Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how exwin ("Company," "we," "us," or "our"), operator of the online gaming platform accessible at https://exwin.cam and associated mobile applications (collectively, the "Platform"), collects, uses, discloses, stores, and protects the personal information of users ("you," "your," or "User") who access or use our services.

exwin is committed to protecting your privacy and maintaining the security of your personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Republic of the Philippines, its implementing rules and regulations, and other applicable data protection laws and regulations. This Policy applies to all personal information collected through the Platform, including information collected during account registration, gameplay, financial transactions, customer support interactions, and marketing communications.

By accessing, browsing, registering an account, or using any services on the exwin Platform, you acknowledge that you have read, understood, and consent to the collection, use, disclosure, and processing of your personal information as described in this Privacy Policy. If you do not agree with any provision of this Policy, you must immediately discontinue use of the Platform and refrain from creating an account or providing any personal information.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information that you voluntarily provide to us when you register an account, complete verification procedures, engage in gaming activities, make deposits or withdrawals, contact customer support, or participate in promotions. This information includes, but is not limited to:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification numbers (such as Philippine national ID, driver's license, passport, or SSS/GSIS numbers), photographs or scans of identification documents;
• Contact Information: Residential address, email address, mobile phone number, alternative contact details;
• Account Credentials: Username, password, security questions and answers, authentication codes;
• Financial Information: Bank account details, credit/debit card information, e-wallet account details (GCash, PayMaya), transaction history, deposit and withdrawal records, source of funds declarations;
• Communication Records: Customer support inquiries, live chat transcripts, email correspondence, feedback submissions, survey responses;
• Marketing Preferences: Consent to receive promotional communications, preferred communication channels, interests and gaming preferences.

2.2 Information Collected Automatically

When you access or use the exwin Platform, we automatically collect certain technical and usage information through cookies, web beacons, log files, and similar tracking technologies. This information includes:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (UDID, advertising ID), mobile network information;
• Usage Data: Pages visited, games played, time spent on Platform, clickstream data, navigation patterns, search queries, referral sources;
• Technical Data: IP address, geolocation data (country, city, approximate coordinates), connection timestamps, language preferences, timezone settings;
• Gaming Activity: Bets placed, wagers amounts, games played, win/loss records, bonus usage, tournament participation, loyalty points accumulation;
• Transaction Data: Payment method used, transaction amounts, deposit and withdrawal requests, processing times, transaction statuses.

2.3 Information from Third Parties

We may receive personal information about you from third-party sources, including but not limited to:

• Payment processors and financial institutions that facilitate deposits and withdrawals;
• Identity verification service providers that confirm your identity and age;
• Fraud prevention and security service providers that detect and prevent fraudulent activities;
• Credit reference agencies (where permitted by law) for responsible gaming assessments;
• Marketing partners and affiliates that refer you to our Platform;
• Publicly available sources such as government databases for compliance verification.

3. How We Use Your Information

exwin collects and processes your personal information for the following legitimate purposes:

3.1 Account Management and Service Provision

• Creating, maintaining, and administering your gaming account;
• Authenticating your identity and verifying your eligibility to use gaming services;
• Processing deposits, withdrawals, and other financial transactions;
• Providing access to games, sports betting markets, and other entertainment services;
• Managing bonus claims, promotional offers, and loyalty program participation;
• Tracking gaming activity for account history and responsible gaming monitoring;
• Providing customer support and responding to inquiries or complaints.

3.2 Legal and Regulatory Compliance

• Complying with obligations under PAGCOR licensing requirements and gaming regulations;
• Verifying that you meet the minimum age requirement (21 years or older) for gambling;
• Conducting anti-money laundering (AML) and know-your-customer (KYC) checks;
• Detecting and preventing fraud, collusion, money laundering, and other illegal activities;
• Maintaining records required by law for auditing and reporting purposes;
• Cooperating with law enforcement, regulatory authorities, and court orders;
• Enforcing our Terms and Conditions and protecting our legal rights.

