win96
Privacy Policy
This Privacy Policy explains how win96 collects, uses, stores, shares, and protects the personal information of players and visitors. win96 is committed to responsible data handling in accordance with Philippine data protection law and PAGCOR's regulatory requirements. By using win96, you agree to the practices described in this Policy.
Introduction & Scope Who this Policy applies to and what it covers
win96 ("we", "us", "our") operates the online casino and sports betting platform accessible at win96.vu, serving registered players across the Philippines, including those based in Manila, Cebu, Davao, Quezon City, Makati, and all other Philippine regions. This Privacy Policy describes our practices concerning the collection, use, storage, disclosure, and protection of personal information relating to users of our platform ("you", "your", "User", "Player").
This Policy applies to all personal data collected through: (a) the win96 website and all associated pages; (b) the win96 account registration and login process; (c) all financial transactions conducted through win96, including deposits via GCash, Maya, BPI, BDO, Metrobank, and other supported payment methods; (d) customer support interactions; (e) participation in win96 promotions, loyalty programmes, and marketing communications; and (f) any other interaction between you and win96 in connection with the platform's services.
win96 processes personal data in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, the guidelines issued by the National Privacy Commission (NPC), and applicable PAGCOR regulatory requirements. By accessing and using win96, you acknowledge that you have read, understood, and agreed to this Privacy Policy in its entirety.
If you do not agree to any part of this Privacy Policy, you should not create a win96 account or use any win96 service. Continued use of the platform following any update to this Policy constitutes your acceptance of the revised terms.
Data Controller Who is responsible for your personal data
For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, win96 is the Personal Information Controller (PIC) in respect of all personal data collected and processed through the platform. win96 determines the purposes and means by which your personal data is processed.
win96 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with Philippine data protection law and for handling data subject requests and inquiries. Contact details for win96's DPO are set out in Section 13 of this Policy.
In certain circumstances, win96 may act as a Personal Information Processor (PIP) in respect of data processed on behalf of third-party providers, such as licensed game studios and payment processors. In these cases, processing is governed by data processing agreements between win96 and the relevant third party.
Personal Data We Collect Categories and types of information win96 processes
win96 collects the following categories of personal data, depending on how you interact with the platform:
3.1 Identity & Registration Data
- Full legal name as it appears on a valid government-issued ID;
- Date of birth (used to verify the mandatory 21+ age requirement);
- Gender (optional, collected during account setup);
- Government-issued identification document type and number (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence, PRC ID);
- Username and encrypted password hash.
3.2 Contact Data
- Email address (primary means of account communication);
- Philippine mobile number (used for 2FA, SMS notifications, and account recovery);
- Residential address, city, province, and postal code.
3.3 Financial & Transaction Data
- GCash account number or mobile number;
- Maya (PayMaya) account reference;
- Bank account details for BPI, BDO, and Metrobank transfers (account name and number);
- Deposit and withdrawal history, amounts, and timestamps;
- Wagering history, game session records, and win/loss data.
3.4 Technical & Usage Data
- IP address and geolocation data at the time of login and transaction;
- Device type, operating system, and browser information;
- Session duration, pages visited, and in-platform navigation patterns;
- Login timestamps and account activity logs.
3.5 Communications & Support Data
- Records of live chat interactions with win96 support agents;
- Email correspondence sent to or received from win96 support;
- Complaint and dispute records.
How We Collect Personal Data The channels through which data reaches win96
win96 collects personal data through the following channels and methods:
- Directly from you — when you complete the win96 account registration form, submit KYC verification documents, contact customer support, or participate in a promotion;
- Automatically via the platform — through cookies, server logs, and similar technologies that record your interactions with the win96 website and applications (see Section 9 for full Cookie Policy);
- Payment processors — transaction reference data and confirmation details received from GCash, Maya, and other payment service providers when you make a deposit or request a withdrawal;
- Identity verification providers — data received from third-party KYC and document verification services used to confirm your identity and age;
- PAGCOR and regulatory sources — data received from PAGCOR or other Philippine regulatory bodies in connection with win96's licensing and compliance obligations, including self-exclusion registers;
- Fraud prevention and security services — data received from fraud detection and anti-money laundering (AML) screening providers used to protect the integrity of the platform.
