popwin Privacy Policy

1. Introduction

popwin is committed to protecting the privacy and personal data of all registered Players and website visitors. As a Philippine-focused online gaming platform, popwin processes personal data in accordance with applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as PAGCOR-aligned gaming compliance requirements.

This Policy describes popwin's practices regarding the collection, use, storage, sharing, and protection of your personal information. It applies to all interactions with the popwin platform, including account registration, deposits, gameplay, withdrawals, customer support, and marketing communications.

2. Data Controller

popwin operates the platform at popwin.asia and is the data controller responsible for personal data collected through the Platform. For all data privacy enquiries, requests, or complaints, contact the popwin Data Privacy Officer via the support channel listed in Section 14 of this Policy.

3. Personal Data We Collect

popwin collects the following categories of personal data:

popwin does not collect sensitive personal information beyond what is required for identity verification and regulatory compliance (e.g., government ID details). popwin does not collect biometric data, political affiliation, or religious information.

4. How We Collect Your Data

popwin collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing verification, making deposits or withdrawals, or contacting support.
• Automated Collection: Technical data collected automatically when you visit popwin.asia or use the platform, including via cookies, log files, and session tracking technologies.
• Third-Party Sources: Identity verification data confirmed through KYC service providers; payment confirmation data from GCash, Maya, BPI, BDO, and QR Ph processing systems; fraud prevention data from security service providers.

5. How We Use Your Personal Data

popwin uses your personal data for the following purposes:

• Account Management: To create, maintain, and operate your popwin account, including authentication and session management.
• Identity Verification (KYC): To verify that you meet the 21+ age requirement and to confirm your identity before processing withdrawals, as required by PAGCOR-aligned compliance standards.
• Payment Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, and QR Ph, and to maintain accurate financial records for each account.
• Gaming Operations: To deliver games, record game results, calculate winnings, and maintain complete game logs for dispute resolution purposes.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, to enforce self-imposed responsible gaming limits, and to comply with popwin's responsible gaming obligations.
• Anti-Money Laundering (AML) Compliance: To monitor transactions for unusual patterns consistent with money laundering or fraud, and to report to regulatory authorities where legally required.
• Customer Support: To respond to your enquiries, resolve disputes, and improve service quality using communication records.
• Platform Security: To detect and prevent fraud, account compromise, prohibited conduct, and technical attacks against the popwin platform.
• Marketing Communications: To send you promotional offers, new game announcements, and platform updates — only where you have consented or where we have a legitimate interest, and always with a clear opt-out mechanism.
• Legal Compliance: To comply with applicable Philippine law, regulatory requirements, court orders, and lawful requests from government authorities.

6. Legal Basis for Processing

popwin processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our obligations under the popwin Terms & Conditions, including account operation, game delivery, and payment processing.
• Legal Obligation: Processing required to comply with Philippine law, regulatory requirements, AML obligations, and PAGCOR-aligned standards.
• Legitimate Interests: Processing for fraud prevention, platform security, and improving our services, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given consent. You may withdraw consent at any time.

7. Data Sharing & Disclosure

7.1 popwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

7.2 popwin shares personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Service Providers: GCash (GXchange Inc.), Maya (PayMaya Philippines Inc.), BPI, BDO, and QR Ph — for processing deposits and withdrawals.
• KYC / Identity Verification Providers: Third-party identity verification services used to confirm the identity and age of Players before withdrawals are processed.
• Game Providers: Licensed game software providers whose titles are available on the popwin platform. Game session data is shared to enable gameplay and RNG certification audits.
• Fraud Prevention & Security Services: Third-party services used to detect and prevent account fraud, money laundering, and prohibited conduct.
• Regulatory Authorities: PAGCOR and other competent Philippine government authorities, where disclosure is required by law, court order, or regulatory direction.
• Legal & Professional Advisers: Lawyers, accountants, and auditors engaged by popwin under strict confidentiality obligations.

7.3 Where popwin engages third-party processors, we require contractual commitments from those processors to protect your personal data in a manner consistent with this Policy and applicable Philippine data protection law.

