pbwin is committed to protecting the privacy and personal data of every Filipino player who uses our platform. This Privacy Policy explains what personal information pbwin collects, how we use and protect it, who we share it with, and what rights you have under the Data Privacy Act of 2012 and related Philippine regulations. Please read this Policy carefully before registering a pbwin account or using any pbwin service.
pbwin ("pbwin," "we," "us," "our") is the operator of the online gaming platform accessible at pbwin.app. pbwin operates under PAGCOR authorization and is subject to the regulatory oversight of the Philippine Amusement and Gaming Corporation and the National Privacy Commission (NPC) of the Philippines.
For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations, pbwin acts as the Personal Information Controller ("PIC") with respect to the personal data of registered players and website visitors. As PIC, pbwin is responsible for determining the purposes and means of processing your personal information.
Scope: This Privacy Policy applies to all personal data collected through pbwin.app, including data provided during account registration, KYC verification, payment transactions, customer support interactions, gameplay activity, and website browsing sessions. It applies to all pbwin players located in the Philippines.
pbwin collects personal data that is necessary, adequate, and not excessive relative to the purposes for which it is collected and processed. The categories of personal data we collect are outlined below.
Sensitive Personal Information: Some data pbwin collects — particularly government ID documents containing biometric data, and financial account details — may constitute sensitive personal information under the DPA. pbwin applies heightened security and access controls to all such data and processes it only to the extent required by PAGCOR licensing and Philippine AML law.
pbwin collects personal data through the following channels and mechanisms:
| Collection Method | Data Collected |
|---|---|
| Account registration form | Name, date of birth, email, mobile number, residential address, password |
| KYC verification upload | Government ID scans, selfie photographs, address proof documents |
| Cashier and payment transactions | GCash/PayMaya numbers, bank account details, transaction amounts and history |
| Platform usage (automatic) | IP addresses, device/browser data, game session data, login timestamps |
| Cookies and tracking technologies | Session cookies, preference cookies, analytics identifiers |
| Customer support interactions | Live chat transcripts, email content, support ticket records |
| Third-party KYC service providers | Identity verification results, watchlist screening outcomes |
| Payment processors | Transaction confirmation references, payment status updates |
pbwin processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:
pbwin uses the personal data we collect for the following specific purposes:
pbwin does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only to the extent necessary for the purposes described in this Policy, with the following categories of recipients:
No Sale of Data: pbwin does not sell personal data to data brokers, advertising networks, or any third party for commercial profiling or targeted advertising purposes unrelated to pbwin's own services.
pbwin uses cookies and similar tracking technologies on pbwin.app to operate the platform, remember your preferences, maintain your login session, and understand how the site is used. The following categories of cookies are used:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain your login session, process transactions, enforce security controls. Required for pbwin to function. | No — essential to service delivery |
| Functional / Preference | Remember your language preference, game lobby filters, and display settings between sessions. | Yes — disabling may affect user experience |
| Analytics | Aggregated, anonymised data about page visits, click paths, and feature usage to improve platform performance. | Yes — via browser settings or cookie preferences |
| Responsible Gaming | Store session duration data for real-time session alerts and reality check pop-ups. | No — required for responsible gaming tool functionality |
You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent pbwin from operating correctly and may prevent you from accessing your account. pbwin does not use third-party advertising cookies or cross-site behavioural tracking technologies.
pbwin retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulation. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of account plus 5 years following account closure (AMLC requirement) |
| KYC documents (government ID, selfie) | Duration of account plus 5 years following account closure |
| Financial transaction records | 10 years following the transaction date (BIR and AMLC requirements) |
| Game session logs | 5 years following session date (PAGCOR audit trail requirement) |
| Customer support records | 3 years following resolution of the relevant matter |
| Self-exclusion records | Retained indefinitely to prevent circumvention of exclusion periods |
| Marketing consent records | Until consent is withdrawn, plus 1 year thereafter |
| Technical and device logs (non-identifying) | 90 days on a rolling basis |
Upon expiry of the applicable retention period, pbwin will securely delete or anonymise personal data in accordance with NPC-approved disposal methods. Data subject to an ongoing legal dispute, regulatory investigation, or law enforcement hold will be retained until that matter is fully resolved.
pbwin implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security programme includes:
While pbwin takes all reasonable steps to protect your data, no internet-based system can guarantee absolute security. You are responsible for maintaining the security of your pbwin account credentials and for notifying pbwin immediately if you suspect unauthorized access to your account.
Under the Data Privacy Act of 2012, registered pbwin players who are Philippine data subjects have the following rights with respect to their personal data held by pbwin:
You have the right to be informed whether pbwin holds personal data about you and to receive a general description of that data, the purposes for which it is processed, the legal basis for processing, and the identity of any third parties with whom it has been shared.
You may request a copy of the personal data pbwin holds about your account. Access requests will be fulfilled within a reasonable timeframe and at no cost for routine requests. pbwin may charge a reasonable fee for manifestly excessive or repetitive requests.
If any personal data held in your pbwin account is inaccurate or incomplete, you have the right to request correction. Some corrections — particularly to KYC identity data — may require you to submit updated documentary evidence for re-verification.
You may request deletion of personal data that is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. Note that pbwin cannot erase data it is legally required to retain under PAGCOR, AMLC, or BIR requirements.
You may object to pbwin processing your personal data for direct marketing purposes at any time. You may also object to processing based on pbwin's legitimate interests where your particular situation warrants it. pbwin will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
Where pbwin processes your personal data by automated means on the basis of your consent or contract performance, you may request a machine-readable copy of that data for transfer to another service provider. pbwin will provide this in a commonly used electronic format.
Where pbwin's processing of your personal data causes you damage as a result of inaccurate, false, unlawfully obtained, or unauthorized use of data, you may be entitled to compensation as provided by the Data Privacy Act of 2012. pbwin takes all such claims seriously and will investigate promptly.
If you believe pbwin has failed to comply with its obligations under the DPA, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. pbwin encourages you to contact our Data Privacy Officer first to allow us to address your concern directly before escalating to the NPC.
Exercising Your Rights: To exercise any of the above rights, please contact pbwin's Data Privacy Officer by sending a request to [email protected] with the subject line "Data Privacy Request." Please include your registered mobile number or account ID and a clear description of the right you wish to exercise. pbwin will respond within fifteen (15) business days. Identity verification may be required before processing certain requests.
pbwin's services are strictly intended for individuals who are at least twenty-one (21) years of age. pbwin does not knowingly collect personal data from any person under the age of 21. The minimum age requirement is enforced through the mandatory KYC identity verification process, which cross-checks date of birth against government-issued Philippine identification documents.
If pbwin becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated personal data will be reviewed and deleted to the extent permitted by law, and the matter will be reported to PAGCOR as required by pbwin's licensing conditions. Any balance in an underage account will be returned to the originating payment method after completion of the required compliance review.
pbwin's primary data infrastructure is located in secure data centers serving the Philippine market. However, some of pbwin's third-party technology providers, game content suppliers, and KYC service providers may operate servers or processing facilities outside the Philippines.
Where personal data is transferred outside the Philippines, pbwin ensures that appropriate safeguards are in place as required by Section 21 of the Data Privacy Act of 2012 and NPC Circular No. 16-01. These safeguards may include: contractual data processing agreements incorporating NPC-approved standard clauses; transfer to jurisdictions recognised by the NPC as providing adequate data protection; or specific consent from the affected data subject where no other lawful transfer mechanism is available.
pbwin will not transfer personal data to any jurisdiction or recipient that cannot provide a level of data protection substantially equivalent to the protections afforded by Philippine law.
pbwin may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. When material changes are made — meaning changes that substantively affect your rights or the manner in which we process your personal data — pbwin will notify registered players by email at their registered address no fewer than fourteen (14) days before the updated Policy takes effect.
The "Last Updated" date at the top of this page reflects the date on which the current version of the Policy came into effect. We encourage you to review this page periodically. Your continued use of pbwin's services after the effective date of any amendment constitutes your acknowledgement of the updated Policy.
pbwin has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. The DPO serves as the primary point of contact for all data privacy queries, access requests, complaints, and regulatory communications.
All written data privacy requests must include your full name, registered pbwin account mobile number or email address, and a clear description of your request. Requests are acknowledged within three (3) business days and substantively responded to within fifteen (15) business days, or such shorter period as required by applicable law.
National Privacy Commission: If you are not satisfied with pbwin's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC's contact details and complaint filing procedures are available at the official NPC website.
Six ways pbwin protects your personal data as a Filipino player.
All data transmitted between your device and pbwin.app is protected by TLS encryption — the same standard used by Philippine banks. Your personal information is encrypted both in transit and at rest on pbwin's secure servers.
pbwin does not sell, rent, or trade your personal information to data brokers, advertising networks, or any third party for commercial profiling purposes. Your data is used only to operate your pbwin account and meet our legal obligations.
pbwin's data practices comply with Republic Act No. 10173 (Data Privacy Act of 2012) and NPC regulations. A designated Data Privacy Officer oversees compliance and handles all data subject rights requests promptly.
pbwin collects only the personal data necessary to provide its services, fulfil PAGCOR compliance obligations, and protect your account. We do not collect data speculatively or for purposes beyond those stated in this Policy.
In the event of a personal data breach affecting your information, pbwin will notify the National Privacy Commission within 72 hours and inform you directly without undue delay — in compliance with the Data Privacy Act's mandatory notification requirements.
pbwin supports all data subject rights under the DPA: access, rectification, erasure, objection, portability, and the right to complain to the NPC. Rights requests are acknowledged within three business days and resolved within fifteen.
Join thousands of Filipino players who trust pbwin for fair games, fast GCash payouts, and a platform that takes data privacy as seriously as it takes your gaming experience. Players must be 21 years or older.
Create a pbwin Account Terms & Conditions