Purposes of Processing & Legal Basis Why win96 processes your data and the lawful grounds for doing so
win96 processes personal data only for specific, legitimate purposes and always on the basis of a lawful ground as required by the Data Privacy Act of 2012. The table below sets out the primary purposes of processing and the corresponding lawful basis.
| Purpose of Processing | Lawful Basis |
|---|---|
| Account registration and management | Performance of a contract (the Player Agreement between you and win96) |
| Age verification (21+ requirement) | Legal obligation (PAGCOR regulations and Philippine gambling law) |
| Processing deposits and withdrawals | Performance of a contract; legal obligation (AML compliance) |
| KYC identity verification | Legal obligation (PAGCOR KYC requirements; RA 9160 Anti-Money Laundering Act) |
| Fraud detection and prevention | Legitimate interests of win96 and protection of other players |
| Customer support | Performance of a contract; legitimate interests |
| Responsible gaming tools and self-exclusion | Legal obligation (PAGCOR responsible gaming requirements) |
| Promotional communications (email, SMS) | Your consent (which you may withdraw at any time) |
| Platform analytics and improvement | Legitimate interests (improving win96 services for Filipino players) |
| Regulatory reporting to PAGCOR | Legal obligation |
Data Sharing & Disclosure Who may receive your personal information
win96 does not sell your personal data to third parties for their independent commercial marketing purposes. Data is shared only as described below and only to the extent necessary.
win96 may share your personal data with the following categories of recipients:
- Payment Processors (GCash, Maya, BPI, BDO, Metrobank, GrabPay) — transaction data necessary to process your deposits and withdrawals through your chosen Philippine payment method.
- KYC & Identity Verification Providers — identity document data submitted during account verification, processed by secure third-party verification services operating under data processing agreements with win96.
- Game Providers & Software Studios — limited technical data (session tokens, player identifiers) necessary to deliver live dealer games, RNG games, and arcade content within the win96 platform.
- Fraud Prevention & AML Screening Services — account and transaction data processed by anti-fraud and anti-money laundering compliance services to protect the platform and its players.
- PAGCOR & Philippine Regulatory Authorities — personal data disclosed in response to lawful regulatory requests, compliance reporting obligations, or court orders under Philippine law.
- Professional Advisers — auditors, legal advisers, and compliance consultants engaged by win96, subject to professional confidentiality obligations.
- Business Successors — in the event of a merger, acquisition, or sale of win96's business, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.
All third parties with whom win96 shares personal data are required to process that data only for the specified purpose and in accordance with win96's instructions and applicable Philippine data protection law.
Data Retention How long win96 keeps your personal information
win96 retains personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable Philippine law. The following general retention principles apply:
- Active Account Data — personal data associated with an active win96 account is retained for the duration of the account's active status and for a minimum period of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act of the Philippines;
- Financial Transaction Records — records of deposits, withdrawals, and wagering activity are retained for a minimum of five (5) years following the date of the relevant transaction, as required by AML regulations;
- KYC Verification Documents — identity verification documents are retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
- Customer Support Records — records of support interactions are retained for two (2) years following the closure of the relevant support case, unless the matter is subject to ongoing legal proceedings;
- Marketing Consent Records — records of your marketing preferences and consent are retained until you withdraw your consent and for a further reasonable period to evidence compliance;
- Self-Exclusion Records — records of self-exclusion requests and their duration are retained permanently to prevent re-registration during an active exclusion period.
Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with win96's data disposal procedures.
Security Measures How win96 protects your personal data
win96 implements technical and organisational security measures appropriate to the risk presented by the personal data we process. These measures include, but are not limited to:
- 256-bit SSL/TLS encryption on all data transmitted between your browser or device and win96's servers — the same standard used by major Philippine banks including BPI and BDO for their online banking platforms;
- Encryption at rest for sensitive stored data including passwords (hashed using industry-standard algorithms), financial account references, and identity document data;
- Access controls limiting internal staff access to personal data on a strict need-to-know basis, with access logs maintained and reviewed regularly;
- Two-factor authentication (2FA) available to all win96 players for login security, and mandatory for administrative access to backend systems;
- Regular security assessments including vulnerability scanning and penetration testing of win96's platform infrastructure;
- Secure data centres with physical access controls, environmental protections, and redundant systems.
Notwithstanding these measures, no security system is completely impenetrable. In the event of a personal data breach that is likely to prejudice your privacy rights, win96 will notify you and the National Privacy Commission in accordance with the Data Privacy Act of 2012 and the NPC's breach notification guidelines.
Minors & Age Restriction win96's strict policy on underage access
win96 strictly prohibits access by persons under 21 years of age in compliance with PAGCOR regulations and Philippine gambling law. win96 does not knowingly collect personal data from persons under 21.
win96 implements mandatory age verification procedures as part of the account registration and KYC process. All applicants are required to confirm their date of birth at registration, and documentary proof of age is required before a win96 account can be fully activated for real-money gameplay.
If win96 becomes aware or has reasonable cause to believe that personal data has been collected from or in relation to a person under 21 years of age — whether through misrepresentation during registration or any other means — win96 will:
- Immediately suspend the relevant account;
- Void all gameplay and wagers conducted by the underage individual;
- Return deposited funds (where the source of funds can be verified as belonging to the underage individual or their parent/guardian) after deducting any winnings, which shall be forfeited;
- Delete the personal data of the underage individual, except to the extent retention is required for regulatory or fraud prevention purposes.