8. Cookies & Tracking Technologies

8.1 popwin uses cookies and similar tracking technologies to operate the platform. The types of cookies used are as follows:

• Essential Cookies: Required for the platform to function, including session authentication, security tokens, and login state management. These cannot be disabled without preventing you from using the platform.
• Performance Cookies: Collect aggregated, anonymised data about how Players use the platform (e.g., which games are most played, average session length) to improve platform performance. No individual Player is identified.
• Security Cookies: Used to detect and prevent fraud, bot activity, and account compromise attempts.

8.2 popwin does not use third-party advertising or cross-site tracking cookies. Your popwin browsing activity is not shared with advertising networks.

8.3 You may manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to or using the popwin platform.

9. Data Retention

9.1 popwin retains your personal data for as long as your Account is active and for a period of five (5) years following Account closure, in accordance with Philippine financial record-keeping requirements and AML compliance obligations.

9.2 Game logs and transaction records are retained for a minimum of five (5) years from the date of the relevant transaction or game session.

9.3 KYC and identity verification documents are retained for the period required by applicable Philippine regulations, which is generally five (5) years from the date of verification.

9.4 Where you have consented to marketing communications and later withdraw that consent, popwin will retain a record of your opt-out to ensure we do not contact you again for marketing purposes.

10. Data Security

10.1 popwin implements the following technical and organisational security measures to protect your personal data:

• SSL/TLS encryption for all data transmitted between your device and the popwin platform;
• Encrypted storage for sensitive personal data and financial records at rest;
• Role-based access controls limiting staff access to personal data to those with a documented operational need;
• Two-factor authentication available for all Player accounts;
• Regular security audits and penetration testing of the popwin platform;
• Incident response procedures for detecting, investigating, and reporting data breaches where required by law.

10.2 In the event of a personal data breach that is likely to result in harm to affected Players, popwin will notify the National Privacy Commission (NPC) and affected Players in accordance with the Data Privacy Act of 2012 and its Implementing Rules.

11. Your Data Privacy Rights

Under the Data Privacy Act of 2012 (RA 10173), registered Players and website visitors have the following rights regarding their personal data held by popwin:

• Right to be Informed: The right to know what personal data popwin collects and how it is used — as set out in this Policy.
• Right to Access: The right to request a copy of the personal data popwin holds about you.
• Right to Rectification: The right to correct inaccurate or incomplete personal data in your Account.
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data, subject to our legal retention obligations (e.g., AML record-keeping requirements).
• Right to Object: The right to object to the processing of your personal data where processing is based on legitimate interests or consent, including the right to opt out of marketing communications at any time.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format, where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, contact popwin's Data Privacy Officer using the details in Section 14. Requests will be acknowledged within 3 business days and resolved within 30 days, or within such longer period as permitted by law where the request is complex.

12. Children & Minors

12.1 popwin does not knowingly collect personal data from individuals under 21 years of age. The platform is strictly restricted to adults aged 21 and above in accordance with PAGCOR-aligned Philippine gaming standards.

12.2 If popwin becomes aware that a registered Account belongs to a person under 21 years of age, the Account will be immediately closed, any funds held will be reviewed in accordance with the Terms & Conditions, and any personal data collected will be deleted as soon as practicable, subject to mandatory legal retention obligations.

12.3 If you believe a minor has registered on the popwin platform, please contact popwin support immediately at [email protected].

13. Changes to This Privacy Policy

13.1 popwin may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform operations. Material changes will be communicated to registered Players via in-platform notification or email to the registered address at least seven (7) days before the revised Policy takes effect.

13.2 The date of the most recent revision is displayed at the top of this Policy. Your continued use of the popwin platform following notification of changes constitutes your acknowledgement of the revised Policy.

14. Contact & Complaints

14.1 For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data by popwin, contact our Data Privacy Officer:

• Live Chat: Available 24/7 via the popwin platform — fastest response channel
• Email: [email protected]
• Subject Line: "Data Privacy Request – [Your Registered Name]"

14.2 popwin aims to resolve all data privacy requests within 30 days. If you are not satisfied with popwin's response, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC).