win36 Privacy Policy

win36 ("win36," "we," "us," or "our") operates the online gaming platform accessible at https://win36.bio. win36 is a PAGCOR-regulated entity offering online casino games, sports betting, bingo, sabong, and related gaming services exclusively to eligible Filipino players aged 21 years and above.

For the purposes of the Data Privacy Act of 2012 (RA 10173) of the Philippines, win36 acts as the Personal Information Controller (PIC) in respect of the personal data of registered Players and website visitors. win36 is responsible for ensuring that all personal data is collected, processed, and stored in accordance with applicable Philippine data privacy law.

Any questions or concerns regarding this Privacy Policy or win36's data handling practices may be directed to our Data Protection Officer (DPO) using the contact information provided in Section 12 of this Policy.

win36 collects personal data through your direct interactions with the platform (registration, deposits, gameplay, support requests) and through automated means (cookies, server logs). The categories of personal data collected include:

win36 does not collect sensitive personal information (as defined under RA 10173) unless strictly required for identity verification or regulatory compliance, in which case such data is collected only with your explicit consent and is subject to enhanced security controls.

win36 processes your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the win36 platform.
• Transaction processing: To facilitate deposits and withdrawals in Philippine Peso via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels.
• Regulatory compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and Know Your Customer (KYC) obligations imposed on licensed gaming operators in the Philippines.
• Responsible gaming: To monitor gaming behaviour, enforce self-imposed limits, process cool-off and self-exclusion requests, and identify players who may require additional support under win36's responsible gaming framework.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance through live chat, Messenger, Viber, and email.
• Platform security: To detect and prevent fraud, account takeover, money laundering, multi-accounting, and other prohibited activities under win36's Terms & Conditions.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have opted in to receive such communications. You may opt out at any time through your account settings.
• Platform improvement: To analyse aggregated, anonymised usage data for the purposes of improving game offerings, platform performance, and user experience.

win36 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have given explicit consent.

Under the Data Privacy Act of 2012, win36 relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to perform the gaming services contract you entered into at registration — including account management, transaction processing, and game delivery.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA reporting obligations, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and optional features, where your freely given, specific, and informed consent has been obtained. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

win36 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. win36 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• PAGCOR and regulatory authorities: win36 is legally obligated to report certain player data and transaction records to PAGCOR and, where applicable, to the Anti-Money Laundering Council (AMLC) in accordance with Philippine law.
• Payment processors: GCash, PayMaya, and banking partners require sufficient transaction data to process deposits and withdrawals. Data shared is limited to what is strictly necessary to complete the transaction.
• Game providers: Third-party game providers (e.g., RNG slot and live dealer suppliers) receive anonymised or pseudonymised player identifiers for the purpose of game delivery and RTP auditing. No full identity data is shared with game providers.
• IT and security service providers: Win36 engages third-party vendors for cloud hosting, DDoS protection, and fraud detection. All such vendors are bound by data processing agreements that require compliance with RA 10173.
• Law enforcement and courts: Where required by lawful order, subpoena, or warrant issued by a Philippine court or competent authority.

win36 uses cookies and similar tracking technologies on win36.bio to deliver a functional and personalised platform experience. The types of cookies used include:

• Strictly necessary cookies: Required for the platform to function. These enable login sessions, maintain your authentication state, and apply your account preferences. These cannot be disabled without breaking platform functionality.
• Analytics cookies: Used to collect anonymised data on how visitors interact with win36.bio — pages visited, session length, referral source — for the purpose of platform improvement. No personally identifiable information is included in analytics data.
• Preference cookies: Store your selected language, display settings, and similar non-sensitive preferences to improve your return visits.
• Marketing cookies: Used only where you have consented, to track engagement with win36 promotions and personalise bonus offers.

You may manage cookie preferences through your browser settings at any time. Disabling certain cookies may affect the functionality of the win36 platform.

win36 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your registered account on win36 and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of each transaction, as required under AMLA regulations.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the most recent identity verification procedure.
• Support and communications records: Retained for two (2) years from the date of the last interaction, unless the subject matter relates to an ongoing dispute or regulatory matter.
• Marketing consent records: Retained for the duration of your opt-in consent and for two (2) years thereafter as evidence of lawful marketing communications.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard methods.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by win36:

• Right to be informed: The right to know what personal data win36 collects and how it is processed — which is fulfilled by this Privacy Policy.
• Right of access: The right to request a copy of the personal data win36 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to legal retention obligations and ongoing regulatory requirements.
• Right to object: The right to object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to data portability: The right to receive a structured, machine-readable copy of personal data you have provided to win36.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe win36 has violated your data privacy rights.

To exercise any of the above rights, please contact win36's Data Protection Officer using the contact details in Section 12. win36 will respond to all data subject requests within fifteen (15) business days of receipt.

win36 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and win36 servers.
• Encryption of sensitive data fields (passwords, payment credentials) at rest using industry-standard algorithms.
• Two-factor authentication (2FA) available for all registered accounts.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular third-party penetration testing and security audits of the win36 platform.
• Incident response procedures enabling win36 to notify affected Players and the National Privacy Commission within 72 hours of a confirmed personal data breach.

While win36 employs robust security practices, no internet-connected system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying win36 immediately of any suspected unauthorised access to your account.

21+ win36 does not knowingly collect personal data from individuals under the age of 21. The win36 platform is strictly prohibited to persons under 21 years of age, as required by PAGCOR regulations governing licensed online gaming in the Philippines.

If win36 discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 without appropriate age verification, win36 will immediately suspend the account, delete the associated personal data, and report the incident to PAGCOR in accordance with its licensing obligations.

Parents and guardians who believe their child under 21 has accessed win36 or provided personal data to win36 are encouraged to contact our support team immediately.

win36 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or win36's data processing practices. When material changes are made, win36 will notify registered Players via email or a prominent notice on the win36 platform at least seven (7) days prior to the changes taking effect.

The "Last updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed of how win36 protects your personal data.

If you have any questions, requests, or complaints relating to this Privacy Policy or win36's data handling practices, please contact our Data Protection Officer through the following channels:

You also have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with win36's response to your data privacy concern. Information on how to contact the NPC is available on the NPC's official government website.