rgwin Privacy Policy

1 Scope & Application

This Privacy Policy applies to all personal data collected and processed by rgwin in connection with your use of the rgwin Platform accessible at rgwin.cam, including the games lobby, account registration system, wallet and payment features, customer support channels, and any related communications.

This Policy applies to registered Players, unregistered visitors who browse the Platform, and any individual who contacts rgwin through any support channel. It should be read together with rgwin's Terms & Conditions and Responsible Gaming Policy, both of which are available on this Platform.

2 Data Controller Details

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, the data controller responsible for your personal data is the operator of the rgwin Platform, operating under a valid PAGCOR license and accessible at rgwin.cam.

Inquiries regarding data privacy, requests to exercise data subject rights, and complaints relating to rgwin's data processing practices should be directed to rgwin's designated Data Protection Officer (DPO) via the contact details set out in Section 14 of this Policy.

3 Personal Data We Collect

rgwin collects the following categories of personal data, grouped by the context in which they arise:

3.1 Registration & Identity Data

• Full legal name as it appears on your Philippine government-issued identification document
• Date of birth (for mandatory 21+ age verification)
• Philippine residential address
• Active Philippine mobile number
• Email address
• Government ID type and reference number (SSS, UMID, PhilHealth ID, Driver's License, or Philippine Passport)
• Scanned or photographed image of government-issued identification document, submitted for KYC purposes

3.2 Financial & Transaction Data

• GCash-registered mobile number and account reference
• PayMaya account reference
• Bank account name, bank name (BPI, BDO, Metrobank), and account number for withdrawal purposes
• Card type (Visa or Mastercard) and masked card number (rgwin does not store full card numbers)
• Deposit history, withdrawal history, and transaction timestamps
• Real Money Balance and Bonus Balance records

3.3 Gaming Activity Data

• Game sessions participated in, including game title, session start and end times, and wager amounts
• Win and loss records
• Responsible gaming tool configurations set by the Player (deposit limits, cool-off periods, self-exclusion status)
• Bonus redemption and wagering requirement progress records

3.4 Technical & Device Data

• IP address at time of login and during active sessions
• Device type (Android handset, iOS device, desktop browser)
• Browser type and version
• Operating system
• Session duration and page interaction data

3.5 Communications Data

• Support chat transcripts
• Email correspondence with rgwin's support team
• Records of promotional communications sent to your registered email or mobile number

4 How We Collect Your Data

rgwin collects personal data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact support, or interact with any feature of the Platform that requires you to provide information.
• Automatically through the Platform — session data, IP address, device type, and page interaction data are collected automatically via server logs and first-party analytics tools as you browse and use the Platform.
• From payment service providers — when you initiate a GCash, PayMaya, or bank transfer transaction, rgwin receives confirmation data from the relevant payment processor to verify and record the transaction against your Account.
• From third-party verification services — rgwin may use third-party identity verification providers to assist with KYC processes. These providers are bound by data processing agreements consistent with the Data Privacy Act.

5 Purposes & Legal Bases for Processing

The table below sets out the purposes for which rgwin processes your personal data and the corresponding legal basis under the Data Privacy Act of 2012:

6 Disclosure to Third Parties

rgwin does not sell, rent, or trade personal data to third parties. rgwin may disclose personal data to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: GCash (G-Xchange, Inc.), PayMaya Philippines Inc., BPI, BDO, Metrobank, and card processing partners require certain transactional data to process deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party providers engaged to assist with identity verification during registration and ongoing KYC reviews. These providers operate under data processing agreements with rgwin.
• PAGCOR and Philippine Regulatory Authorities: rgwin is legally required to submit certain player data and transaction reports to PAGCOR and, where applicable, to the Anti-Money Laundering Council (AMLC) under Republic Act No. 9160 as amended.
• Technology and Platform Service Providers: Cloud hosting, game content, and platform infrastructure providers who process data on rgwin's behalf under contractual data processing terms. These providers do not have independent access rights to use your data for their own purposes.
• Law Enforcement and Courts: Where required by a lawful order, court judgment, or legal process under Philippine law.