3.3 Platform Improvement and Analytics

• Analyzing usage patterns to improve user experience and Platform functionality;
• Conducting research and analytics to understand player preferences and behavior;
• Testing new features, games, and services before public release;
• Optimizing Platform performance, speed, and reliability;
• Identifying and fixing technical issues, bugs, and security vulnerabilities;
• Developing data-driven insights to enhance gaming offerings and customer satisfaction.

3.4 Marketing and Communications

• Sending promotional offers, bonuses, and special deals tailored to your interests;
• Informing you about new games, features, tournaments, and Platform updates;
• Conducting customer satisfaction surveys and gathering feedback;
• Creating personalized marketing campaigns based on your gaming preferences;
• Sending transactional notifications related to deposits, withdrawals, and account activity;
• Delivering important announcements regarding Terms changes or regulatory updates.

3.5 Security and Fraud Prevention

• Monitoring for suspicious activities, duplicate accounts, and fraudulent behavior;
• Implementing authentication measures to prevent unauthorized account access;
• Protecting against cyber threats, hacking attempts, and data breaches;
• Investigating disputes, chargebacks, and payment irregularities;
• Enforcing responsible gaming policies and identifying problem gambling patterns;
• Maintaining the integrity and fairness of games and betting markets.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012 and applicable Philippine data protection laws, we process your personal information based on the following legal grounds:

• Consent: You have provided explicit consent for us to process your personal information for specific purposes, such as receiving marketing communications or participating in optional promotions;
• Contractual Necessity: Processing is necessary to fulfill our obligations under the Terms and Conditions governing your use of the Platform and to provide the gaming services you have requested;
• Legal Obligation: Processing is required to comply with Philippine laws and regulations, including gaming licensing requirements, anti-money laundering laws, tax obligations, and court orders;
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security enhancement, Platform improvement, and business development, provided such interests do not override your fundamental rights and freedoms.

5. Information Sharing and Disclosure

exwin does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients under strict confidentiality obligations:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment processors (GCash, PayMaya, banks) for transaction processing;
• Identity verification providers for KYC and age verification;
• Cloud hosting and data storage providers for secure data management;
• Customer support platforms for inquiry handling and live chat services;
• Marketing and analytics providers for campaign management and performance tracking;
• Game providers (Evolution Gaming, Pragmatic Play, PG Soft) for game content delivery;
• Security and fraud detection services for Platform protection.

These service providers have access to personal information only to the extent necessary to perform their functions and are contractually obligated to maintain confidentiality and security.

5.2 Regulatory and Law Enforcement Authorities

We may disclose your personal information to government agencies, regulatory bodies, and law enforcement authorities when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests;
• Cooperate with PAGCOR investigations and audits;
I'm Claude Code — Anthropic's official command-line coding tool, running on Anthropic's Claude model. I can't reliably see the exact version from here. What would you like to work on? I'm Claude Code — Anthropic's official command-line coding tool, running on Anthropic's Claude model. I can't reliably see the exact version from here. What would you like to work on?
• Enforce our Terms and Conditions and investigate suspected breaches;
• Prevent, detect, or investigate fraud, money laundering, or other illegal activities;
• Protect our rights, property, and safety, or those of our users and the public;
• Respond to national security or public safety concerns.

5.3 Corporate Transactions

In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or other corporate transaction involving exwin, your personal information may be transferred to the acquiring or successor entity, subject to the same privacy protections outlined in this Policy.

5.4 With Your Consent

We may share your information with other parties when you have provided explicit consent for such disclosure, such as when participating in co-branded promotions or third-party tournaments.

6. Data Security

exwin employs industry-standard technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All data transmissions between your device and our servers are protected using SSL/TLS encryption protocols;
• Secure Storage: Personal information is stored on secure servers located in protected data centers with restricted physical access;
• Access Controls: Employee access to personal information is limited on a need-to-know basis and subject to strict confidentiality obligations;
• Monitoring: We continuously monitor our systems for potential vulnerabilities and security incidents;
• Authentication: Multi-factor authentication and strong password requirements protect account access;
• Regular Audits: We conduct periodic security assessments and penetration testing to identify and address weaknesses.

