pupwin Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") explains how pupwin ("we," "us," "our," or "Company"), a Philippine-based online gaming platform operated under license from the Philippine Amusement and Gaming Corporation (PAGCOR), collects, uses, processes, stores, discloses, and protects personal information obtained from users ("you," "your," or "Player") who access or use our website located at https://pupwin.cam, mobile applications, and related services (collectively, the "Platform").

This Policy applies to all personal data processed by pupwin in connection with your use of our services, including data collected during account registration, gameplay, financial transactions, customer support interactions, marketing communications, and all other activities conducted through the Platform. By accessing or using pupwin services, you acknowledge that you have read, understood, and consent to the data practices described in this Policy in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules and regulations.

If you do not agree with any provision of this Privacy Policy, you must immediately discontinue use of the Platform and refrain from creating an account. We reserve the right to modify this Policy at any time. Material changes will be communicated through email notifications sent to your registered email address, prominent notices on the Website, or in-app notifications. Your continued use of pupwin services following any modifications constitutes your acceptance of the updated Policy.

2. Information We Collect

2.1 Personal Information You Provide

When you register for a pupwin account or use our services, we collect the following categories of personal information that you voluntarily provide:

• Identity Information: Full legal name as it appears on government-issued identification, date of birth, gender, nationality, place of birth, and government-issued identification numbers (e.g., passport number, driver's license number, UMID number, PRC ID number, Voter's ID number, Social Security System number, or other valid Philippine government ID).
• Contact Information: Email address, mobile phone number, residential address (street address, barangay, city/municipality, province, postal code), and alternative contact numbers.
• Account Credentials: Username, password, security questions and answers, two-factor authentication settings, and account recovery information.
• Financial Information: Payment method details including GCash mobile number, PayMaya account number, bank account information (account holder name, bank name, account number, branch code), credit/debit card information (cardholder name, card number, expiration date, CVV code), cryptocurrency wallet addresses, and transaction history.
• Verification Documents: Copies or scans of government-issued identification documents, proof of address documents (utility bills, bank statements, government correspondence), selfies for facial verification, payment method verification documents (bank statements, e-wallet screenshots, credit card photos with middle digits obscured), and any additional documentation required for enhanced verification or compliance purposes.
• Communication Data: Customer support inquiries, live chat transcripts, email correspondence, phone call recordings (where permitted by law and with your consent), feedback submissions, and any other communications you have with pupwin.

2.2 Information Automatically Collected

When you access or use the pupwin Platform, we automatically collect certain technical and usage information through cookies, web beacons, log files, and similar tracking technologies:

• Device Information: Device type and model, operating system and version, browser type and version, screen resolution, device identifiers (IMEI, MEID, serial number, Android ID, IDFA), mobile network information, and installed applications.
• Connection Information: IP address, internet service provider, geographic location (country, region, city derived from IP geolocation), connection speed, network type (Wi-Fi, 3G, 4G, 5G), and access times.
• Usage Data: Pages visited, features used, time spent on each page, click patterns, navigation paths, search queries entered, games played, bets placed, wins and losses, session duration, frequency of visits, referring URLs, exit pages, and interaction with in-app features.
• Gameplay Data: Game selections, bet amounts, stake levels, gameplay patterns, betting strategies employed, tournament participation, bonus usage, loyalty program activity, and performance metrics.
• Transaction Data: Deposit amounts and dates, withdrawal requests and approvals, payment methods used, transaction references, processing times, currency conversions, fees applied, and account balance history.

2.3 Information from Third-Party Sources

We may receive personal information about you from third-party sources including:

• Payment processors and financial institutions (GCash, PayMaya, banks, card networks) to verify payment methods and process transactions;
• Identity verification services to confirm your identity, age, and address;
• Credit reference agencies and fraud prevention services to assess risk and prevent fraudulent activity;
• Marketing partners and affiliates who referred you to pupwin (with your consent);
• Social media platforms if you choose to connect your social media accounts to your pupwin account;
• PAGCOR and other gaming regulators for compliance and licensing verification purposes;
• Publicly available databases and government registries for verification and due diligence.

3. How We Use Your Information

pupwin processes your personal information for the following lawful purposes:

3.1 Service Provision and Account Management

• Creating, maintaining, and managing your pupwin account;
• Verifying your identity, age, and eligibility to use gaming services;
• Processing deposits, withdrawals, and other financial transactions;
• Providing access to games, features, and Platform functionalities;
• Processing and tracking bets, calculating winnings, and crediting account balances;
• Managing bonuses, promotions, loyalty programs, and rewards;
• Communicating with you about your account, transactions, and service-related matters;
• Providing customer support and responding to inquiries;
• Implementing responsible gaming measures including deposit limits, self-exclusion, and reality checks.