7 International Data Transfers

rgwin's primary data processing infrastructure is located within the Philippines or in jurisdictions where rgwin's technology partners maintain data centres meeting internationally recognized security standards. Where personal data is transferred outside the Philippines - for example, to a cloud hosting provider or game content supplier operating data centres in another country - rgwin ensures that such transfers are made only to recipients that provide an adequate level of data protection through one or more of the following mechanisms:

• A data processing agreement incorporating standard contractual clauses approved by the National Privacy Commission
• The recipient's adherence to binding corporate rules or equivalent internationally recognized privacy frameworks
• A determination by the National Privacy Commission that the recipient country provides adequate protection

You may request further information about international data transfer safeguards applicable to your data by contacting rgwin's Data Protection Officer at the address set out in Section 14.

8 Data Retention

rgwin retains personal data only for as long as is necessary for the purposes for which it was collected, subject to minimum retention periods prescribed by applicable Philippine law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your Account relationship with rgwin and for a minimum of five (5) years following Account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Transaction and Financial Data: Retained for a minimum of five (5) years from the date of each transaction, in accordance with the Anti-Money Laundering Act and Bureau of Internal Revenue requirements.
• Gaming Activity Data: Retained for a minimum of three (3) years from the relevant session date, for responsible gaming compliance and dispute resolution purposes.
• Support Communications: Retained for two (2) years from the date of each interaction, for quality assurance and dispute resolution purposes.
• Technical and Device Data: Retained for up to twelve (12) months from collection, unless retention is required for an ongoing investigation or legal matter.

Upon expiry of the applicable retention period, rgwin will securely delete or anonymize personal data in a manner that prevents reconstruction of the individual's identity.

9 Cookies & Tracking Technologies

The rgwin Platform uses cookies and similar tracking technologies to operate core Platform functions, recognize returning users, maintain session security, and gather aggregated analytics on Platform performance. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that maintain your logged-in state. These cannot be disabled without rendering the Platform inoperable.
• Functional Cookies: Remember your preferences such as language settings and game lobby filter configurations to improve your experience on return visits.
• Analytics Cookies: Collect aggregated, anonymized data about how visitors navigate the Platform. This data is used to improve Platform design and performance. rgwin uses first-party analytics only and does not employ third-party behavioral tracking cookies for advertising purposes.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into the Platform. rgwin does not use cross-site tracking cookies or sell browsing data to advertising networks.

10 Security Measures

rgwin implements a layered security architecture to protect personal data from unauthorized access, disclosure, alteration, and destruction. Implemented measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and rgwin's servers
• Industry-standard password hashing using bcrypt or equivalent algorithms - rgwin never stores passwords in plaintext form
• Optional two-factor authentication (2FA) via your registered Philippine mobile number, adding an additional login verification layer
• Network-level firewalls, intrusion detection systems, and access controls restricting internal staff access to personal data on a need-to-know basis
• Regular penetration testing and security audits of the Platform's infrastructure
• Login anomaly detection that flags unusual activity such as unrecognized devices or geographic anomalies and triggers security alerts to the Account holder
• Segregation of player funds in accounts separate from rgwin's operational accounts

11 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to the personal data rgwin holds about you. rgwin will respond to all verified data subject requests within fifteen (15) business days of receipt:

12 Children & Minors

The rgwin Platform is strictly restricted to individuals who are 21 years of age or older, as required by PAGCOR's minimum age requirements for casino-style gaming in the Philippines. rgwin does not knowingly collect personal data from individuals below the age of 21.

If you are a parent or guardian and believe that a minor has accessed the rgwin Platform, please contact our support team immediately via live chat. We take underage access seriously and will act promptly on any such report.

13 Changes to This Privacy Policy

rgwin reserves the right to update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be communicated to registered Players via the email address or mobile number registered on their Account with not less than seven (7) days' advance notice, unless an immediate change is required by law or regulatory directive.

The "Last Updated" date at the top of this Policy will be revised with each update. Your continued use of the rgwin Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. We encourage you to review this Policy periodically to stay informed about how rgwin protects your personal data.

14 Contact & Complaints

For any questions about this Privacy Policy, to exercise your data subject rights, or to raise a complaint regarding rgwin's data processing practices, please contact our Data Protection Officer:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform interface - the fastest channel for urgent data concerns
• Email: [email protected] — for the attention of the Data Protection Officer
• Response Commitment: rgwin acknowledges all data privacy requests within five (5) business days and provides a substantive response within fifteen (15) business days

If you are not satisfied with rgwin's response to your complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines — the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012. Information on the NPC's complaint procedure is available on the NPC's official government website.

You may also raise concerns relating to PAGCOR-licensed operator conduct with PAGCOR directly through their player protection channels.