rgwin Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how rgwin ("rgwin," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "your," or "data subject") who access or use the rgwin website, mobile platform, and all associated services (collectively, the "Platform").

rgwin is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).

By registering an account, accessing the Platform, or otherwise providing your personal information to rgwin, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the rgwin Platform.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, the data controller responsible for your personal information is:

• Entity: rgwin
• Platform: rgwin.app
• Data Protection Officer (DPO) Contact: [email protected]

Our Data Protection Officer is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO directly for any privacy-related enquiries, requests, or complaints.

3. Data We Collect

rgwin collects the following categories of personal data, depending on how you interact with the Platform:

rgwin does not intentionally collect sensitive personal information (as defined under the Data Privacy Act) unless strictly required for identity verification or regulatory compliance, in which case explicit consent will be obtained.

4. How We Collect Your Data

rgwin collects personal data through the following means:

• Direct interactions: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies.
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-money laundering screening services; payment data from GCash, PayMaya, and banking partners.
• Publicly available sources: Information from public Philippine government databases used for identity verification and regulatory compliance purposes.

5. Legal Bases for Processing

rgwin processes your personal data on the following lawful bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to create and manage your rgwin account, process transactions, and deliver the services you have requested.
• Legal obligation: Processing required to comply with PAGCOR regulations, anti-money laundering (AML) laws, the Data Privacy Act, and other applicable Philippine legislation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improvement of our services, where such interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed, and freely given consent. You may withdraw consent at any time.

6. How We Use Your Data

rgwin uses your personal data for the following purposes:

• To create, verify, and manage your rgwin account.
• To process deposits, withdrawals, and other financial transactions in Philippine Peso (PHP).
• To verify your identity and age (21+) in compliance with PAGCOR requirements.
• To detect, investigate, and prevent fraud, money laundering, and other illegal activity.
• To monitor gameplay for responsible gaming purposes and enforce self-exclusion requests.
• To provide customer support and respond to your enquiries.
• To send you transactional communications (account confirmations, withdrawal notifications, security alerts).
• To send you marketing communications about rgwin promotions and new features, where you have opted in.
• To analyse Platform usage and improve the rgwin user experience.
• To comply with our legal and regulatory obligations under Philippine law.

7. Sharing Your Data

rgwin does not sell your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: GCash, PayMaya, and Philippine banking partners, to process your deposits and withdrawals.
• K YC and identity verification providers: Third-party services used to verify your identity and age in compliance with PAGCOR and AML requirements.
• Fraud prevention and AML screening services: Providers that help rgwin detect and prevent fraudulent activity and money laundering.
• IT and platform infrastructure providers: Cloud hosting, database, and security service providers that support the operation of the rgwin Platform.
• Regulatory authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities, where required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants, where necessary for legal compliance or dispute resolution.

All third-party service providers engaged by rgwin are contractually required to process your personal data only for the specified purpose, to maintain appropriate security standards, and to comply with the Philippine Data Privacy Act of 2012.

8. Cookies & Tracking Technologies

rgwin uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the rgwin website. We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming limits you have set.
• Analytics cookies: Help us understand how players use the Platform, which games are most popular, and where technical issues occur. Data collected is aggregated and anonymised where possible.
• Marketing cookies: Used to deliver relevant promotional content about rgwin. These are only set with your explicit consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the rgwin Platform. For marketing cookies, you may withdraw consent at any time through your account settings.

9. Data Security

rgwin implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and the rgwin Platform is encrypted using 256-bit SSL/TLS protocols.
• Encryption at rest: Sensitive personal and financial data stored in rgwin's databases is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised rgwin personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Regular security audits: rgwin conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident response: rgwin maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify the NPC and affected users within the timeframes required by Philippine law.

While rgwin takes all reasonable steps to protect your data, no electronic system is completely immune to security risks. You are responsible for maintaining the confidentiality of your rgwin account credentials and for notifying us immediately if you suspect unauthorised access to your account.

10. Data Retention

rgwin retains your personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for a minimum of five (5) years after account closure, as required by PAGCOR regulations and AML compliance obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended).
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Marketing data: Retained until you withdraw consent or request deletion, whichever is earlier.
• Technical and usage logs: Retained for twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with rgwin's data disposal procedures.

11. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by rgwin:

• Right to be Informed: You have the right to be informed of how your personal data is being collected and processed, as set out in this Policy.
• Right to Access: You may request a copy of the personal data rgwin holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our overriding legal obligations.
• Right to Data Portability: You may request that rgwin provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Block or Restrict Processing: You may request that rgwin restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Damages: You have the right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. rgwin will respond to all verified data subject requests within fifteen (15) business days of receipt. We may request proof of identity before processing your request.

If you are not satisfied with rgwin's response to your privacy request or complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

12. Children's Privacy

The rgwin Platform is strictly intended for individuals aged 21 years and above, in accordance with PAGCOR regulations governing online casino gaming in the Philippines. rgwin does not knowingly collect personal data from individuals under the age of 21.

If rgwin becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the data, and report the incident as required by applicable law. If you believe that a minor has registered on the rgwin Platform, please contact us immediately at [email protected].

Age verification is a mandatory step in the rgwin registration and KYC process. We take our obligations to prevent underage gambling seriously and cooperate fully with PAGCOR's responsible gaming guidelines.

13. Cross-Border Data Transfers

rgwin primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed by service providers located outside the Philippines — for example, cloud infrastructure providers or international fraud prevention services.

Where such cross-border transfers occur, rgwin ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries or organisations that provide an adequate level of data protection as recognised by the NPC.
• Entering into data processing agreements that incorporate standard contractual clauses approved by the NPC.
• Obtaining your explicit consent for the transfer where required by law.

rgwin will not transfer your personal data to any jurisdiction that does not provide adequate protections equivalent to those required under Philippine law.

14. Changes to This Privacy Policy

rgwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, rgwin will notify registered users via email or an in-platform notification at least seven (7) days before the changes take effect, except where immediate amendment is required by law or regulatory directive.

Your continued use of the rgwin Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We recommend reviewing this page periodically to stay informed of how rgwin protects your personal data.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or rgwin's data processing practices, please contact our Data Protection Officer:

• Email: [email protected]
• Response time: Within 15 business days for formal data subject requests; within 2 business days for general enquiries.
• Live Chat: Available 24/7 via the rgwin Platform after logging in to your account.

For complaints that cannot be resolved directly with rgwin, you may escalate your concern to the National Privacy Commission (NPC) of the Philippines through their official channels.

For responsible gaming concerns, please visit our Responsible Gaming page. For full details on your account rights and obligations, please review our Terms & Conditions.