pbwin Privacy Policy

This Privacy Policy ("Policy") describes how pbwin ("pbwin," "we," "us," "our") collects, processes, stores, uses, and protects the personal data of individuals ("you," "Player," "User") who access or use the pbwin online gaming platform available at pbwin.club and any associated services, communications, or features operated by pbwin.

pbwin respects your privacy and is committed to protecting your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the relevant issuances of the National Privacy Commission (NPC) of the Philippines. Where applicable and appropriate, pbwin also observes internationally recognized data protection principles.

This Policy applies to all personal data pbwin processes in connection with the registration and management of player accounts, financial transactions, game activity, customer support communications, marketing, and any other interaction between you and pbwin. Please read this Policy carefully before using the pbwin platform. By registering an account or using any pbwin service, you acknowledge that you have read and understood this Policy.

For the purposes of the Philippine Data Privacy Act, the data controller responsible for your personal data is pbwin, the operator of the pbwin.club platform. As data controller, pbwin determines the purposes and means by which your personal data is processed.

pbwin has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and with applicable data protection legislation. If you have questions about how pbwin handles your personal data, or if you wish to exercise any of your data rights described in Section 12, you may contact the DPO using the contact details provided in Section 17.

pbwin collects the following categories of personal data in connection with your use of the platform:

pbwin does not intentionally collect sensitive personal information as defined under the Data Privacy Act (such as health data, political affiliations, or religious beliefs) unless specifically required for a regulatory compliance purpose and with appropriate safeguards in place.

pbwin collects personal data through the following means:

• Direct Registration: When you create a pbwin Account, you provide identity data, contact data, and login credentials directly.
• KYC Document Submission: When you submit identification documents for account verification, pbwin receives and processes the personal data contained in those documents.
• Payment Transactions: When you make a deposit or withdrawal using GCash, PayMaya, or a linked bank account, financial transaction data is received from you and from the relevant payment service provider.
• Platform Usage: As you use the pbwin platform — browsing the game lobby, playing games, adjusting account settings, using responsible gaming tools — gaming data and technical data are generated and collected automatically.
• Customer Support Interactions: When you contact pbwin's support team via live chat or email, communications data is created and stored.
• Cookies and Tracking Technologies: Technical data is collected automatically through cookies and similar tracking technologies as described in Section 10.
• Third-Party Sources: pbwin may receive limited data from authorized payment service providers and identity verification partners for fraud detection and compliance purposes.

pbwin processes your personal data on the following legal bases, consistent with the requirements of the Philippine Data Privacy Act:

• Contractual Necessity: Processing that is necessary for pbwin to perform its obligations under the Terms and Conditions governing your Account — including processing your deposits, withdrawals, game sessions, and account management activities.
• Legal Obligation: Processing that is required for pbwin to comply with applicable laws and regulations, including PAGCOR licensing requirements, anti-money laundering (AML) obligations under the Philippine Anti-Money Laundering Act (AMLA), and data reporting requirements under applicable Philippine law.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gaming monitoring, and service improvement, where pbwin's legitimate interest in these activities is not overridden by your privacy rights.
• Consent: Where pbwin relies on your consent as the legal basis for processing — primarily in connection with optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of any processing carried out before the withdrawal.

pbwin uses the personal data it collects for the following specific purposes:

6.1 Account and Service Delivery

To create and maintain your pbwin Account; to process deposits and withdrawals through GCash, PayMaya, and linked bank accounts; to deliver gaming services, including live casino, slots, sports betting, e-sabong, and bingo; to administer bonuses and the VIP program; and to provide 24/7 Filipino-language customer support.

6.2 Identity Verification and KYC

To verify your identity and age (confirming you are at least 21 years old) in compliance with PAGCOR regulations and pbwin's KYC obligations; to verify the ownership of payment methods linked to your Account; and to conduct enhanced due diligence where required by AML obligations.

6.3 Security and Fraud Prevention

To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, bonus abuse, and other forms of prohibited conduct; to enforce pbwin's Terms and Conditions; and to protect the security and integrity of the pbwin platform for all users.

6.4 Responsible Gaming

To support the operation of pbwin's responsible gaming tools, including deposit limits, loss limits, session reminders, and self-exclusion; to monitor gaming behavior for signs of potential problem gambling; and to comply with PAGCOR's responsible gaming mandate.

