jiwin is committed to protecting the personal data of every Filipino player who uses our platform. This Privacy Policy explains exactly what data jiwin collects, why we collect it, how we use it, who we share it with, and what rights you have over your own information under Philippine law.
jiwin's data practices comply with Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations. jiwin is registered with the National Privacy Commission (NPC) as required for data controllers operating in the Philippines.
jiwin does not sell, rent, or trade your personal data to third parties for commercial purposes. Data shared with external parties is limited strictly to what is necessary for platform operations, legal compliance, and regulatory reporting obligations under PAGCOR and Philippine AML law.
Filipino players have full data subject rights under RA 10173, including the rights to access, correct, erase, object to processing, and data portability. jiwin has dedicated processes for handling all data subject requests and aims to respond within 15 business days of a valid request.
All data transmitted between your device and the jiwin platform is protected by 256-bit TLS encryption — the same standard used by Philippine banks. jiwin's servers are secured with access controls, intrusion detection systems, and regular third-party security audits.
As a PAGCOR-licensed operator, jiwin is legally required to share certain player data with PAGCOR for regulatory oversight and with the Anti-Money Laundering Council (AMLC) in relation to suspicious transaction reporting. These disclosures are legally mandated and are not discretionary.
In the event of a personal data breach that creates risk to affected individuals, jiwin will notify affected players and the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03 and the Data Privacy Act.
Summary for Filipino Players: jiwin collects your personal data to run your account, verify your identity, process payments, comply with PAGCOR and AML law, and improve our services. We do not sell your data to advertisers or third-party marketers. You have the right under Philippine law to access, correct, and request deletion of your data. For questions, contact jiwin's Data Protection Officer at the details in Section 16.
1.1 This Privacy Policy ("Policy") describes how jiwin ("jiwin," "we," "us," or "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("you," "Player," or "Data Subject") who access and use the jiwin online casino and sports betting platform at jiwin.org and any associated mobile applications (collectively, the "Platform").
1.2 This Policy applies to all personal data collected by jiwin in connection with your use of the Platform, regardless of the device or channel through which you access jiwin. It applies to registered Players, individuals who browse the Platform without registering, and individuals who interact with jiwin through customer support channels.
1.3 This Policy should be read together with jiwin's Terms & Conditions, which govern the overall relationship between jiwin and Platform users. By accessing or using the jiwin Platform, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described herein, you should not use the Platform.
1.4 jiwin reserves the right to amend this Policy at any time. Material changes will be communicated to registered users via in-platform notification or email at least 14 days before the changes take effect. The "Last Updated" date at the top of this page reflects the effective date of the current version.
2.1 For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, jiwin is the personal information controller responsible for the personal data collected through the Platform.
2.2 jiwin has appointed a Data Protection Officer (DPO) who is responsible for overseeing jiwin's data privacy compliance program, handling data subject requests, and serving as the primary point of contact for the National Privacy Commission (NPC). The DPO may be contacted via the details provided in Section 16 of this Policy.
NPC Registration: In compliance with NPC requirements, jiwin's personal information processing systems are registered with the National Privacy Commission of the Philippines. Players who have unresolved privacy concerns may file a complaint directly with the NPC at privacy.gov.ph.
3.1 jiwin collects personal data that is adequate, relevant, and limited to what is necessary in relation to the specific purpose for which it is processed. The categories of personal data collected by jiwin are set out in the table below:
| Data Category | Specific Data Items | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number, ID document scans or photographs | KYC verification, age verification, AML compliance |
| Contact Data | Philippine mobile number, email address, residential address (province/city/barangay) | Account communication, OTP delivery, regulatory correspondence |
| Account Data | Username, hashed password, account creation date, account status, preferred language | Account management, authentication, platform access |
| Financial Data | GCash number, PayMaya number, bank account details (BPI, BDO, Metrobank), deposit and withdrawal history, transaction reference numbers | Payment processing, withdrawal verification, AML monitoring |
| Gaming Activity Data | Game session logs, bet amounts, win/loss records, game type preferences, sports betting history, bonus participation history | Account records, responsible gaming monitoring, regulatory reporting, service improvement |
| Technical Data | IP address, device identifiers, browser type and version, operating system, session timestamps, login location data | Security monitoring, fraud prevention, platform optimization |
| Communications Data | Support chat logs, email correspondence, dispute records, feedback submitted through the Platform | Customer support, dispute resolution, quality assurance, compliance records |
| Responsible Gaming Data | Deposit limits set, loss limits set, self-exclusion requests and dates, cool-off periods, session time alerts configured | Responsible gaming compliance, PAGCOR reporting obligations |
3.2 jiwin does not intentionally collect sensitive personal information (as defined under RA 10173) except where strictly necessary for KYC and AML compliance purposes — specifically, government-issued ID document numbers. Such data is handled with heightened security measures and is not processed beyond what is required for regulatory compliance.