Despite these safeguards, no method of electronic transmission or storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us of any unauthorized access or security breach.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal information is retained for the duration of your account's active status and for a reasonable period thereafter;
• Closed Accounts: Following account closure, we retain certain information for up to seven (7) years to comply with gaming regulations, tax laws, and anti-money laundering requirements;
• Transaction Records: Financial transaction records are retained for at least five (5) years as required by Philippine banking and gaming regulations;
• Marketing Communications: Marketing preference data is retained until you withdraw consent or your account is closed;
• Legal Holds: Information subject to ongoing investigations, litigation, or regulatory proceedings is retained until resolution.

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with data protection best practices.

8. Your Privacy Rights

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights regarding your personal information:

• Right to Access: You may request confirmation of whether we process your personal information and obtain a copy of such information;
• Right to Rectification: You may request correction of inaccurate or incomplete personal information;
• Right to Erasure: You may request deletion of your personal information, subject to legal and regulatory retention requirements;
• Right to Object: You may object to processing of your personal information for direct marketing purposes or when processing is based on legitimate interests;
• Right to Data Portability: You may request transfer of your personal information to another service provider in a structured, commonly used format;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw such consent at any time without affecting the lawfulness of prior processing;
• Right to Lodge a Complaint: You may file a complaint with the National Privacy Commission if you believe your privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 11 below. We will respond to your request within thirty (30) days, or as otherwise required by applicable law.

9. Cookies and Tracking Technologies

The exwin Platform uses cookies, web beacons, pixel tags, and similar technologies to enhance user experience, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize your browser and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: Required for Platform functionality, account authentication, and security;
• Performance Cookies: Collect anonymous usage data to improve Platform performance and identify technical issues;
• Functional Cookies: Remember your preferences, language settings, and customization choices;
• Analytics Cookies: Track user behavior and engagement to inform business decisions and content optimization;
• Marketing Cookies: Deliver targeted advertisements and measure campaign effectiveness.

You may manage cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use some Platform features. For more information, please refer to our Cookie Policy.

10. Third-Party Links and Services

The exwin Platform may contain links to third-party websites, applications, or services that are not owned or controlled by exwin. This Privacy Policy applies only to information collected by our Platform. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies before providing any personal information.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact our Data Protection Officer:

Data Protection Officer
exwin
Email: [email protected]
Subject Line: Privacy Inquiry / Data Protection Request

We will make every effort to respond to your inquiry within fifteen (15) business days. For urgent privacy concerns, please mark your communication as "Urgent - Privacy Matter."

12. Changes to This Privacy Policy

exwin reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by posting the updated Policy on the Platform with a revised "Last Updated" date and, where appropriate, by sending an email notification to your registered email address or displaying a prominent notice on the Platform.

Your continued use of the exwin Platform after the effective date of any Privacy Policy changes constitutes acceptance of the updated Policy. We encourage you to review this page periodically to stay informed about how we protect your personal information.

13. Children's Privacy

The exwin Platform is intended exclusively for individuals who are 21 years of age or older, as required by Philippine gaming regulations. We do not knowingly collect, use, or solicit personal information from individuals under the age of 21. If we become aware that we have collected personal information from a minor without proper parental consent, we will take immediate steps to delete such information from our systems.

Parents or legal guardians who believe that a minor has provided personal information to exwin should contact us immediately using the information provided in Section 11.

14. International Data Transfers

While exwin primarily operates within the Philippines and stores data on servers located in jurisdictions with adequate data protection standards, certain service providers may process your information in other countries. When we transfer personal information internationally, we implement appropriate safeguards such as standard contractual clauses, data processing agreements, and security measures to ensure your information receives equivalent protection to that provided under Philippine law.

15. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations. Any disputes arising from this Policy shall be subject to the exclusive jurisdiction of the courts of the Philippines.