auwin Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by auwin ("auwin," "we," "us," or "our"), the operator of the online gaming platform accessible at auwin.vip. This Policy describes how auwin collects, uses, stores, discloses, and protects the personal data of players and visitors ("you") who access or use the auwin platform, including all games, services, promotions, and features available on auwin.

auwin is committed to protecting the privacy and personal data of all Filipino players and visitors in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). By registering on or using the auwin platform, you consent to the collection and use of your personal data as described in this Policy.

This Policy should be read together with the auwin Terms & Conditions, which govern your use of the auwin platform. Capitalised terms not defined in this Policy have the meanings given to them in the auwin Terms & Conditions.

2. Personal Data We Collect

auwin collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data auwin collects include:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (to verify you are 21 years of age or older);
• Nationality and country of residence;
• Residential address, including barangay, city, and province;
• Email address and mobile number;
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence, UMID);
• Proof of address documents (e.g., utility bills, bank statements);
• Selfie or liveness verification images where required;
• Proof of payment method ownership.

2.3 Financial & Transaction Data

• GCash account details, PayMaya account details, or bank account information (BPI, BDO, Metrobank) used for deposits and withdrawals;
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method references;
• Account balance history.

2.4 Gaming Activity Data

• Game session history, including games played, wager amounts, win/loss records, and session durations;
• Bonus and promotion participation history;
• Responsible gaming tool settings and self-exclusion records.

2.5 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Pages visited on the auwin platform, time spent, and navigation patterns;
• Login timestamps and session logs;
• Cookie identifiers and similar tracking data (see Section 6).

2.6 Communications Data

• Records of your communications with the auwin support team via live chat or email;
• Feedback, complaints, and dispute records.

3. How auwin Uses Your Personal Data

auwin uses the personal data we collect for the following purposes:

auwin will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

4. Legal Basis for Processing

auwin processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing is necessary to perform the contract between you and auwin (i.e., to provide the gaming services you have registered for, process your transactions, and manage your account);
• Legal obligation: Processing is necessary for auwin to comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, counter-terrorism financing (CTF) requirements, and gaming regulatory requirements;
• Legitimate interests: Processing is necessary for auwin's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services, provided such interests are not overridden by your rights and interests;
• Consent: Where auwin relies on your consent as the legal basis for processing (e.g., for marketing communications), you have the right to withdraw that consent at any time by contacting the auwin support team.

5. Data Sharing & Disclosure

auwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. auwin may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

5.1 Service Providers

auwin engages trusted third-party service providers to assist in operating the auwin platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting providers, customer support platform providers, and analytics providers. These service providers are contractually bound to process your personal data only on auwin's instructions and in accordance with applicable data protection law.

5.2 Regulatory & Law Enforcement Authorities

auwin is required by Philippine law to disclose certain personal data and transaction records to regulatory authorities, including the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies, where required by applicable law, court order, or regulatory direction.

5.3 Game Content Providers

auwin's platform includes games developed by third-party game studios and software providers. These providers may receive limited technical data (such as session tokens and game result data) necessary to deliver their games on the auwin platform. They do not receive your full identity or financial data.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of auwin's business, your personal data may be transferred to the acquiring entity as part of that transaction. auwin will notify affected players of any such transfer and the privacy practices of the acquiring entity.

6. Cookies & Tracking Technologies

The auwin platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and analyse platform usage. The types of cookies auwin uses include:

• Strictly necessary cookies: Required for the auwin platform to function, including session management, login authentication, and security features. These cannot be disabled;
• Functional cookies: Remember your preferences, such as language settings and responsible gaming tool configurations;
• Analytics cookies: Collect aggregated, anonymised data about how players use the auwin platform to help us improve performance and user experience;
• Security cookies: Help auwin detect and prevent fraudulent activity and unauthorised account access.

You can manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the auwin platform. auwin does not use third-party advertising or behavioural tracking cookies.

7. Data Retention

auwin retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and gaming regulations:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, as required by AML regulations;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Gaming activity records: Retained for a minimum of three (3) years from the date of each gaming session;
• Communications records: Retained for a minimum of two (2) years from the date of each communication;
• Self-exclusion records: Retained for the duration of the exclusion period plus five (5) years.

Upon expiry of the applicable retention period, auwin will securely delete or anonymise your personal data in accordance with our data disposal procedures, unless further retention is required by law.

8. Data Security

auwin implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the auwin platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest is encrypted using AES-256 encryption;
• Access controls: Access to personal data is restricted to auwin personnel and service providers who have a legitimate need to access it, and is governed by role-based access controls;
• Security monitoring: auwin operates continuous security monitoring systems to detect and respond to potential data breaches or unauthorised access attempts;
• Regular audits: auwin conducts regular security assessments and penetration testing of its platform infrastructure;
• Staff training: All auwin personnel who handle personal data receive regular data protection and security training.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, auwin will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Philippine Data Privacy Act.

9. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by auwin: