win3max Privacy Policy

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "win3max", "we", "us", "our" — the operator of the win3max online gaming platform at win3max.org.
• "Platform" — the win3max website, games, services, and associated digital infrastructure accessible at win3max.org.
• "Personal Data" — any information relating to an identified or identifiable natural person, as defined under the Philippine Data Privacy Act of 2012 (RA 10173).
• "Player", "you", "your" — any registered user or visitor of the Platform.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, and deletion.
• "Data Subject" — the natural person to whom Personal Data relates.
• "NPC" — the National Privacy Commission of the Philippines, the authority responsible for administering and enforcing RA 10173.
• "KYC" — Know Your Customer; the identity and age verification process required for regulated gaming operations.
• "AML" — Anti-Money Laundering; obligations arising under Republic Act 9160 (Anti-Money Laundering Act of 2001) and its amendments.

Scope & Application

This Privacy Policy applies to all Personal Data collected by win3max in connection with:

• Account registration and ongoing account management;
• Use of any game, feature, or service on the Platform;
• Deposits, withdrawals, and all financial transactions processed through the Platform;
• Communications with win3max support via live chat, email, or any other channel;
• Participation in promotions, surveys, or loyalty programmes;
• Visits to win3max.org, including passive data collected via cookies and analytics tools.

This Policy applies to Filipino players and to all persons whose data win3max processes in connection with the Philippine gaming market. By using the Platform or registering an account, you acknowledge that you have read, understood, and consent to the data processing practices described in this Policy.

Personal Data We Collect

3.1 Data You Provide Directly

When you register and use your win3max account, we collect the following categories of Personal Data that you actively provide:

3.2 Data Collected Automatically

When you access the Platform, win3max automatically collects certain technical and behavioural data:

• Device & Browser Data: IP address, device type and model, operating system, browser type and version, screen resolution;
• Usage Data: Pages visited, games played, session duration, bets placed, features accessed, clicks and navigation paths;
• Geolocation Data: Country and approximate region derived from IP address, used for fraud prevention and regulatory compliance. win3max does not collect precise GPS location data;
• Cookie & Tracking Data: Session cookies, preference cookies, and analytics identifiers as described in Section 8.

How We Use Your Personal Data

win3max uses your Personal Data for the following specific and documented purposes:

4.1 Account Operations

To create and manage your win3max account, verify your identity, process your deposits and withdrawals (including to your GCash or PayMaya account), maintain your game history and balance records, and provide you with access to all Platform features.

4.2 Regulatory Compliance

To verify that you meet the 21+ age requirement mandated by PAGCOR for real-money online gaming. To fulfil AML reporting obligations under Republic Act 9160. To respond to lawful requests from PAGCOR, the NPC, law enforcement agencies, courts, or other competent Philippine regulatory authorities.

4.3 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, collusion, money laundering, and other activities that violate win3max's Terms and Conditions or applicable Philippine law. IP geolocation and device fingerprinting data are used for this purpose.

4.4 Platform Improvement

To analyse aggregated and anonymised usage patterns to improve the Platform's performance, game selection, user experience, and feature development. Individual player behaviour data is not shared externally for this purpose.

4.5 Customer Support

To respond to your support enquiries, resolve disputes, process complaints, and provide account-level assistance through win3max's 24/7 Filipino support team.

4.6 Responsible Gaming

To identify patterns of gameplay that may indicate problem gambling behaviour, to enforce self-exclusion requests, and to apply responsible gaming limits set by the player or mandated by regulatory requirements.

4.7 Marketing Communications (with consent)

To send promotional offers, bonus notifications, and platform updates to players who have opted in to marketing communications. Players may withdraw consent at any time by contacting support or updating their account preferences. win3max does not send marketing communications without explicit prior consent.

Legal Bases for Processing

Under the Philippine Data Privacy Act of 2012, win3max processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing necessary to perform the win3max Terms and Conditions, which constitutes the contract between you and win3max when you create an account. This includes account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR-aligned regulatory requirements, AML obligations under RA 9160, age verification under PAGCOR standards, and NPC-mandated data handling procedures.
• Legitimate Interest: Processing for fraud detection, security monitoring, platform analytics, and responsible gaming purposes, where win3max's legitimate operational interests are balanced against and do not override the rights and freedoms of the data subject.
• Consent: Processing for direct marketing communications, where you have provided explicit, freely given, and informed consent. Consent for marketing is separate from and does not condition access to win3max's core services.

Data Sharing & Disclosure

win3max does not sell, rent, or trade your Personal Data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

6.1 Payment Processors

To process deposits and withdrawals, win3max shares the minimum necessary financial data with Philippine payment providers including GCash (GXI), PayMaya (Voyager Innovations), and major Philippine banks (BPI, BDO, Metrobank). These providers are subject to their own privacy policies and the Philippine Data Privacy Act.

6.2 Game Providers

win3max works with third-party game software providers to deliver its game library. A pseudonymised player identifier (not your full personal details) may be shared with game providers for the purpose of game delivery, fairness auditing, and technical support. Game providers do not receive your name, mobile number, or financial data.

6.3 Regulatory Authorities

win3max is obligated to share player data with PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), law enforcement agencies, and Philippine courts where required by law, pursuant to a valid legal order, or in connection with an investigation of suspected illegal activity. win3max will notify affected players of such disclosures where legally permissible to do so.

6.4 Fraud Prevention Services

win3max may share data with third-party fraud detection and identity verification services to fulfil KYC requirements and prevent financial crime. Such providers are contractually bound to process data only for the stated purpose and in compliance with applicable Philippine law.

6.5 Professional Advisors

win3max may share data with lawyers, auditors, and other professional advisors on a need-to-know basis, subject to professional confidentiality obligations.

Data Retention

win3max retains Personal Data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Account Data: Retained for the duration of your active win3max account, plus a minimum of five (5) years following account closure, as required by AML regulations and PAGCOR record-keeping standards.
• Financial & Transaction Records: Retained for a minimum of ten (10) years from the date of the transaction, in accordance with Philippine AML obligations under RA 9160.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of any related regulatory inquiry, whichever is later.
• Support Communications: Retained for three (3) years from the date of the relevant communication.
• Marketing Consent Records: Retained for the period of the consent plus three (3) years, to demonstrate compliance in the event of a regulatory inquiry.

Upon expiry of the applicable retention period, win3max will securely delete or anonymise Personal Data in a manner that prevents reconstruction.

Cookies & Tracking Technologies

8.1 Types of Cookies Used

win3max uses the following categories of cookies and similar tracking technologies on the Platform:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged into your win3max account. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, game display preferences, and last-visited sections. These improve your experience but are not essential to Platform operation.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform — which pages are visited, which games are played most, and how long sessions last. This data is used internally to improve win3max. We do not share this data with external advertising platforms.
• Security Cookies: Used for fraud detection and session integrity, including device fingerprinting elements that help identify suspicious login attempts.

8.2 Managing Cookies

You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the win3max Platform. A cookie preference centre is available within the Platform settings for players who wish to review their choices.

Security Measures

win3max implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, destruction, alteration, or disclosure:

• Encryption: TLS 1.3 for all data in transit; AES-256 encryption for sensitive data at rest;
• Access Controls: Role-based access control limiting internal staff access to Personal Data on a strict need-to-know basis;
• Password Security: Player passwords are stored as salted cryptographic hashes — win3max staff cannot read your password;
• Two-Factor Authentication: Available to all players and recommended as an additional account security layer;
• Intrusion Detection: Continuous monitoring for unauthorised access attempts, unusual access patterns, and potential data exfiltration;
• Penetration Testing: Regular third-party security assessments to identify and remediate vulnerabilities;
• Staff Training: All win3max staff with access to Personal Data receive data protection training aligned with Philippine DPA requirements.

Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your Personal Data held by win3max. These rights may be exercised by contacting win3max's support team:

To exercise any of these rights, contact win3max support via live chat at win3max.org or by email at [email protected]. win3max will respond to data subject requests within thirty (30) days. If you are dissatisfied with win3max's response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

Children & Minors

The win3max Platform is strictly for adults aged 21 years and older, as required by PAGCOR. win3max does not knowingly collect Personal Data from individuals under 21 years of age. The Platform's registration process includes age confirmation, and KYC verification confirms age before any withdrawal is processed.

If win3max becomes aware that it has inadvertently collected Personal Data from a person under 21 years of age, the relevant account will be immediately closed, all associated data will be deleted (except where retention is required by law for the investigation), and any balance will be handled in accordance with win3max's responsible gaming and underage gambling procedures.

Parents and guardians are responsible for ensuring that minors do not access the win3max Platform. If you believe a minor has created a win3max account, please contact support immediately.

Third-Party Links

The win3max Platform may contain references to third-party services such as payment providers (GCash, PayMaya, BPI, BDO). When you interact with these services — for example, when completing a GCash deposit — you leave the win3max Platform and are subject to the privacy policy of the relevant third party.

win3max is not responsible for the privacy practices of third-party services and encourages players to review the privacy policies of any third-party services they use in connection with their win3max account.

Data Breach Notification Procedure

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, win3max will:

1. Notify the National Privacy Commission of the Philippines within seventy-two (72) hours of becoming aware of the breach, as required by RA 10173;
2. Notify affected players without undue delay where the breach is likely to result in a high risk to their rights and freedoms, providing a plain-language description of the nature of the breach, the data affected, likely consequences, and the steps win3max is taking to address it;
3. Implement immediate containment measures and conduct a thorough post-incident investigation;
4. Document the breach, the steps taken in response, and any remedial actions in win3max's data breach register, as required by the NPC.

Updates to This Privacy Policy

win3max may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the services we offer. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy;
• Post a prominent notice on the win3max Platform for a reasonable period following the change;
• Where required by law or where changes significantly affect your rights, seek your renewed consent.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following the effective date of any update constitutes your acknowledgment of the revised Policy.

Contact Us & Data Protection

For questions, concerns, or requests relating to your Personal Data or this Privacy Policy, please contact win3max using the details below. win3max takes all privacy enquiries seriously and will respond within a reasonable timeframe.