6.5 Legal and Regulatory Compliance

To fulfill pbwin's obligations under applicable Philippine law, including PAGCOR licensing conditions, AMLA reporting requirements, tax obligations, and data protection law requirements.

6.6 Platform Improvement and Analytics

To analyze platform performance, identify technical issues, understand player behavior in aggregate, and improve the pbwin user experience — using anonymized or aggregated data wherever possible.

6.7 Marketing (Consent-Based)

Where you have opted in to marketing communications, pbwin may use your contact data and marketing preference data to send you information about promotions, bonuses, new games, and other pbwin services. You may opt out at any time as described in Section 11.

pbwin does not sell, rent, or trade your personal data. pbwin may share your personal data with third parties only in the following circumstances:

• Payment Service Providers: GCash (Mynt), Maya Bank (PayMaya), BDO, BPI, and Metrobank receive the financial data necessary to process your deposit and withdrawal transactions. These entities are subject to their own privacy policies and to Philippine financial regulation.
• Game Software Providers: Third-party game providers (such as JILI, Pragmatic Play, PG Soft, Evolution Gaming) receive session-level technical data necessary to deliver their games within the pbwin platform. No personally identifiable information beyond what is necessary for game delivery is shared.
• Identity Verification Partners: Regulated third-party KYC service providers may receive identity document data to assist pbwin in verifying Player identities and ages in compliance with PAGCOR requirements.
• Regulatory and Law Enforcement Authorities: pbwin may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the NPC, or other competent Philippine authorities pursuant to a legal obligation, court order, or lawful regulatory request.
• Professional Advisers: Legal, accounting, and audit professionals engaged by pbwin may have access to personal data to the extent necessary to provide their services, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of pbwin's business or assets, personal data held by pbwin may be transferred to the acquiring entity, subject to the acquiring entity assuming the data protection obligations under this Policy.

pbwin retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data and KYC Records: Retained for the duration of the Player's active Account plus a minimum of five (5) years following Account closure, consistent with PAGCOR licensing requirements and applicable AML record-keeping obligations under the AMLA.
• Financial Transaction Records: Retained for a minimum of five (5) years following the transaction date, as required by Philippine tax and AML regulations.
• Gaming History: Retained for the duration of the active Account plus three (3) years following Account closure for dispute resolution and regulatory audit purposes.
• Customer Support Records: Retained for three (3) years following the resolution of the relevant support interaction, or longer if the interaction is related to an ongoing dispute or regulatory matter.
• Marketing Preference Records: Retained for the duration of the Account plus three (3) years, or until an opt-out request is received, whichever is earlier.
• Technical Data (Logs): Typically retained for twelve (12) months and then anonymized or deleted, unless required for an ongoing security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with pbwin's data disposal procedures.

pbwin implements technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS/SSL Encryption: All data transmitted between your device and pbwin's servers is encrypted using Transport Layer Security (TLS) with 256-bit AES encryption.
• Encrypted Data Storage: Sensitive personal data stored on pbwin's servers, including identity documents and financial data, is encrypted at rest.
• Access Controls: Access to personal data is restricted to pbwin personnel who have a legitimate business need to access it, and is controlled through role-based access management and multi-factor authentication.
• Intrusion Detection and Monitoring: pbwin's infrastructure is monitored continuously for unauthorized access attempts, anomalous activity, and security incidents.
• Regular Security Assessments: pbwin conducts periodic security assessments and penetration tests of its platform and data systems.
• Incident Response: pbwin maintains a data breach incident response procedure. In the event of a personal data breach that poses a risk to affected Players, pbwin will notify the affected Players and the NPC in accordance with applicable Philippine law requirements.

While pbwin employs robust security measures, no online system is completely immune to risk. Players are encouraged to protect their own Account security by using a strong, unique password and enabling two-factor authentication.

pbwin uses cookies and similar tracking technologies on the pbwin.club platform. Cookies are small text files placed on your device that help the platform function correctly and allow pbwin to understand how the platform is used.