Parents and guardians who believe their child has registered on win96 should contact win96 support immediately via live chat or email at the address set out in Section 13.
Your Data Subject Rights Rights you hold under Philippine data protection law
Under the Data Privacy Act of 2012 and the National Privacy Commission's implementing rules, Filipino data subjects hold specific rights in relation to their personal data. win96 is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact win96's Data Protection Officer at the address in Section 13.
win96 will respond to verifiable data subject requests within thirty (30) calendar days of receipt, or such longer period as permitted by the NPC where the request is complex or voluminous. win96 reserves the right to verify your identity before fulfilling any data subject request to protect against unauthorised disclosure.
Changes to This Policy How win96 will notify you of updates
win96 may update or revise this Privacy Policy from time to time to reflect changes in Philippine law, PAGCOR regulatory requirements, win96's data processing practices, or the services offered on the platform. When material changes are made, win96 will notify registered users through one or more of the following channels: an in-platform notification displayed upon login, an email to the registered account email address, or a prominent notice on the win96 website.
All updates will include a revised "Effective Date" at the top of this Policy. Your continued use of win96 following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the updated Policy, you should cease using win96 and may request account closure by contacting win96's support team.
win96 recommends that players review this Privacy Policy periodically. You can always access the most current version of this Policy at win96.vu/privacy-policy.
Contact & Data Protection Officer How to reach us about privacy matters
If you have any questions, concerns, or complaints regarding this Privacy Policy or win96's data processing practices, or if you wish to exercise any of your data subject rights described in Section 11, please contact win96 through the following channels:
- Data Protection Officer (DPO) — win96 has designated a Data Protection Officer responsible for privacy compliance. Contact the DPO via the support channels below;
- Email — [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line for DPO-related correspondence;
- Live Chat — 24/7 support chat is available within the win96 platform. For complex privacy matters, email correspondence is recommended as it creates a written record;
- Registered Address — win96, Philippines. Serving players across Manila, Cebu, Davao, Quezon City, Makati, and nationwide.
If you are not satisfied with win96's response to a privacy complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines — the regulatory body responsible for enforcing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available through the NPC's official government channels.
Your Rights Under Philippine Data Privacy Law
The Data Privacy Act of 2012 gives Filipino players specific rights over how win96 handles your personal information. Here's what each right means in practice.
You have the right to be told — clearly and in plain language — what personal data win96 collects, why it is collected, how it is used, and who it may be shared with. This Privacy Policy fulfils that obligation.
You may request a copy of the personal data that win96 holds about you. Upon verification of your identity, win96 will provide a summary of the personal data in our records within 30 days of your request.
If any personal data held by win96 is inaccurate, incomplete, or outdated, you have the right to request that it be corrected. You can update basic account information directly in your win96 account settings.
You may request deletion of your personal data where win96 no longer has a lawful basis to retain it. Note that certain data must be retained to satisfy PAGCOR regulatory and AML legal obligations.
You may object to win96 processing your personal data for direct marketing purposes. You can opt out of marketing emails and SMS at any time by updating your communication preferences in account settings.
Where processing is based on your consent or a contract, and is carried out by automated means, you may request that your personal data be provided to you in a structured, machine-readable format.
How win96 Puts Privacy First
Privacy at win96 isn't just compliance paperwork. Here are the six concrete commitments win96 makes to every Filipino player's personal data.
256-Bit SSL on Every Transaction
Every deposit, withdrawal, and login on win96 is encrypted with 256-bit SSL — the same standard used by BPI and BDO online banking. Your GCash account number and Maya reference are never transmitted unencrypted.
Banking GradeData Privacy Act 2012 Compliant
win96 processes all personal data of Filipino players in full compliance with Republic Act No. 10173 and the National Privacy Commission's implementing rules — including maintaining a registered Data Protection Officer.
NPC CompliantNo Selling of Personal Data
win96 does not sell, rent, or trade your personal information to unaffiliated third parties for their own marketing purposes. Your data is used to operate your account and improve your experience — nothing more.
Zero Data SalesSecure GCash & Maya Processing
Filipino payment data — GCash numbers, Maya references, and bank account details — is processed only as necessary to complete your transaction, under strict data minimisation principles. We store only what's needed.
PH Payments SecureNo Data Collection from Minors
win96 strictly enforces the 21+ age requirement and does not knowingly collect data from underage individuals. KYC verification confirms age before any account is activated for real-money gameplay.
21+ Enforced30-Day Response to Privacy Requests
win96 commits to responding to all verifiable data subject requests — including access, rectification, erasure, and portability — within 30 calendar days, in line with NPC requirements.
Fast Response
Play at win96 with Confidence —
Your Privacy Is Protected
win96 is built for Filipino players who value both great gaming and genuine data security. Log in to your account or explore the casino — knowing that your personal information is in good hands.
Gambling is for entertainment purposes only. win96 is strictly for players aged 21 and above. Play responsibly.