gxgwin Privacy Policy

This Privacy Policy is issued by gxgwin ("gxgwin," "we," "us," or "our"), the operator of the online casino platform accessible at https://gxgwin.one (the "Platform"). gxgwin acts as the data controller in respect of the personal data of all registered players and visitors to the Platform.

As a data controller, gxgwin determines the purposes and means by which your personal data is processed. We are committed to processing your personal data lawfully, fairly, and transparently in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy applies to all personal data collected through the gxgwin Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and your general use of the website. It applies to all registered players and visitors, whether accessing the Platform from Manila, Cebu, Davao, Quezon City, or anywhere else in the Philippines.

gxgwin collects the following categories of personal data from players and Platform visitors:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification numbers (e.g., Philippine passport number, driver's license number, SSS/UMID number).
• Contact Data: Email address, mobile number, and residential address (including city, province, and postal code).
• Account Data: Username, encrypted password, account preferences, communication preferences, and account history.
• Financial Data: Payment method details (e.g., GCash account reference, PayMaya/Maya account reference, bank account details for BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, or debit card details), deposit and withdrawal history, and transaction records. Full payment credentials are not stored by gxgwin — they are processed by our regulated payment partners.
• Gaming Data: Game history, wagering activity, session duration, win/loss records, bonus usage, and responsible gaming tool settings.
• Technical Data: IP address, device type, browser type and version, operating system, screen resolution, and time zone.
• Usage Data: Pages visited, links clicked, features used, session timestamps, and navigation patterns on the Platform.
• Communications Data: Records of your correspondence with gxgwin customer support, including chat transcripts, email exchanges, and support ticket history.
• Verification Data: Copies of identity documents, selfies or photographs submitted for KYC verification, and proof of address documents.

gxgwin collects personal data through the following means:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, through cookies, web beacons, log files, and similar tracking technologies (see Section 7 for details).
• Third-Party Sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment confirmation data from payment processors such as GCash, PayMaya/Maya, and Philippine banking partners.
• Regulatory Sources: Data received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other competent Philippine authorities in connection with our regulatory obligations.

gxgwin uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your gxgwin player account, including processing your registration and verifying your identity.
• Service Delivery: To provide access to games, process deposits and withdrawals, credit bonuses, and deliver all other services available on the Platform.
• Legal & Regulatory Compliance: To fulfil our obligations under the Data Privacy Act of 2012, the Anti-Money Laundering Act, PAGCOR regulations, and all other applicable Philippine laws. This includes KYC verification, transaction monitoring, and mandatory reporting to regulatory authorities.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats to the Platform and its users.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce responsible gaming limits and self-exclusion requests, and provide appropriate support resources.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the features, performance, and user experience of the gxgwin Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about gxgwin — but only where you have given your consent or where we have a legitimate interest, and always subject to your right to opt out at any time.

Under the Data Privacy Act of 2012, gxgwin processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your gxgwin account and deliver the services you have requested.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including AML obligations, PAGCOR requirements, and tax reporting.
• Legitimate Interests: Processing necessary for gxgwin's legitimate business interests, including fraud prevention, Platform security, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

gxgwin does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya/Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the processing of deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML screening service providers engaged to verify your identity and screen transactions for suspicious activity.
• Game Software Providers: Licensed game developers and live dealer studios whose games are available on the gxgwin Platform, to the extent necessary for game delivery and dispute resolution.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulatory obligation.
• IT & Infrastructure Providers: Cloud hosting, cybersecurity, and technical support providers engaged to operate and secure the Platform, all of whom are bound by confidentiality obligations.
• Professional Advisers: Lawyers, auditors, and accountants engaged by gxgwin, subject to professional confidentiality obligations.

All third parties with whom gxgwin shares personal data are required to process that data in accordance with applicable Philippine data protection law and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

The gxgwin Platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and analyse Platform usage. The following types of cookies may be used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional Cookies: Remember your preferences (such as language settings and responsible gaming limits) to personalise your experience.
• Analytics Cookies: Collect anonymised data about how visitors use the Platform, helping us identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Marketing Cookies: Used only where you have given consent, to deliver relevant promotional content about gxgwin.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the gxgwin Platform. For strictly necessary cookies, no opt-out is available as they are required for the Platform to operate securely.

gxgwin retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AML record-keeping requirements under Republic Act No. 9160.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by PAGCOR and AMLC regulations.
• KYC & Verification Documents: Retained for a minimum of five (5) years after the end of the business relationship.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Data: Retained until you withdraw your consent or opt out of marketing communications, after which it is deleted or anonymised promptly.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with gxgwin's data disposal procedures.

gxgwin implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the gxgwin Platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific role.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform.
• Multi-factor authentication for administrative access to systems containing personal data.
• Staff training on data protection obligations and security best practices.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, gxgwin will notify the National Privacy Commission and affected data subjects in accordance with the timeframes and procedures prescribed by the Data Privacy Act of 2012 and NPC Circular No. 16-03.

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by gxgwin. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13.

gxgwin will respond to all data subject rights requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further fifteen (15) business days, with notice provided to you. We may need to verify your identity before processing your request.

The gxgwin Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. gxgwin does not knowingly collect personal data from persons under the age of 21.

If gxgwin becomes aware that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, delete the personal data, and — where required — report the matter to the relevant authorities. If you believe that a minor has registered on the gxgwin Platform, please contact us immediately using the details in Section 13.

gxgwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players by posting a prominent notice on the Platform and, where practicable, by sending a notification to the email address associated with your account.

The revised Privacy Policy will take effect on the date specified in the notice. Your continued use of the gxgwin Platform after the effective date constitutes your acknowledgement of the updated Policy. We encourage you to review this page periodically. The date of the most recent update is displayed at the top of this page.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by gxgwin, please contact our Data Protection Officer (DPO):

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that gxgwin has violated your data protection rights. Information about how to file a complaint with the NPC is available on the NPC's official website.

For responsible gaming concerns, self-exclusion requests, or problem gambling support, please visit our Responsible Gaming page or contact our support team directly. All such requests are handled with strict confidentiality.