10.1 Types of Cookies Used

• Essential Cookies: Necessary for the platform to function. These include session authentication cookies that keep you logged in to your pbwin Account and cookies that maintain your session state across game interactions. Essential cookies cannot be disabled without impairing core platform functionality.
• Performance and Analytics Cookies: Used to collect anonymized information about how players use the pbwin platform — such as which pages are visited most frequently and whether error messages are encountered. This data is used to improve the platform.
• Functional Cookies: Used to remember your preferences — such as your preferred language setting or the game lobby view you last used — to provide a more personalized experience on return visits.
• Marketing Cookies (Consent Required): Where you have consented, these cookies may be used to deliver promotional content relevant to your interests. Marketing cookies are only placed with your explicit opt-in consent.

10.2 Managing Cookies

You may control and manage cookies through your browser's settings. Most modern browsers allow you to refuse some or all cookies, or to delete cookies that have already been placed. Note that disabling essential cookies will affect your ability to log in and use pbwin's core services. Instructions for managing cookies are available in your browser's help documentation.

pbwin may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, special events, and other pbwin offers. Marketing communications are only sent to Players who have opted in to receive them during registration or through their Account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email from pbwin;
• Updating your communication preferences within your pbwin Account settings dashboard; or
• Contacting pbwin's support team via live chat and requesting to be removed from marketing lists.

Withdrawal of consent to marketing communications will not affect your ability to use pbwin's services or to receive essential service communications (such as account verification messages, transaction confirmations, and security alerts), which are sent regardless of marketing preferences.

Please note that there may be a short processing period of up to five (5) business days after you opt out before all marketing communications cease.

As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by pbwin. You may exercise these rights by contacting pbwin's Data Protection Officer using the contact details in Section 17.

pbwin will respond to all data rights requests within thirty (30) calendar days of receipt of a valid, verified request. In complex cases, this period may be extended by a further thirty (30) days with notice to you. pbwin may need to verify your identity before fulfilling a data rights request to protect against unauthorized access to another person's data.

Please note that certain rights are subject to limitations. For example, the right to erasure does not apply where pbwin is required to retain data to comply with a legal obligation (such as AML record-keeping requirements) or to defend against legal claims. pbwin will clearly communicate any such limitation when responding to a request.

If you are a parent or guardian and believe that your child (under 21) has registered or attempted to register on the pbwin platform, please contact pbwin's support team immediately via live chat or at [email protected] so that the matter can be investigated and the Account closed without delay.

pbwin's primary data processing infrastructure is located within or closely proximate to the Philippines. However, certain service providers and technology partners engaged by pbwin may process data in data centers located outside the Philippines — for example, cloud infrastructure providers or international game software companies.

Where personal data is transferred outside the Philippines, pbwin ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that required under Philippine law. Such safeguards may include contractual data processing agreements incorporating data protection clauses, or reliance on the adequacy of the data protection framework of the receiving jurisdiction.

If you would like further information about the safeguards pbwin has in place for international data transfers, please contact pbwin's Data Protection Officer using the contact details in Section 17.

The pbwin platform may contain links to or integrations with third-party services — such as GCash and PayMaya for payment processing, or game provider platforms for certain game types. This Privacy Policy does not apply to the data practices of any third-party service. pbwin is not responsible for the privacy practices of third parties, and you are encouraged to review the privacy policies of any third-party services you use in connection with your pbwin Account.

pbwin carefully selects its third-party service providers and requires them to implement appropriate data protection measures, but pbwin cannot guarantee the data practices of entities outside its direct control.

pbwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in pbwin's data practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this Policy will be revised whenever material changes are made.

Where changes are material — meaning they significantly affect your rights or pbwin's obligations with respect to your personal data — pbwin will provide reasonable advance notice through the platform (via an in-platform notification) or by email to your registered address before the changes take effect.

Your continued use of the pbwin platform after the effective date of any revised Policy constitutes your acknowledgment of and agreement to the revised terms. If you do not agree to the revised Policy, you must cease using pbwin and may request closure of your Account in accordance with pbwin's Terms and Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about how pbwin has handled your personal data, please contact pbwin's Data Protection Officer through the following channels:

pbwin will acknowledge receipt of your privacy inquiry within forty-eight (48) hours and will endeavour to provide a full response within thirty (30) calendar days.

If you are not satisfied with pbwin's response to your privacy complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC), the competent supervisory authority for data protection matters in the Philippines. Information about the NPC and its complaint process is available through official Philippine government channels.

This Privacy Policy was last reviewed and updated on 1 January 2026 and is effective from that date.