win96 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how win96 (hereinafter "win96," "we," "us," or "our"), operator of the online casino and sports betting platform accessible at win96.lat, collects, processes, stores, and protects the personal data of individuals ("you," "the Player," "the Data Subject") who access or use our platform, whether as a registered account holder or as an unregistered visitor.

This Policy applies to all personal data processed in connection with the win96 platform, including data collected through account registration, KYC verification, financial transactions, customer support interactions, and general platform use. By accessing or using win96, you acknowledge that you have read and understood this Policy.

2. Data Controller Information

Win96 is the data controller responsible for your personal information. The data controller determines the purposes and means of processing personal data collected through the win96 platform. All data subject rights requests, privacy inquiries, and concerns should be directed to win96 through the contact details provided in Section 13 of this Policy.

Win96 has designated an internal Data Privacy Officer (DPO) as required under the Data Privacy Act of 2012. The DPO is responsible for overseeing compliance with this Policy, managing data subject rights requests, and coordinating with the National Privacy Commission where required.

3. Personal Data We Collect

Win96 collects personal data from you in the following categories, depending on how you interact with our platform:

Win96 does not collect sensitive personal information (as defined under the Data Privacy Act) unless expressly required for legal compliance purposes, such as government-issued ID for KYC. Where such sensitive data is collected, it is handled with the heightened protections required by law.

4. Legal Basis for Processing

Win96 processes your personal data on the following legal bases as provided under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and win96, including account management, game provision, payment processing, and bonus administration.
• Legal Obligation: Processing is necessary to comply with applicable Philippine laws, including PAGCOR regulations, Anti-Money Laundering Act (AMLA) requirements, and the Data Privacy Act itself.
• Legitimate Interests: Processing is necessary for win96's legitimate interests, including fraud prevention, platform security, product improvement, and responsible gaming monitoring — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where win96 relies on your consent as the legal basis (e.g., for direct marketing communications), you retain the right to withdraw such consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. How We Use Your Personal Data

Win96 uses the personal data collected for the following specific purposes:

• To create, verify, and maintain your win96 account, including KYC identity verification as required by PAGCOR and AMLA regulations.
• To process deposits and withdrawals through your chosen Philippine payment method (GCash, Maya, BPI, BDO, Metrobank, Coins.ph, or other supported channels).
• To provide access to games, sports betting markets, and all other win96 platform features.
• To administer bonuses, promotions, loyalty programs, and any VIP rewards applicable to your account.
• To detect, investigate, and prevent fraudulent transactions, money laundering, match-fixing, or any other prohibited activity on the platform.
• To enforce our responsible gaming obligations, including age verification, self-exclusion enforcement, and deposit limit monitoring.
• To provide customer support and respond to your inquiries, complaints, and data subject rights requests.
• To send transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts) via email or SMS.
• To send promotional and marketing communications where you have opted in and not subsequently withdrawn consent.
• To analyse aggregate, anonymised platform usage data to improve win96's services, game selection, and user experience.
• To comply with reporting obligations to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities.

6. Disclosure of Personal Data to Third Parties

Win96 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may disclose your personal data to the following categories of recipients only where strictly necessary:

• Game Providers: Licensed game studios (e.g., Pragmatic Play, Evolution Gaming) may receive limited technical data required to deliver game functionality. These providers are contractually bound to data protection standards consistent with this Policy.
• Payment Processors: Philippine payment service providers (GCash, Maya, BPI, BDO, Metrobank, and others) receive the minimum financial data required to process your transactions.
• KYC and AML Compliance Providers: Third-party identity verification services may process your identity documents for KYC purposes, subject to strict confidentiality obligations.
• Regulatory Authorities: PAGCOR, AMLC, NPC, and other competent Philippine government bodies, where disclosure is required by law, court order, or regulatory instruction.
• Legal and Professional Advisers: Lawyers, auditors, and insurers, subject to professional confidentiality obligations, where necessary for legitimate legal or business purposes.

Win96 requires all third parties to respect the security and confidentiality of your personal data and to process it only in accordance with applicable Philippine data protection law and our written instructions.

7. Data Retention

Win96 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention obligations:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by Philippine AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of transaction, in compliance with AMLA and PAGCOR requirements.
• Customer support communications: Retained for three (3) years from the date of last interaction.
• Marketing consent records: Retained for the period of your consent and three (3) years thereafter as evidence of consent.

Upon expiry of the applicable retention period, win96 will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification.

8. Cookies and Tracking Technologies

Win96 uses cookies — small text files stored on your device — and similar technologies (local storage, session storage) to operate and improve the platform. The following cookie categories are used:

• Strictly Necessary Cookies: Required for the win96 platform to function. These include session authentication cookies and security tokens. They cannot be disabled.
• Functional Cookies: Remember your preferences, such as language settings and game lobby layout. Disabling these may affect platform functionality.
• Analytics Cookies: Collect anonymised, aggregated data about how players use win96 (e.g., pages visited, session duration) to help us improve the platform. No personally identifying information is transmitted to analytics providers.

Win96 does not use advertising cookies or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent access to the win96 platform.

9. Data Security

Win96 implements the following technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmissions between your device and win96 servers.
• Encryption of sensitive data fields (passwords, payment credentials, identity document data) at rest using industry-standard algorithms.
• Role-based access controls ensuring that win96 personnel can access personal data only to the extent required for their specific job functions.
• Regular security assessments, penetration testing, and vulnerability management on win96 platform infrastructure.
• Mandatory security training for all win96 personnel who handle personal data.
• Incident response procedures to detect, contain, and notify affected players of any personal data breach within the timeframes required by NPC regulations.

While win96 employs robust security measures, no internet-based system is completely impenetrable. You are also responsible for maintaining the security of your own account credentials. Please refer to the win96 Terms and Conditions for your account security obligations.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by win96:

• Right to Be Informed: To be notified of how your data is collected and processed — fulfilled by this Policy.
• Right of Access: To request a copy of the personal data win96 holds about you, together with information about how it is processed.
• Right to Rectification: To request correction of inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): To request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to win96's legal retention obligations.
• Right to Data Portability: To receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: To object to the processing of your personal data on grounds of legitimate interests, including for direct marketing purposes.
• Right to Damages: To be indemnified for damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.

To exercise any of these rights, please contact win96 support using the contact details in Section 13. Win96 will respond to all data subject rights requests within thirty (30) calendar days of receipt, as required by NPC regulations.

11. Children and Minors

Win96 is strictly prohibited from being used by any person under the age of twenty-one (21). Win96 does not knowingly collect or process personal data of minors. If win96 discovers that personal data of a person under 21 has been collected, such data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that a minor has registered on win96 or otherwise provided personal data to the platform, please contact win96 support immediately so that the data can be identified and removed.

12. Amendments to This Policy

Win96 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be notified to registered players via email or an in-platform notification at least seven (7) days before taking effect where practicable. The "Last Updated" date at the top of this Policy will always reflect the most recent revision.

Continued use of the win96 platform following the effective date of any amendment constitutes your acknowledgment of and agreement to the updated Policy.

13. Contact and Data Privacy Officer

For all privacy-related inquiries, data subject rights requests, or concerns regarding win96's handling of your personal data, please contact us at:

Email (plain text): [email protected]

Win96's Data Privacy Officer will acknowledge receipt of all formal privacy inquiries within five (5) business days and will provide a substantive response within thirty (30) calendar days, consistent with NPC guidelines. If you are not satisfied with win96's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.