3.2 Legal and Regulatory Compliance

• Complying with PAGCOR licensing requirements and gaming regulations;
• Adhering to the Data Privacy Act of 2012 and related data protection laws;
• Fulfilling anti-money laundering (AML) and counter-terrorist financing (CTF) obligations under the Anti-Money Laundering Act (Republic Act No. 9160, as amended);
• Conducting Know Your Customer (KYC) and Customer Due Diligence (CDD) procedures;
• Preventing fraud, cheating, collusion, and other prohibited activities;
• Investigating and resolving disputes, complaints, and Terms violations;
• Responding to legal requests, court orders, and lawful demands from government authorities;
• Reporting suspicious transactions to the Anti-Money Laundering Council (AMLC) when required by law;
• Maintaining records as mandated by applicable laws and regulations.

3.3 Security and Risk Management

• Detecting, preventing, and investigating fraud, money laundering, and illegal activities;
• Identifying multi-accounting, bonus abuse, and Terms violations;
• Monitoring gameplay for suspicious patterns, collusion, and cheating;
• Protecting the security and integrity of the Platform, games, and player accounts;
• Preventing unauthorized access, data breaches, and cyber attacks;
• Assessing and managing financial, legal, and operational risks;
• Conducting security audits and vulnerability assessments.

3.4 Platform Improvement and Analytics

• Analyzing user behavior, preferences, and trends to improve services;
• Testing new features, games, and functionalities;
• Optimizing Platform performance, speed, and user experience;
• Conducting research, statistical analysis, and data modeling;
• Personalizing content, recommendations, and game offerings;
• Troubleshooting technical issues and resolving bugs;
• Evaluating the effectiveness of marketing campaigns and promotions.

3.5 Marketing and Communications (With Consent)

• Sending promotional emails, SMS messages, and push notifications about new games, bonuses, and special offers;
• Providing personalized marketing based on your preferences and gameplay history;
• Conducting surveys, contests, and prize draws;
• Sharing news, updates, and announcements about pupwin services;
• Retargeting and remarketing through online advertising platforms.

You may opt out of marketing communications at any time by using the unsubscribe link in emails, adjusting notification settings in your account, or contacting customer support. Opting out will not affect transactional or service-related communications.

4. Legal Bases for Processing

Under Philippine data protection law, pupwin processes your personal information based on the following legal grounds:

• Consent: You have provided explicit consent for specific processing activities such as marketing communications, social media account linking, or optional data collection.
• Contract Performance: Processing is necessary to fulfill our contractual obligations to you under the Terms and Conditions, including account creation, gameplay provision, transaction processing, and customer support.
• Legal Obligation: Processing is required to comply with Philippine laws and regulations including PAGCOR licensing requirements, anti-money laundering laws, tax obligations, and data protection mandates.
• Legitimate Interests: Processing is necessary for our legitimate business interests such as fraud prevention, security enhancement, risk management, Platform improvement, and business analytics, provided these interests do not override your fundamental rights and freedoms.
• Vital Interests: Processing is necessary to protect your vital interests or those of another person, such as preventing harm or responding to emergencies.

5. How We Share Your Information

pupwin does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may disclose your information to the following categories of recipients for the purposes described in this Policy:

5.1 Service Providers and Business Partners

We share personal data with trusted third-party service providers who perform services on our behalf, including:

• Payment processors and financial institutions (GCash, PayMaya, banks, card networks, cryptocurrency exchanges) for transaction processing;
• Identity verification and KYC service providers for age, identity, and address verification;
• Cloud hosting and data storage providers for secure data storage and backup;
• Customer support platforms for managing inquiries and communications;
• Email service providers and SMS gateways for sending notifications and communications;
• Game providers and software developers who supply games featured on the Platform;
• Marketing and advertising partners for campaign delivery and performance tracking;
• Analytics and data intelligence providers for usage analysis and business insights;
• Fraud detection and security services for risk assessment and prevention;
• Legal, accounting, and auditing firms for professional advisory services.

All third-party service providers are contractually bound to protect your personal information, use it only for specified purposes, and comply with applicable data protection laws.

5.2 Regulatory and Government Bodies

We may disclose personal information to regulatory authorities, government agencies, and law enforcement bodies when required by law or when we believe disclosure is necessary to:

• Comply with PAGCOR licensing requirements and gaming regulations;
• Report suspicious transactions to the Anti-Money Laundering Council (AMLC);
• Respond to lawful requests, court orders, subpoenas, and legal processes;
• Cooperate with law enforcement investigations into illegal activity, fraud, or security threats;
• Fulfill tax reporting obligations to the Bureau of Internal Revenue (BIR);
• Comply with National Privacy Commission (NPC) inquiries and data protection audits.

5.3 Corporate Transactions

In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or other corporate transaction involving pupwin, your personal information may be transferred to the successor entity or acquiring party. We will notify you of any such transaction and the choices you may have regarding your information.

5.4 Other Disclosures

We may also disclose personal information:

• With your explicit consent for a specific purpose;
• To enforce our Terms and Conditions, policies, and legal rights;
• To protect the safety, security, and rights of pupwin, our users, and the public;
• In aggregated or anonymized form that cannot reasonably be used to identify you.

6. Data Retention

pupwin retains your personal information only for as long as necessary to fulfill the purposes described in this Policy, comply with legal and regulatory obligations, resolve disputes, enforce agreements, and establish, exercise, or defend legal claims.

