gpwin Privacy Policy

gpwin ("we," "us," "our," or "the Platform") operates an online casino and gaming platform accessible at https://gpwin.cc, serving players primarily in the Philippines. As the data controller for personal information collected through the gpwin platform, we are responsible for ensuring that your data is handled lawfully, fairly, and transparently.

This Privacy Policy describes the types of personal data we collect from you when you visit, register on, or use the gpwin platform; the purposes for which we process that data; the parties with whom we may share it; the measures we take to keep it secure; and the rights you have as a data subject under applicable Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

This policy applies to all personal data collected through the gpwin website, mobile-optimized platform, customer support channels, and any other service operated under the gpwin brand. It does not apply to third-party websites or services that may be linked from the gpwin platform, as those are governed by their own privacy policies.

By accessing or using the gpwin platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you are providing personal data on behalf of another person, you represent that you have obtained the necessary consent from that person.

gpwin collects personal data in several categories depending on how you interact with the platform. The following table summarizes the main categories of data we collect:

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by law or regulation and with your explicit consent.

gpwin collects personal data through the following means:

• Direct Collection: Information you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access and use the gpwin platform. This includes your IP address, device identifiers, and browsing behavior on the platform.
• Third-Party Sources: Identity verification data from KYC service providers; fraud detection signals from payment processors; and publicly available information used to verify the accuracy of the data you have provided.
• Payment Processors: Transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment partners when you conduct financial transactions on the platform.

gpwin processes your personal data for the following specific purposes:

• Account Management: To create, maintain, and manage your gpwin player account, including authentication, account security, and account recovery.
• Identity Verification (KYC): To verify your identity and age in compliance with applicable Philippine anti-money laundering regulations and gaming regulations. This includes confirming that you are at least 21 years of age.
• Transaction Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other supported payment methods, and to maintain accurate financial records of all transactions.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited conduct on the platform.
• Regulatory Compliance: To comply with applicable Philippine laws and regulations, including the Data Privacy Act of 2012, anti-money laundering laws, and gaming regulations administered by the relevant Philippine authorities.
• Customer Support: To respond to your inquiries, resolve complaints, and provide assistance through live chat, email, and other support channels.
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the features, performance, and user experience of the gpwin platform.
• Promotions and Marketing: To send you information about gpwin promotions, bonuses, and new features, where you have consented to receive such communications. You may withdraw this consent at any time by contacting support or updating your account notification preferences.
• Responsible Gaming: To monitor gaming behavior for signs of problem gambling and to administer responsible gaming tools such as deposit limits, session limits, and self-exclusion requests.

gpwin will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules, gpwin processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and gpwin — specifically, to provide you with access to the platform, process your transactions, and manage your account.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including anti-money laundering regulations, KYC requirements, and gaming regulations.
• Legitimate Interests: Processing is necessary for gpwin's legitimate interests in preventing fraud, ensuring platform security, and improving our services, provided those interests are not overridden by your rights and interests.
• Consent: For certain processing activities, such as sending promotional communications or using non-essential cookies, we rely on your explicit consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

gpwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment service providers, to the extent necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and identity verification service providers who assist gpwin in verifying player identities and ages in compliance with regulatory requirements.
• Fraud Detection Services: Third-party fraud detection and prevention service providers who help gpwin identify and prevent fraudulent activity on the platform.
• Game Providers: Third-party game software providers whose games are available on the gpwin platform, to the extent necessary to deliver game services and maintain game integrity.
• Regulatory Authorities: Philippine government agencies, law enforcement bodies, and regulatory authorities, where disclosure is required by law, court order, or regulatory instruction. This includes the National Privacy Commission, the Philippine National Police, and the National Bureau of Investigation where applicable.
• Professional Advisors: Legal counsel, auditors, and other professional advisors engaged by gpwin, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of gpwin's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

gpwin retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:

Upon expiry of the applicable retention period, gpwin will securely delete or anonymize your personal data in accordance with our data disposal procedures. Where data is anonymized rather than deleted, the anonymized data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify you.

gpwin implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the gpwin platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data stored in our systems, including financial information and identity documents, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within gpwin's systems is restricted to authorized personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Secure Infrastructure: gpwin's platform is hosted on secure, enterprise-grade infrastructure with firewalls, intrusion detection systems, and regular security audits.
• Two-Factor Authentication: gpwin supports two-factor authentication for player accounts to provide an additional layer of security against unauthorized access.
• Incident Response: gpwin maintains a data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, gpwin will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

While gpwin takes all reasonable steps to protect your personal data, no security system is completely impenetrable. You are also responsible for maintaining the security of your gpwin account credentials. If you suspect that your account has been compromised, please contact gpwin support immediately via live chat.

gpwin uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather analytics data that helps us improve our services. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the gpwin platform to function correctly. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences and settings, such as your preferred language and display options, to provide a more personalized experience on the platform.
• Analytics Cookies: These cookies collect anonymized information about how players use the gpwin platform, including which pages are visited most frequently and how players navigate between sections. This data helps us identify areas for improvement.
• Security Cookies: These cookies help gpwin detect and prevent fraudulent activity, unauthorized access attempts, and other security threats on the platform.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling strictly necessary cookies may prevent you from accessing certain features of the gpwin platform. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by gpwin:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
• Right of Access: You have the right to request a copy of the personal data gpwin holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data gpwin holds about you. You can update most account information directly through your account settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to gpwin's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to gpwin's overriding legitimate grounds.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that gpwin has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact gpwin's support team via live chat on the platform. We will respond to all data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified of any such extension.

The gpwin platform is strictly intended for individuals who are 21 years of age or older. gpwin does not knowingly collect personal data from persons under the age of 21. The collection of personal data from minors is not permitted under any circumstances.

As part of the registration and KYC verification process, gpwin takes active steps to verify the age of all players. Any account found to be registered by or operated by a person under the age of 21 will be immediately suspended, all associated personal data will be securely deleted in accordance with applicable law, and any deposited funds will be returned to the payment source after verification.

If you are a parent or guardian and you believe that your child under the age of 21 has registered an account on gpwin or provided personal data to the platform, please contact gpwin support immediately via live chat. We will investigate the matter promptly and take all necessary steps to delete the relevant data and close the account.

Some of gpwin's service providers and technology partners may be located outside the Philippines. Where personal data is transferred to a country outside the Philippines, gpwin ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012 and its implementing rules.

These safeguards may include contractual clauses that require the recipient to protect your personal data to the same standard as required under Philippine law, or reliance on the recipient country's adequacy determination by the National Privacy Commission where applicable.

By using the gpwin platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the provision of gpwin's services, subject to the safeguards described above.

gpwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, gpwin will notify registered players via email or via a prominent notice on the platform at least seven (7) days before the changes take effect, except where immediate changes are required by law.

The effective date at the top of this document indicates when the current version was last updated. Your continued use of the gpwin platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated policy, you must cease using the platform and may request account closure in accordance with the gpwin Terms and Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how gpwin is protecting your personal data. The most current version is always available on the gpwin website.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gpwin handles your personal data, please contact our support team through the following channel:

• Live Chat: Available 24/7 directly on the gpwin platform. This is the fastest way to reach our support team for privacy-related inquiries.
• Email: [email protected] — please include "Privacy Inquiry" in the subject line so your message is routed to the appropriate team.

gpwin aims to acknowledge all privacy-related inquiries within 48 hours and to provide a substantive response within thirty (30) days. For complex requests, we may require additional time and will notify you accordingly.

If you are not satisfied with gpwin's response to your privacy inquiry, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Contact information for the National Privacy Commission is available on their official government website.