win60 Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how win60 ("win60," "we," "us," or "our") collects, processes, stores, and protects the personal information of users ("you," "Player," or "User") who access or use the win60 online gaming platform at win60.app ("the Platform").

win60 is committed to protecting the privacy and personal data of every player on the Platform. This Policy is designed to comply with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).

By registering an account on win60, accessing the Platform, or using any of win60's services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the win60 Platform.

02 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, win60 acts as the Personal Information Controller in respect of the personal data collected through the Platform. win60 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

win60 operates the Platform for the Philippine market and processes personal data of Filipino players in connection with the provision of online gaming services. All data processing activities are conducted in accordance with applicable Philippine law and PAGCOR regulatory requirements.

03 Personal Data We Collect

win60 collects the following categories of personal data from players:

win60 does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. win60 does not collect biometric data, health information, or political opinions.

04 How We Collect Your Data

win60 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs;
• Third-party sources: Identity verification data from government ID databases or third-party KYC service providers; payment data from GCash, PayMaya, and banking partners; fraud prevention data from security service providers;
• Publicly available sources: Information from public records where relevant to regulatory compliance or fraud prevention.

05 How We Use Your Personal Data

win60 uses your personal data for the following purposes:

• To create, manage, and maintain your win60 player account;
• To verify your identity and age in compliance with PAGCOR regulations and the 21+ age requirement;
• To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods ;
• To detect and prevent fraud, money laundering, and other illegal activity on the Platform;
• To comply with applicable Philippine laws, PAGCOR regulatory requirements, and anti-money laundering (AML) obligations;
• To provide customer support and resolve disputes;
• To send you account-related notifications, security alerts, and service updates;
• To send promotional communications and bonus offers where you have consented to receive them;
• To monitor your gaming activity for responsible gaming purposes and to enforce self-exclusion or limit settings you have applied;
• To improve the win60 Platform, personalise your experience, and analyse usage patterns;
• To enforce the win60 Terms & Conditions and other applicable policies.

06 Legal Basis for Processing

win60 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfil our obligations under the win60 Terms & Conditions, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with PAGCOR regulations, AML laws, tax obligations, and other applicable Philippine legal requirements;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

07 Sharing Your Personal Data

win60 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. win60 may share your personal data with the following categories of recipients only where necessary and lawful:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely for the purpose of processing your deposits and withdrawals;
• Identity verification providers: Third-party KYC and age verification service providers engaged to verify your identity and comply with regulatory requirements;
• Game providers: Licensed third-party game studios whose games are available on the win60 Platform, to the extent necessary for game operation and fairness auditing;
• Fraud prevention and security providers: Third-party services engaged to detect and prevent fraudulent activity, money laundering, and platform abuse;
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where required by law or regulatory obligation;
• Legal and professional advisers: Lawyers, auditors, and other professional advisers engaged by win60, subject to strict confidentiality obligations;
• Business transfers: In the event of a merger, acquisition, or sale of all or part of win60's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third parties with whom win60 shares personal data are required to process that data in accordance with applicable Philippine data protection law and win60's data processing standards.

08 Data Retention

win60 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AML record-keeping requirements;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine AML regulations;
• Identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant KYC process;
• Customer support communications: Retained for three (3) years from the date of the communication;
• Technical and usage data: Retained for up to twelve (12) months, unless required for longer periods for security or fraud investigation purposes.

Upon expiry of the applicable retention period, win60 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

09 Data Security

win60 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the win60 Platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Two-factor authentication (2FA) for player accounts via Philippine mobile numbers;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments;
• Secure data centres with physical access controls and environmental safeguards.

10 Cookies & Tracking Technologies

win60 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the win60 Platform. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function, including session management, login authentication, and security. These cannot be disabled;
• Functional cookies: Remember your preferences such as language settings and game display options to personalise your experience;
• Analytics cookies: Collect anonymised data about how players use the Platform to help win60 improve performance and user experience;
• Security cookies: Used to detect and prevent fraudulent activity and protect the integrity of the Platform.

win60 does not use third-party advertising or tracking cookies that share your data with external advertising networks. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may affect the functionality of the win60 Platform.

11 Your Data Protection Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by win60:

• Right to be informed: The right to be informed about how your personal data is collected and processed, as set out in this Policy;
• Right of access: The right to request a copy of the personal data win60 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to win60's legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation;
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another controller;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact the win60 Data Privacy Officer via the contact details in Section 14. win60 will respond to all data rights requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

12 Minors & Age Policy

win60 employs age verification procedures during account registration to confirm that all players meet the 21+ age requirement. If win60 discovers that personal data has been collected from a person under 21, that account will be immediately closed, all data will be deleted, and any funds will be returned to the payment source after verification.

Parents and guardians who believe a minor has registered on the win60 Platform should contact win60 customer support immediately so that the account can be closed and the data removed without delay.

13 Changes to This Privacy Policy

win60 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, win60 will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the win60 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure in accordance with the win60 Terms & Conditions.

14 Contact Us & Data Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by win60, please contact the win60 Data Privacy Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated. Information about the NPC and how to file a complaint is available through official Philippine government channels.