Specific retention periods include:

• Account Information: Retained for the duration of your active account plus five (5) years after account closure as required by PAGCOR regulations and anti-money laundering laws.
• Transaction Records: Retained for seven (7) years from the date of transaction as mandated by tax laws and AMLC recordkeeping requirements.
• KYC and Verification Documents: Retained for five (5) years after account closure in accordance with PAGCOR and AMLC requirements.
• Communications and Support Records: Retained for three (3) years to handle ongoing matters, disputes, and legal claims.
• Marketing Consent Records: Retained until you withdraw consent, plus an additional six (6) months for compliance documentation.
• Log Files and Technical Data: Retained for up to twelve (12) months for security monitoring and troubleshooting, unless longer retention is required for ongoing investigations.

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data deletion procedures and industry best practices. Some information may be retained in backup systems for an additional period as part of our disaster recovery protocols.

7. Data Security Measures

pupwin implements comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, destruction, loss, or misuse. Our security practices include:

7.1 Technical Safeguards

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• AES-256 encryption for sensitive data stored in databases;
• Secure, PCI DSS-compliant payment processing systems;
• Multi-factor authentication (2FA) options for account access;
• Firewall protection, intrusion detection systems (IDS), and intrusion prevention systems (IPS);
• Regular security audits, vulnerability assessments, and penetration testing by independent third parties;
• Secure software development lifecycle (SDLC) practices including code reviews and security testing;
• Data loss prevention (DLP) systems to prevent unauthorized data exfiltration;
• Automated security monitoring and anomaly detection systems.

7.2 Administrative Safeguards

• Strict access controls limiting employee access to personal data on a need-to-know basis;
• Role-based access control (RBAC) and principle of least privilege implementation;
• Comprehensive employee training on data protection, privacy, and security best practices;
• Confidentiality agreements and non-disclosure agreements (NDAs) with all personnel and service providers;
• Incident response plan and data breach notification procedures;
• Regular review and update of security policies and procedures;
• Background checks for employees with access to sensitive data;
• Designated Data Protection Officer responsible for privacy compliance.

7.3 Physical Safeguards

• Secure data centers with 24/7 physical security, surveillance, and access controls;
• Redundant power supplies, backup systems, and disaster recovery infrastructure;
• Secure disposal procedures for hardware containing personal data;
• Environmental controls to protect against natural disasters and equipment failure.

While we implement industry-leading security measures, no method of electronic transmission or storage is 100% secure. You acknowledge that you provide personal information at your own risk. We cannot guarantee absolute security but commit to responding promptly and transparently to any security incidents.

8. Your Privacy Rights

Under the Data Privacy Act of 2012 and its implementing regulations, you have the following rights regarding your personal information:

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your request. We will respond within fifteen (15) calendar days and provide the requested information or action within thirty (30) calendar days, unless an extension is justified by the complexity or volume of requests.

9. Cookies and Tracking Technologies

pupwin uses cookies, web beacons, pixels, local storage, and similar tracking technologies to enhance user experience, analyze Platform usage, deliver personalized content, and support marketing efforts. Cookies are small text files stored on your device that allow us to recognize you and remember your preferences.

9.1 Types of Cookies We Use

• Essential Cookies: Necessary for Platform functionality, account authentication, security, and service provision. These cookies cannot be disabled.
• Performance Cookies: Collect information about how you use the Platform to improve performance and user experience.
• Functional Cookies: Remember your preferences, settings, and choices to provide enhanced, personalized features.
• Marketing Cookies: Track your browsing activity to deliver relevant advertisements and measure campaign effectiveness.

9.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may impair Platform functionality and prevent you from accessing certain features. Disabling marketing cookies will not stop you from seeing advertisements but may make them less relevant to your interests.

10. International Data Transfers

Your personal information is primarily stored and processed on servers located in the Philippines. However, some of our service providers and business partners may be located outside the Philippines. When we transfer personal information internationally, we ensure adequate protection through:

• Contractual data protection clauses compliant with Philippine and international standards;
• Verification that the recipient country provides adequate data protection as determined by the National Privacy Commission;
• Implementation of technical and organizational security measures equivalent to those required by Philippine law;
• Your explicit consent for specific international transfers where required.

11. Children's Privacy

pupwin services are strictly prohibited for individuals under twenty-one (21) years of age. We do not knowingly collect, use, or disclose personal information from minors. Our age verification procedures are designed to prevent underage access. If we become aware that we have collected personal information from a person under 21, we will immediately delete such information and permanently close the associated account. If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

pupwin reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through email notification, prominent Website notice, or in-app notification at least seven (7) days before the effective date, unless immediate implementation is required for legal, regulatory, or security reasons.

Your continued use of pupwin services after any modifications constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you must discontinue use of the Platform and may close your account by contacting customer support.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Rights Request"
• Live Chat: Available 24/7 through the Website

For complaints or concerns that cannot be resolved through our internal processes, you may file a complaint with the National Privacy Commission:

• National Privacy Commission
• 5th Floor, Philippine International Convention Center (PICC), Vicente Sotto Street, Pasay City, Metro Manila 1307
• Email: [email protected]
• Hotline: (02) 8234-2228