pjwin Privacy Policy

Introduction

pjwin ("we," "us," "our," "the Platform") operates the online casino and sports betting service accessible at pjwin.vip. In the course of providing this service to players across the Philippines — from Metro Manila and Quezon City to Cebu, Davao, Iloilo, and beyond — pjwin collects and processes certain personal data about its players and website visitors.

This Privacy Policy ("Policy") sets out, in plain and transparent terms, what personal data pjwin collects, the purposes for which it is collected and processed, the lawful bases on which processing rests, how long data is retained, who data may be shared with, and the rights available to individuals whose data we hold. This Policy applies to all personal data processed by pjwin in connection with the pjwin.vip platform and all related services.

This Policy is to be read alongside the pjwin Terms and Conditions (available at pjwin.vip/terms-conditions), which together constitute the full agreement governing your use of the platform. Terms not defined in this Policy have the meanings given to them in the Terms and Conditions.

Data Controller

For the purposes of applicable data protection legislation, pjwin is the data controller in respect of personal data collected through the pjwin.vip platform. As data controller, pjwin determines the purposes and means by which personal data is processed and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

For any queries regarding this Privacy Policy, the exercise of your data rights, or pjwin's data practices generally, you may contact our Data Privacy team at: [email protected] (please include "Privacy Query" in the subject line of your message).

Data We Collect

3.1 Registration and Account Data

When you register for a pjwin account, we collect the following information:

• Full legal name (as it appears on your government-issued identification)
• Date of birth (for age verification — players must be 21 years or older)
• Philippine mobile number (for account verification and OTP delivery)
• Chosen username and encrypted password
• City or region of residence within the Philippines
• Email address (where provided during registration or added subsequently)

3.2 Identity Verification (KYC) Data

For the purposes of Know Your Customer (KYC) compliance, prior to processing any withdrawal, we collect:

• A copy or photograph of a valid Philippine government-issued photo ID (accepted documents: PhilSys National ID, UMID, passport, driver's license, SSS card, PhilHealth ID, or voter's ID)
• A live selfie or photograph for identity matching against the submitted ID
• Proof of address documents where required by enhanced due diligence procedures

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers
• GCash or Maya account references (for e-wallet transactions)
• Bank account details provided for withdrawal processing (bank name, account holder name, account number)
• Wagering history, game play records, and win/loss data
• Bonus claims and wagering requirement completion records

3.4 Technical and Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type and version
• Session timestamps, duration, and navigation patterns within the platform
• Error logs and technical event data for platform maintenance and improvement

3.5 Communications Data

• Records of customer support interactions conducted via live chat or email
• Feedback, complaints, and dispute correspondence
• Marketing communication preferences and opt-out records

How We Collect Data

4.1 Data Provided Directly by You

The majority of personal data held by pjwin is provided directly by you during the registration process, KYC verification, cashier interactions, and customer support communications. This includes all information submitted via account forms, chat interfaces, and document upload facilities on the platform.

4.2 Data Collected Automatically

When you access pjwin.vip, certain technical data is collected automatically through server logs, cookies, and similar technologies. This includes your IP address, device information, browser type, and session data. This collection occurs each time you visit or interact with the platform, whether or not you are logged into an account.

4.3 Data from Third-Party Services

Where you use third-party payment services (such as GCash or Maya) to transact with pjwin, those services may share transaction confirmation data with pjwin for reconciliation and fraud prevention purposes. pjwin does not receive your full GCash or Maya account credentials — only the information necessary to verify and record the transaction.

How We Use Your Data

pjwin processes personal data for the following defined purposes:

5.1 Marketing Communications

pjwin may send promotional communications (including details of bonuses, new games, and special offers) to players who have opted in to receive such communications. You may withdraw consent for marketing communications at any time by contacting support at [email protected] or by following the unsubscribe instructions included in any marketing message. Withdrawal of marketing consent does not affect your ability to use the platform or receive transactional communications relating to your account.

Legal Bases for Processing

pjwin processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill the agreement between pjwin and a registered player — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, KYC requirements, and regulatory reporting.
• Legitimate interests: Processing carried out to pursue pjwin's legitimate interests, including fraud prevention, platform security, responsible gaming enforcement, and service improvement, where these interests are not overridden by the rights and interests of the individual player.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — in particular, the sending of direct marketing communications. Consent may be withdrawn at any time.

Data Sharing

7.1 Service Providers

pjwin engages third-party service providers to support platform operations, including payment processors (GCash, Maya, BPI, BDO, Metrobank), game content providers, identity verification services, cloud infrastructure providers, and customer support tooling. These service providers are granted access to personal data only to the extent necessary to perform their contracted services and are bound by data processing agreements requiring them to maintain the confidentiality and security of all data entrusted to them. Service providers are prohibited from using your data for their own independent commercial purposes.

7.2 Regulatory and Law Enforcement Authorities

pjwin may disclose personal data to relevant regulatory bodies, law enforcement agencies, or government authorities where required or permitted to do so by law — for example, in connection with anti-money laundering investigations, court orders, or lawful regulatory inquiries. Such disclosures are made only to the extent required by applicable legal obligation.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of pjwin's business, personal data held by pjwin may form part of the assets transferred to the acquiring entity. In such circumstances, affected players will be notified prior to their data being transferred and subjected to a materially different privacy policy.

