popwin Privacy Policy

popwin ("popwin," "we," "us," or "our") is committed to protecting the privacy and personal data of all players who register and use the popwin platform at popwin.bio. This Privacy Policy applies to all personal information collected through the popwin website, account registration process, payment transactions, customer support interactions, and any other service provided by popwin.

This Policy is designed to comply with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, which is the primary personal data protection legislation governing organizations processing the personal information of Philippine residents. popwin also observes the guidelines and issuances of the National Privacy Commission (NPC) of the Philippines.

By registering a popwin account or continuing to use the popwin platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, popwin acts as the Personal Information Controller in respect of the personal data of registered players. This means popwin determines the purposes for which and the manner in which your personal data is collected, processed, and stored.

In circumstances where popwin engages third-party service providers (for example, game providers, payment processors, or identity verification services) who process personal data on popwin's behalf, those parties act as Personal Information Processors and are contractually obligated to process personal data only as directed by popwin and in compliance with applicable Philippine data protection law.

All data protection queries, requests to exercise data subject rights, and privacy complaints should be addressed to the popwin Data Protection Officer at [email protected].

popwin collects only the personal data that is necessary for the operation of your account, fulfillment of regulatory obligations, and delivery of our services. The categories of personal data we collect include:

popwin does not collect special categories of sensitive personal data (such as health information, religious beliefs, or political opinions) except where expressly required for responsible gaming obligations or required by law.

popwin collects personal data through the following means:

• Direct Submission: Information you provide when registering a popwin account, completing KYC verification, submitting a withdrawal request, or contacting customer support.
• Automated Technical Collection: Data collected automatically when you access the popwin platform, including IP addresses, device identifiers, browser information, and session activity logs through server logs and analytics tools.
• Cookies and Similar Technologies: popwin uses cookies and similar tracking technologies to collect data about your browsing behavior on the popwin platform. See Section 10 for full details.
• Payment Processors: When you deposit or withdraw funds, popwin's integrated payment partners (GCash, Maya, BPI, BDO, and others) may provide popwin with transaction reference data necessary to confirm and process your payment.
• Third-Party Identity Verification: Where popwin uses a third-party KYC verification service, that service may provide popwin with the verified result and associated identity confirmation data.
• Social Login: If you choose to register or log in to popwin using Facebook, popwin receives only the basic profile information authorized by Facebook's OAuth process — typically your name and profile photo. popwin does not access your Facebook posts, messages, or friend lists.

popwin processes your personal data for the following purposes:

• Account Creation and Management: To create, verify, maintain, and administer your popwin account, including processing your login credentials and managing account settings.
• Service Delivery: To provide access to games, process wagers and game results, manage your account balance, and deliver the full popwin platform experience.
• Payment Processing: To process deposits and withdrawals through your chosen payment method and maintain accurate financial records of all transactions.
• Identity Verification and AML Compliance: To fulfill our obligations under Philippine anti-money laundering laws and PAGCOR regulations, including verifying your identity, detecting suspicious transaction patterns, and reporting to regulatory authorities where required by law.
• Age Verification: To confirm that you meet the mandatory minimum age of 21 years required by PAGCOR regulations for online gaming participation in the Philippines.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling, enforce responsible gaming limits set by the player or by regulatory directive, and administer self-exclusion requests.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account compromise, collusion, and unauthorized access to the popwin platform.
• Customer Support: To respond to your queries, process complaints, and resolve disputes relating to your popwin account or gaming activity.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your consent to receive such communications. You may opt out at any time.
• Platform Improvement: To analyze aggregated usage data for the purpose of improving the popwin platform, fixing technical issues, and enhancing user experience.
• Legal and Regulatory Compliance: To fulfill all legal obligations imposed on popwin under Philippine law, including tax reporting, regulatory filings, and cooperation with lawful authority requests.

Under the Data Privacy Act of 2012, popwin processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and popwin (i.e., the Terms & Conditions you accepted at registration) — including providing games, processing payments, and managing your account.
• Legal Obligation: Processing is necessary for popwin to comply with its legal obligations under Philippine law, including AML laws, PAGCOR regulatory requirements, and tax obligations.
• Legitimate Interests: Processing is necessary for the legitimate interests of popwin — including fraud prevention, platform security, responsible gaming monitoring, and platform improvement — where those interests are not overridden by your data protection rights.
• Consent: Where popwin processes your data for optional purposes such as marketing communications, popwin relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

popwin does not sell, rent, or trade your personal information to third parties for their own commercial purposes. popwin shares personal data only in the following limited circumstances:

• Payment Service Providers: popwin shares necessary financial data with GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other payment processors solely to facilitate the processing of your deposits and withdrawals.
• Game Providers: popwin's integrated game providers (such as JILI, PG Soft, Pragmatic Play, and CQ9) may receive a session token and technical identifiers necessary to authenticate your gameplay session. Game providers do not receive your full identity or financial details.
• Identity Verification Partners: Where popwin uses a third-party KYC service, that provider receives the documents and information necessary to complete identity verification. These providers are contractually bound to data protection obligations.
• Regulatory and Law Enforcement Authorities: popwin may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), or other competent Philippine authorities where required by law or valid legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of popwin's assets, your personal data may be transferred to the acquiring entity, subject to the same data protection obligations as set out in this Policy.

All third parties with whom popwin shares personal data are required by contract to process that data lawfully, to maintain appropriate security standards, and to use the data only for the specified purpose for which it was shared.

popwin retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by Philippine law or regulatory directive.

• Active Accounts: Personal data is retained for the duration of your active relationship with popwin — from account creation until account closure.
• Post-Closure Retention: Following account closure, popwin retains identity, financial, and transaction records for a minimum of five (5) years to comply with AML reporting obligations and PAGCOR record-keeping requirements.
• Customer Support Records: Support interaction records are retained for up to three (3) years from the date of the interaction for dispute resolution and quality assurance purposes.
• Marketing Data: Data used for marketing communications is retained until you withdraw consent or request removal. Upon withdrawal of consent, marketing-specific data is deleted within thirty (30) days.
• Technical Logs: Server logs and technical access data are retained for up to twelve (12) months for security and fraud investigation purposes.

When personal data is no longer required, popwin will securely delete or anonymize it so that it can no longer be associated with an individual. Anonymized or aggregated data that cannot identify any individual may be retained indefinitely for statistical and analytical purposes.

popwin implements technical and organizational measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-Bit SSL Encryption: All data transmitted between your device and the popwin platform is encrypted using 256-bit SSL/TLS protocols, ensuring that your credentials, payment details, and personal information cannot be intercepted in transit.
• Data-at-Rest Encryption: Sensitive personal data stored in popwin's databases — including identity documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within popwin's internal systems is restricted to authorized personnel on a strict need-to-know basis. All internal access is logged and audited.
• Two-Factor Authentication: popwin offers two-factor authentication (2FA) to all registered players to protect account access. Players are encouraged to activate 2FA from Account Settings.
• Regular Security Audits: popwin conducts regular security assessments of its platform and infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed data breach affecting player personal data, popwin will notify affected players and the National Privacy Commission within the timeframes required by the Data Privacy Act of 2012.

The popwin platform uses cookies and similar tracking technologies to operate correctly, remember your preferences, and improve platform performance. A cookie is a small text file stored on your device by your browser when you visit a website.

Essential cookies cannot be disabled as they are required for the popwin platform to function. Functional and analytics cookies may be managed through your browser settings. Disabling non-essential cookies will not affect your ability to play games or access your account but may affect some preference-saving features.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by popwin. These rights may be exercised by contacting the popwin Data Protection Officer at [email protected].

popwin will respond to all verified data subject requests within thirty (30) days of receipt. Where a request is complex or numerous, popwin may extend this period by a further sixty (60) days with notice provided within the initial thirty-day window. popwin may request proof of identity before processing any data subject request.

popwin actively enforces its age restriction through identity verification procedures at registration and at first withdrawal. If popwin becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted from popwin's systems immediately and the associated account will be closed.

If you are a parent or guardian and believe that your child has registered on the popwin platform, please contact popwin immediately at [email protected] with the relevant account details. popwin will investigate and act promptly on all such notifications.

The popwin platform may contain references to third-party services — for example, payment gateways such as GCash and Maya that open in a separate interface when you initiate a deposit or withdrawal. When you interact with these third-party services, you are subject to their own privacy policies, which are separate from this Policy.

popwin is not responsible for the privacy practices of third-party services. Before providing personal information to any third-party service linked from or integrated with the popwin platform, you are encouraged to review that service's privacy policy independently.

popwin reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law, or improvements to our platform. The effective date at the top of this Policy will be updated whenever material changes are made.

Where changes are material, popwin will notify registered players via a notification within the platform interface or by email to the address registered on your account. Your continued use of the popwin platform after the effective date of any updated Policy constitutes your acknowledgment of the changes.

Archived versions of this Privacy Policy are available on request from [email protected].

For all privacy-related queries, requests to exercise your data subject rights, or complaints regarding popwin's handling of your personal data, please contact:

• Data Protection Officer — popwin:
  Email: [email protected]
  Please include "Privacy Request" in the subject line of your email. Responses are provided within thirty (30) days for verified requests.
• Live Chat Support:
  Available 24/7 within the popwin platform for urgent privacy matters, including account data queries and requests to withdraw marketing consent.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with popwin's response to your privacy concern.