Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by pnlwin through our website located at pnlwin.cam, mobile-optimized versions of our platform, and any other digital channels through which we provide online casino and sports betting services to Filipino players. This policy covers information collected directly from you during account registration, through your use of our services, from your device and browser, and from third-party sources where legally permissible.

pnlwin operates as the data controller for all personal information collected through our platform. As data controller, we determine the purposes and means of processing your personal data and maintain responsibility for ensuring compliance with applicable data protection laws. Our registered business address and data protection officer contact information are provided at the end of this policy.

This Privacy Policy should be read in conjunction with our Terms and Conditions, Responsible Gaming Policy, and Cookie Policy, which together form the complete legal framework governing your use of pnlwin services. In the event of any conflict between this Privacy Policy and our Terms and Conditions, the Terms and Conditions shall prevail except where specific privacy rights are concerned.

2. Information We Collect

pnlwin collects various categories of personal information necessary to provide our online gaming services, comply with legal obligations, prevent fraud, and enhance user experience. The types of data we collect include:

2.1 Information You Provide Directly

• Account Registration Data: Full legal name, date of birth, gender, residential address, email address, mobile phone number, username, and password. This information is required to create and maintain your pnlwin account.
• Identity Verification Documents: Government-issued photo identification (Philippine passport, driver's license, UMID, national ID, or voter's ID), proof of address (utility bill, bank statement, or government correspondence dated within 3 months), and potentially additional documentation for enhanced due diligence or large withdrawal processing.
• Financial Information: Payment method details including GCash or Maya mobile numbers, bank account information for deposits and withdrawals, cryptocurrency wallet addresses, transaction history, and deposit/withdrawal amounts.
• Communications: Any information you provide when contacting our customer support team via live chat, email, or phone, including the content of your messages, attachments, and support ticket history.
• Marketing Preferences: Your communication preferences regarding promotional emails, SMS messages, push notifications, and other marketing communications.

2.2 Information Collected Automatically

• Device Information: Device type and model, operating system and version, browser type and version, screen resolution, device identifiers (IMEI, UDID, or similar), and mobile network information.
• Usage Data: Games played, bets placed, wagers amounts, win/loss records, gameplay patterns, session duration, features used, pages visited, click patterns, and navigation paths through our website.
• Location Data: IP address, geographic location derived from IP address, time zone setting, and access timestamps. Location verification is required to ensure compliance with geographic restrictions and licensing requirements.
• Technical Data: Log files, server logs, error reports, crash data, performance metrics, and diagnostic information necessary for maintaining and improving our platform.

2.3 Information from Third-Party Sources

• Payment Processors: Transaction confirmation, payment status, fraud risk assessments, and verification results from GCash, Maya, banks, and cryptocurrency payment gateways.
• Identity Verification Services: Verification results, authenticity checks, sanctions screening, and fraud detection data from third-party identity verification providers.
• Marketing Partners: Information about how you found pnlwin, referral sources, and advertising campaign effectiveness data where you have consented to such data sharing.

3. How We Use Your Information

pnlwin processes your personal data for specific, explicit, and legitimate purposes only. We do not use your information in ways you would not reasonably expect. The legal bases and purposes for processing your data include:

Where we process your personal data based on legitimate interests, we have conducted balancing tests to ensure that our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests by contacting our data protection officer.

4. Information Sharing and Disclosure

pnlwin does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the limited circumstances described below, and only with parties who are contractually obligated to protect your information and use it solely for the specified purposes:

• Service Providers: Payment processors (GCash, Maya, banks, cryptocurrency gateways), identity verification services, fraud detection platforms, cloud hosting providers, customer support software vendors, and email service providers who assist in delivering pnlwin services. All service providers are bound by data processing agreements requiring them to protect your data.
• Game Providers: Third-party game developers and live casino operators whose games appear on our platform receive limited information necessary to deliver gameplay, including username, bet amounts, and game results, but not your full personal or financial details.
• Regulatory Authorities: Philippine gaming regulators, National Privacy Commission, Anti-Money Laundering Council (AMLC), and other government agencies when required by law or in response to valid legal requests.
• Law Enforcement: Police, prosecutors, and judicial authorities when necessary to investigate suspected illegal activity, comply with court orders or subpoenas, or protect the rights and safety of pnlwin, our players, or the public.
• Professional Advisors: Lawyers, auditors, accountants, and other professional consultants who require access to your information to provide services to pnlwin, subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity, who will be required to continue protecting your data in accordance with this Privacy Policy.

We implement appropriate safeguards including data processing agreements, confidentiality clauses, and encryption requirements when sharing data with third parties. We require all recipients to handle your information in accordance with applicable data protection laws.

5. Data Security Measures

pnlwin employs comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and pnlwin servers is encrypted using TLS 1.3 (Transport Layer Security) protocol with 256-bit AES encryption. Sensitive data stored in our databases is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Strict role-based access controls ensure that only authorized personnel can access personal data, and only to the extent necessary for their job functions. All access is logged and monitored.
• Authentication: Multi-factor authentication requirements for employee access to systems containing personal data. Optional two-factor authentication available for player accounts.
• Network Security: Firewall protection, intrusion detection and prevention systems, regular vulnerability scanning, penetration testing, and DDoS mitigation measures.
• Data Segregation: Personal data, financial data, and gameplay data are stored in separate databases with different access controls to limit exposure in the event of a breach.
• Monitoring: 24/7 security monitoring, automated threat detection, regular security audits, and incident response procedures.
• Employee Training: Regular security awareness training for all staff handling personal data, including identification of phishing attempts, social engineering, and proper data handling procedures.
• Vendor Security: Due diligence assessments of all third-party service providers' security practices before engagement, and ongoing monitoring of vendor compliance with security requirements.

While we implement robust security measures, no system is completely secure. You also have responsibilities to protect your account, including using strong unique passwords, not sharing your login credentials, logging out after sessions on shared devices, and immediately reporting any suspected unauthorized access to our security team.

6. Data Retention and Deletion

pnlwin retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data category:

• Active Account Data: Retained for the duration of your account being active plus a reasonable period thereafter to facilitate potential account reactivation if you change your mind about closure.
• Financial Transaction Records: Retained for a minimum of five (5) years after the transaction date as required by Philippine anti-money laundering regulations and tax laws, or longer if required by ongoing investigations or legal proceedings.
• Identity Verification Documents: Retained for five (5) years after account closure or last transaction, whichever is later, to comply with KYC/AML record-keeping requirements.
• Responsible Gaming Records: Self-exclusion records retained indefinitely to ensure that excluded players cannot re-register or circumvent self-exclusion measures.
• Marketing Data: Deleted within thirty (30) days of you withdrawing consent for marketing communications, except where we have a legitimate need to retain limited information to honor your unsubscribe request and prevent future unwanted communications.
• Support Communications: Retained for three (3) years after the last contact to maintain support quality records and resolve potential future disputes.

When personal data is no longer required, it is securely deleted or anonymized such that it can no longer identify you. Deletion methods include secure overwriting of electronic data and physical destruction of any paper records. Anonymized data that cannot be linked back to you may be retained indefinitely for statistical and analytical purposes.

7. Your Privacy Rights

Under the Philippine Data Privacy Act and in accordance with international data protection principles, you have the following rights regarding your personal information:

• Right to Access: You may request confirmation of whether pnlwin processes your personal data and obtain a copy of such data in a commonly used electronic format. This includes information about the purposes of processing, categories of data, recipients, and retention periods.
• Right to Rectification: You may request correction of inaccurate personal data or completion of incomplete data. You can update most information directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes collected, you withdraw consent, you object to processing, or the data has been unlawfully processed. This right is not absolute and may be limited by legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances, such as while we verify accuracy of disputed data or assess the legitimacy of a deletion request.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal data in a structured, commonly used, machine-readable format for transmission to another service provider.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe we have violated your data protection rights.

To exercise any of these rights, please submit a written request via email to our Data Protection Officer. We will respond within thirty (30) days of receiving your request, or inform you if additional time is needed. We may request additional information to verify your identity before processing certain requests. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive.

8. Cookies and Tracking Technologies

pnlwin uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage patterns, remember your preferences, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize you on subsequent visits.

Types of cookies we use include strictly necessary cookies required for website functionality, performance cookies that collect anonymous usage statistics, functional cookies that remember your preferences and settings, and targeting cookies that deliver personalized advertisements based on your interests (only with your consent).

You can control cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use some features of pnlwin. For detailed information about our cookie practices, please refer to our separate Cookie Policy accessible from our website footer.

9. International Data Transfers

While pnlwin primarily serves Filipino players and maintains data infrastructure within the Philippines or with Philippine-based service providers, some data processing activities may involve transfer of personal data to servers or service providers located outside the Philippines. This may occur when using third-party services such as international payment processors, game providers, or cloud infrastructure providers.

When we transfer personal data internationally, we ensure appropriate safeguards are in place including: use of service providers located in countries with adequate data protection laws recognized by the National Privacy Commission; execution of standard contractual clauses or data processing agreements requiring recipient compliance with data protection standards; and implementation of technical measures such as encryption during transmission and storage.

You have the right to obtain information about the safeguards we use for international data transfers and to obtain copies of relevant data transfer agreements by contacting our Data Protection Officer.

10. Contact Information

If you have questions, concerns, or complaints regarding this Privacy Policy or our data protection practices, or wish to exercise any of your privacy rights, please contact our Data Protection Officer through the following channels:

Data Protection Officer, pnlwin
Email: [email protected]
Live Chat: Available 24/7 on our website

For inquiries specifically related to exercising your data subject rights under the Philippine Data Privacy Act, please clearly indicate "Data Privacy Request" in your communication subject line. We commit to responding to all privacy inquiries and requests within the timeframes specified by applicable law.

If you are not satisfied with our response to your privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines through their official website or contact channels.