Data Retention

pjwin retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and for as long as required by applicable legal and regulatory obligations. The following retention guidelines apply:

• Account and registration data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following the date of verification, or longer where required by applicable regulatory obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for a maximum of three (3) years following the resolution of the relevant support interaction.
• Technical and usage data: Retained for a maximum of two (2) years from the date of collection.
• Marketing preference data: Retained until consent is withdrawn, plus a reasonable period to confirm and record the withdrawal of consent.

At the end of the applicable retention period, personal data is securely deleted, destroyed, or anonymized in a manner that ensures it can no longer be associated with an identifiable individual.

Your Rights

As an individual whose personal data is processed by pjwin, you have the following rights, exercisable by contacting us at [email protected]:

• Right of Access: You have the right to request a copy of the personal data pjwin holds about you, including information about the purposes for which it is processed and the categories of third parties with whom it has been shared.
• Right of Rectification: You have the right to request the correction of any personal data held by pjwin that is inaccurate or incomplete. For example, if your name is misspelled in your account record, you may request a correction.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to pjwin's legal obligations — for example, data retained for AML compliance purposes cannot be deleted before the end of the mandatory retention period.
• Right to Restrict Processing: You may request that pjwin restrict the processing of your personal data in certain defined circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: You have the right to receive personal data you have provided to pjwin in a structured, commonly used, machine-readable format, and to request that this data be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of pjwin's legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Data Security

10.1 Technical Measures

pjwin implements technical security measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include: TLS/SSL encryption for all data in transit between your device and pjwin's servers; AES-256 encryption for data at rest on pjwin's infrastructure; role-based access controls limiting employee access to personal data on a need-to-know basis; and regular penetration testing and security audits conducted by qualified security professionals.

10.2 Organizational Measures

Beyond technical controls, pjwin maintains organizational security measures including employee data protection training, internal data handling policies and procedures, vendor due diligence for all third-party service providers with access to personal data, and an incident response plan for managing potential data breaches.

10.3 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, pjwin will notify affected players and, where legally required, the relevant supervisory authority within the timeframes prescribed by applicable law. Notifications will include the nature of the breach, the categories and approximate number of individuals and records affected, and the measures taken or proposed to address the breach and mitigate its potential adverse effects.

10.4 Your Security Responsibilities

While pjwin maintains robust security measures, you are also responsible for the security of your account. You should use a strong, unique password for your pjwin account, enable two-factor authentication (2FA), avoid accessing your account over unsecured public Wi-Fi networks, and notify pjwin immediately if you suspect unauthorized access to your account.

Cookies & Tracking Technologies

11.1 What Are Cookies

Cookies are small text files stored on your device by your web browser when you visit a website. pjwin uses cookies and similar technologies (including local storage and session tokens) on the pjwin.vip platform for the purposes described below.

11.2 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the operation of the platform and cannot be disabled. They include session authentication tokens, CSRF protection tokens, and other security-related cookies necessary to keep you securely logged into your account.
• Functional Cookies: These cookies remember your preferences (such as language settings, game lobby filters, and "Remember Me" login state) to provide a more personalized experience. Disabling these cookies may affect certain platform features.
• Analytics Cookies: pjwin uses analytics cookies to collect aggregated, anonymized data about how players navigate and use the platform, including which game categories are visited most frequently and typical session durations. This data is used solely for platform improvement purposes.
• Marketing Cookies: Where you have consented to marketing communications, marketing cookies may be used to deliver relevant promotional content. You may withdraw consent for marketing cookies at any time.

11.3 Managing Cookies

You can control cookie settings through your browser's privacy or settings menu. Most browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from accessing pjwin's authenticated services. pjwin's cookie consent interface allows granular control over non-essential cookie categories.

Minors

pjwin's platform is strictly intended for individuals who are 21 years of age or older. pjwin does not knowingly collect or process personal data from individuals under the age of 21. If pjwin becomes aware that personal data has been collected from an individual under 21, that data will be deleted as quickly as practicable, and the associated account will be permanently closed.

If you are a parent or guardian and believe that a minor in your care has submitted personal data to pjwin or accessed the platform without authorization, please contact pjwin immediately at [email protected] so that we may take prompt action. We take underage access very seriously and will investigate all reports of this nature.

International Data Transfers

pjwin's operations serve Filipino players from its platform, and data is primarily processed in data centers serving the Philippine market. Where pjwin engages service providers — such as game content providers or cloud infrastructure providers — whose operations are located in other countries, personal data may be transferred internationally.

When personal data is transferred outside the Philippines, pjwin ensures that appropriate safeguards are in place to protect the data, including contractual clauses in service provider agreements that require the receiving party to protect personal data to a standard consistent with the principles set out in this Policy. pjwin will not transfer personal data to jurisdictions where adequate data protection standards cannot be assured.

Policy Changes

pjwin reserves the right to update or revise this Privacy Policy at any time. When material changes are made to this Policy, pjwin will notify registered players via the contact information on file (registered mobile number or account notification) and will publish the updated Policy on pjwin.vip/privacy-policy with a revised effective date.

Your continued use of the pjwin platform following the effective date of any revision constitutes your acknowledgment of the changes and your agreement to be bound by the updated Policy. If you do not agree with any revision, you must cease using the platform and contact support to request account closure.

We encourage you to review this Policy periodically. The current version is always accessible at pjwin.vip/privacy-policy. The date at the top of this document identifies the current revision.

Contact Us

For any queries, concerns, or requests relating to this Privacy Policy or pjwin's data practices, please contact our Data Privacy team through the following channels: