2012 — and the rules and regulations of the National Privacy Commission.
Registration data (name, mobile number, date of birth), transaction records, device identifiers, IP addresses, and in-session gameplay logs collected during normal platform use.
Account management, payment processing, fraud prevention, AML compliance, responsible gaming monitoring, and improving platform performance for Filipino players.
TLS 1.3 encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits protect all personal data held by win69.
Personal data is shared only with payment processors, game providers, PAGCOR, AMLC, and NPC when legally required. win69 does not sell personal data to third parties.
Under RA 10173 you have the right to access, correct, erase, object to processing, and port your personal data. Submit requests to win69 support via live chat.
win69 uses session and analytics cookies to maintain login state and improve platform performance. No third-party advertising cookies are deployed on the platform.
This Privacy Policy ("Policy") is issued by win69 in respect of the online gaming platform operated at win69.biz, including all associated services, features, and communications channels (collectively, the "Platform"). It sets out the principles and practices governing the collection, processing, storage, and disclosure of personal data relating to registered players, prospective registrants, and visitors to the Platform.
win69 is committed to protecting the personal data of its users in accordance with Republic Act No. 10173 — the Data Privacy Act of 2012 — its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines (NPC). Where applicable, win69 also complies with personal data protection requirements imposed by the Philippine Amusement and Gaming Corporation (PAGCOR) as conditions of its gaming licence.
This Policy applies to all personal data processed by win69 in connection with the Platform, regardless of the device, channel, or location from which a user accesses the Platform. It does not apply to third-party websites, payment processors, or other external services that may be linked to or integrated with the Platform, each of which operates under its own privacy policy.
For the purposes of the Data Privacy Act of 2012, win69 acts as the Personal Information Controller (PIC) in respect of all personal data collected from players and visitors through the Platform. As PIC, win69 determines the purposes and means of processing personal data and bears primary responsibility for ensuring that processing is conducted lawfully, fairly, and transparently.
win69 has designated a Data Protection Officer (DPO) who is responsible for overseeing the Platform's data privacy compliance program. Players may direct data privacy inquiries, complaints, and data subject rights requests to the DPO via the contact channels specified in Section 15 of this Policy.
win69 collects personal data through various points of interaction with the Platform. The categories of data collected, and the primary source of each, are summarised below.
Where required for identity verification, withdrawal processing, or AML compliance, win69 may request and retain:
| Data Category | Collected At | Retention Period |
|---|---|---|
| Registration Data | Account creation | Duration of account + 5 years post-closure |
| KYC / Identity Documents | Verification request | 5 years from verification date (AML requirement) |
| Financial Transaction Data | Each transaction | 10 years (RA 9160 AML requirement) |
| Gameplay / Betting Records | Each game round / bet | 5 years from date of transaction |
| Technical / Device Data | Each session | 12 months rolling |
| Support / Chat Transcripts | Each support interaction | 3 years from interaction date |
win69 processes personal data on the following legal bases as recognised under the Data Privacy Act of 2012:
win69 processes your personal data for the following specific purposes:
win69 may disclose personal data to the following categories of third parties, strictly on a need-to-know basis and under confidentiality obligations:
| Recipient Category | Purpose of Disclosure | Basis |
|---|---|---|
| Payment Processors (GCash, Maya, banks) | Processing deposits and withdrawals | Contractual necessity |
| Game Providers (JILI, Pragmatic Play, etc.) | Session authentication and RNG certification | Legitimate interests |
| PAGCOR | Licence compliance and reporting | Legal obligation |
| AMLC (Anti-Money Laundering Council) | Suspicious transaction reporting | Legal obligation (RA 9160) |
| National Privacy Commission (NPC) | Data breach notification, regulatory inquiry | Legal obligation (RA 10173) |
| KYC / Identity Verification Providers | Identity document validation and liveness checks | Consent / contractual necessity |
| Law Enforcement Authorities | Response to lawful court orders or warrants | Legal obligation |
| Cloud Infrastructure Providers | Platform hosting, data storage, disaster recovery | Legitimate interests (under data processing agreements) |
All third-party processors engaged by win69 are required to process personal data only as instructed by win69, to maintain appropriate security measures, and to comply with the Data Privacy Act of 2012.
