win2 Privacy Policy

Introduction

win2 is committed to protecting the privacy and security of every player who uses our platform. We understand that trust is the foundation of any good relationship — and that goes double when real money and personal information are involved. This Policy is our commitment to you: a clear, honest explanation of how we handle your data.

We collect only the personal information that is necessary to provide you with a safe, fair, and enjoyable gaming experience on win2. We do not collect data for its own sake, and we do not monetise your personal information by selling it to advertisers or data brokers.

This Policy applies to all personal data collected through the win2 website at https://win2.one, including data collected during account registration, identity verification, deposits and withdrawals, gameplay, customer support interactions, and any other use of the win2 platform.

Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, win2 is the Personal Information Controller in respect of the personal data collected through the win2 platform. This means win2 determines the purposes and means of processing your personal information.

win2 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and with applicable data protection laws. If you have any questions or concerns about how win2 handles your personal data, you may contact the DPO using the contact details provided in Section 15 of this Policy.

Data We Collect

win2 collects the following categories of personal data, depending on how you interact with the platform:

How We Collect Your Data

win2 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the win2 platform, including through cookies, web beacons, and server logs. See Section 8 for more details on cookies.
• Third-Party Sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance service providers; payment data from payment processors such as GCash and PayMaya.
• Publicly Available Sources: In limited circumstances, win2 may verify information against publicly available records as part of our AML and fraud prevention obligations.

How We Use Your Data

win2 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your win2 account, including verifying your identity and age (21+ requirement) and processing your login credentials.
• Transaction Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other accepted payment methods, and to maintain accurate financial records.
• Legal and Regulatory Compliance: To comply with applicable Philippine laws and regulations, including the Data Privacy Act, Anti-Money Laundering Act, and PAGCOR requirements. This includes conducting KYC checks and filing mandatory reports with relevant authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats to the win2 platform and its players.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling behaviour, enforce self-exclusion orders, and administer responsible gaming tools such as deposit limits and session reminders.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyse usage patterns and improve the functionality, performance, and user experience of the win2 platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided your consent to receive such communications. You may withdraw this consent at any time.

Legal Basis for Processing

win2 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and win2 — specifically, to operate your account, process transactions, and provide gaming services.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC, AML, and PAGCOR reporting obligations.
• Legitimate Interests: Processing is necessary for win2's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and interests.
• Consent: For marketing communications and non-essential cookies, win2 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing and Disclosure

win2 does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML screening service providers who assist win2 in verifying player identities and screening for financial crime risks.
• Technology Service Providers: Cloud hosting, data storage, and platform infrastructure providers who process data on win2's behalf under strict data processing agreements.
• Game Content Providers: Game software providers whose titles are available on the win2 platform may receive limited technical data (such as session tokens) necessary to deliver their games. They do not receive your identity or financial data.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent authorities, where disclosure is required by law or by a valid legal order.
• Professional Advisers: Lawyers, auditors, and other professional advisers, where necessary for win2 to obtain professional advice or to establish, exercise, or defend legal claims.

Cookies and Tracking Technologies

win2 uses cookies and similar tracking technologies on the win2 platform. Cookies are small text files stored on your device that help us deliver a functional and personalised experience.

win2 uses the following types of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in during your visit. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences, such as language settings and responsible gaming tool configurations, to provide a more personalised experience.
• Analytics Cookies: Help win2 understand how players use the platform — which pages are visited most, where players encounter errors, and how navigation flows work. This data is aggregated and anonymised.

win2 does not use third-party advertising or tracking cookies. You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling strictly necessary cookies may affect your ability to use the win2 platform.

Data Retention

win2 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of the consent given.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with win2's data disposal procedures.

Data Security

win2 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the win2 platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls that restrict access to personal data to authorised personnel only.
• Regular security audits and penetration testing of the win2 platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems that process personal data.
• Staff training on data protection obligations and security best practices.
• A documented incident response plan for managing data breaches.

Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by win2:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data win2 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data win2 holds about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to win2's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to win2's overriding legitimate grounds.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that win2 has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact win2's Data Protection Officer using the contact details in Section 15. win2 will respond to all data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with notice provided to you.

Children's Privacy

The win2 platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. win2 does not knowingly collect personal data from any person under the age of 21.

If win2 discovers or has reason to believe that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, all associated data will be securely deleted, and any funds held in the account will be handled in accordance with applicable regulations.

If you are a parent or guardian and believe that your child has registered an account on win2, please contact our support team immediately via live chat or at the email address provided in Section 15.

Cross-Border Data Transfers

In the course of operating the win2 platform, your personal data may be transferred to and processed in countries other than the Philippines — for example, where win2's technology service providers or game content providers are based.

Where such transfers occur, win2 ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries that the National Privacy Commission has determined provide an adequate level of data protection.
• Implementing standard contractual clauses or other approved transfer mechanisms with recipient organisations.
• Conducting transfer impact assessments where required.

By using the win2 platform, you acknowledge that your personal data may be transferred outside the Philippines in accordance with the safeguards described above.

Changes to This Privacy Policy

win2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform features. When material changes are made, win2 will update the "Last Updated" date at the top of this page.

For significant changes that materially affect how we process your personal data, win2 will notify you via email or through an in-platform notification prior to the changes taking effect. Your continued use of the win2 platform after any amendment has been published constitutes your acknowledgement of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how win2 protects your personal information.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way win2 handles your personal data, please contact our Data Protection Officer:

• Data Protection Officer, win2
• Email: [email protected]
• Live Chat: Available 24/7 via the win2 platform

win2 aims to respond to all privacy-related enquiries within five (5) business days. For formal data rights requests, the response period is as described in Section 11.

If you are not satisfied with win2's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint with the NPC is available on the NPC's official website.