gwin Privacy Policy

When you register an account on gwin, we collect basic personal details including your full name, date of birth, email address, and mobile number. During the identity verification process required under Philippine regulations, we may also request a government-issued ID and a selfie for Know Your Customer compliance. When you make deposits or withdrawals, we collect transaction data such as payment method details, amounts, and timestamps — but we never store full card numbers or full bank account credentials on our servers. We also collect technical data automatically when you visit gwin.run, including your IP address, device type, browser version, and session activity logs, which help us keep the platform secure and running smoothly. All data collection is limited to what is genuinely needed to operate the platform, verify your identity, process payments, and comply with applicable Philippine laws.

gwin uses your personal information primarily to create and manage your account, process deposits and withdrawals in Philippine pesos, and verify your identity in line with our legal obligations. We also use your data to detect and prevent fraud, money laundering, and other prohibited activities that could harm you or other players on the platform. Your contact details may be used to send you important account notifications, security alerts, and updates about changes to our Terms or this Privacy Policy — we do not send unsolicited marketing messages without your consent. Aggregated and anonymised usage data helps us improve the platform experience, fix technical issues, and understand how Filipino players interactwith our games and features. We will never sell, rent, or trade your personal data to third parties for their own marketing purposes — your information stays within gwin and its trusted service providers who are contractually bound to protect it.

gwin shares your personal data only with third parties that are essential to operating the platform and fulfilling our legal obligations. These include licensed payment processors that handle PHP deposits and withdrawals, identity verification providers that assist with KYC compliance, and cloud infrastructure partners that host our platform securely. All third-party service providers are required to handle your data in accordance with applicable Philippine data protection laws and are prohibited from using your information for any purpose beyond the specific service they provide to us. We may also disclose your data to Philippine regulatory authorities, law enforcement agencies, or courts when we are legally required to do so — for example, in response to a valid court order or regulatory investigation. We do not share your data with advertisers, data brokers, or any unrelated commercial entities. Any future changes to our data-sharing practices will be reflected in an updated version of this Privacy Policy, and you will be notified of material changes.

We take the security of your personal information seriously and apply a range of technical and organisational measures to protect it from unauthorised access, loss, or misuse. All data transmitted between your device and gwin.run is encrypted using TLS (Transport Layer Security), and sensitive account data is stored using strong encryption at rest. Access to personal data within our organisation is strictly limited to staff who need it to perform their job functions, and all such access is logged and audited. We conduct regular security reviews and vulnerability assessments to identify and address potential risks before they can affect our players. In the unlikely event of a data breach that poses a risk to your rights, we will notify affected users and the relevant Philippine authorities in accordance with the requirements of the Data Privacy Act of 2012. We encourage you to also take steps to protect your own account — use a strong, unique password and never share your login credentials with anyone.

Under the Philippine Data Privacy Act of 2012 and its implementing rules, you have a number of rights regarding your personal data held by gwin. You have the right to access a copy of the personal information we hold about you, and to request corrections if any details are inaccurate or out of date. You may also request the deletion of your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose it was collected, subject to our legal retention obligations. If you believe your data has been processed unlawfully, you have the right to object to that processing and to lodge a complaint with the National Privacy Commission of the Philippines. You can also request that we restrict the processing of your data while a dispute is being resolved. To exercise any of these rights, please contact us at [email protected] with your full name and account details, and we will respond within the timeframe required by applicable law.

We retain your personal data for as long as your account is active and for a period thereafter as required by Philippine law, including anti-money laundering regulations that mandate the retention of transaction records for a minimum of five years. Once the applicable retention period has expired and there is no legal basis to continue holding your data, we securely delete or anonymise it. Regarding cookies, gwin.run uses a small number of essential cookies that are strictly necessary for the platform to function — these include session cookies that keep you logged in and security cookies that help protect against fraud. We do not use third-party advertising or tracking cookies. You can manage cookie preferences through your browser settings, though disabling essential cookies may affect your ability to use certain features of the platform. For any questions about how long we keep specific types of data, or about our cookie practices, please reach out to us at [email protected].