Some of win69's third-party service providers — including cloud infrastructure providers and game developers — may process or store personal data on servers located outside the Philippines. When such transfers occur, win69 ensures that:
Players may request information about the specific international transfer mechanisms applicable to their data by contacting the win69 DPO at the address specified in Section 15.
win69 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to minimum retention periods required by Philippine law. The retention schedule applicable to each data category is summarised in the table in Section 3.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard methods. Anonymised or aggregated data, from which individual players cannot be identified, may be retained indefinitely for platform analytics and improvement purposes.
Where a player requests account closure, win69 will cease active use of the player's personal data for marketing and platform personalisation purposes immediately. However, retention obligations imposed by PAGCOR, AMLC, and the Data Privacy Act mean that core account, transaction, and KYC data will be retained for the minimum statutory periods even after account closure.
win69 implements the following organisational and technical security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:
win69 uses the following categories of cookies and similar technologies on the Platform:
win69 does not deploy third-party advertising or retargeting cookies on the Platform. No personal data derived from your win69 usage is shared with social media platforms, ad networks, or data brokers for advertising purposes.
Strictly necessary cookies cannot be disabled as they are essential to Platform operation. Performance and functional cookies may be managed through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform, including persistent login and preference retention features.
Under Republic Act No. 10173 and its Implementing Rules, you have the following rights in respect of your personal data held by win69. These rights are subject to applicable legal limitations and exemptions.
To exercise any of these rights, please contact the win69 Data Protection Officer as specified in Section 15. win69 will respond to verifiable data subject requests within fifteen (15) business days. win69 may request proof of identity before acting on a data subject request to prevent unauthorised disclosure.
The win69 Platform is strictly intended for individuals who are 21 years of age or older, consistent with PAGCOR's minimum age requirements for online casino participation. win69 does not knowingly collect personal data from individuals under the age of 21.
Age verification is conducted during registration through the collection and cross-referencing of date of birth information. For high-value transactions, enhanced age and identity verification using government-issued documents may be required.
Parents or legal guardians who believe a minor may have registered an account on win69 should contact win69 support immediately via live chat or at the contact address in Section 15.
win69 collects and processes certain personal data specifically in the context of its responsible gaming program. This includes:
Responsible gaming data is processed for the specific purpose of protecting player welfare and fulfilling win69's obligations under PAGCOR's Responsible Gambling Framework. This data is treated with heightened confidentiality and is not used for any marketing, profiling, or commercial purpose.
Players who request self-exclusion from win69 may have their identity data submitted to PAGCOR's central self-exclusion registry. By requesting self-exclusion, you consent to this submission. For more on win69's responsible gaming tools, please visit the Responsible Gaming page.
win69 reserves the right to update or amend this Privacy Policy at any time to reflect changes in Philippine data privacy law, NPC guidance, PAGCOR requirements, or win69's data processing practices. The "Last Updated" date at the top of the table of contents reflects the date of the most recent revision.
Where amendments are material — meaning they significantly affect the way win69 collects or uses personal data, or they affect players' data subject rights — win69 will notify registered players via SMS to their registered Philippine mobile number or through a prominent in-platform notification prior to the effective date of the change.
Continued use of the win69 Platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure in accordance with Section 14 of the Terms and Conditions.
For all data privacy-related inquiries, data subject rights requests, or complaints regarding win69's processing of personal data, players may contact win69's Data Protection Officer through the following channels:
win69 targets a response to all data subject requests within fifteen (15) business days of receipt. Complex requests may require additional time, in which case win69 will communicate the extended timeline within the initial 15-day period.
If you are unsatisfied with win69's response to your data privacy complaint, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC). Information on the NPC complaints process is available on the NPC's official website.
PAGCOR regulated, Philippine Data Privacy Act compliant, and built for Filipino players. Create your account in two minutes and deposit from ₱100 via GCash.
21+ only · PAGCOR regulated · RA 10173 compliant · Gambling can be addictive — play responsibly.