4.1 Directly from you: The majority of personal data jiwin processes is provided directly by you during account registration, KYC verification, deposit and withdrawal requests, bonus claim submissions, responsible gaming tool configuration, customer support interactions, and any other direct communication with jiwin.
4.2 Automatically through Platform use: When you access the jiwin Platform, certain technical and usage data is collected automatically through server logs, session tracking, and cookie technology. This includes IP address, device type, browser information, session timestamps, and pages visited. See Section 10 for details on jiwin's cookie practices.
4.3 From third-party service providers: jiwin may receive supplementary data from third-party KYC verification services, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud prevention providers, and analytics platforms where this is necessary for the provision of Platform services.
4.4 From regulatory authorities: In limited circumstances, jiwin may receive information about a Player from PAGCOR, AMLC, or other Philippine government authorities in connection with regulatory inquiries or enforcement actions.
5.1 jiwin processes personal data for the following specific, legitimate, and clearly defined purposes:
Marketing Communications: jiwin will only send direct marketing messages to your registered email address or mobile number. You may opt out of marketing communications at any time by contacting jiwin support or adjusting your notification preferences in Account Settings. Opting out of marketing does not affect your ability to receive essential account communications.
6.1 Under the Data Privacy Act of 2012, jiwin processes personal data on the following lawful bases:
7.1 jiwin does not sell personal data. jiwin shares personal data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:
7.2 All third parties with whom jiwin shares personal data are required to maintain the confidentiality and security of such data and to process it only for the purposes for which it was shared. jiwin does not authorize third-party use of your data for their own independent marketing or commercial purposes.
No Sale of Data: jiwin does not sell, rent, trade, or otherwise make your personal data available to advertisers, data brokers, or unaffiliated third-party marketers. Any commercial data arrangement is strictly prohibited under jiwin's internal data governance policies and applicable Philippine law.
8.1 jiwin retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to applicable legal minimum retention periods. The following retention schedule applies:
| Data Type | Retention Period | Basis |
|---|---|---|
| KYC Identity Documents | 5 years from account closure | PAGCOR regulatory requirement; RA 9160 AML obligation |
| Financial Transaction Records | 5 years from transaction date | RA 9160 mandatory retention; PAGCOR audit requirements |
| Gaming Activity Logs | 3 years from account closure | PAGCOR licensing conditions; responsible gaming compliance |
| Customer Support Records | 3 years from last interaction | Dispute resolution; legal claims limitation period |
| Marketing Preferences & Consent Records | Duration of account plus 1 year | Consent management; NPC audit trail requirements |
| Technical & Security Logs | 12 months from collection | Security monitoring; fraud investigation retention |
| Self-Exclusion Records | Permanently, or as directed by PAGCOR | PAGCOR responsible gaming reporting obligations |
8.2 Upon expiry of the applicable retention period, jiwin will securely delete or anonymize personal data using industry-standard data destruction methods. Data that has been anonymized such that it can no longer be attributed to an identifiable individual falls outside the scope of this Policy and may be retained indefinitely for analytical purposes.
9.1 jiwin implements technical and organizational measures proportionate to the risk associated with the personal data processed on the Platform. These measures include, but are not limited to:
9.2 While jiwin implements robust security measures, no internet-based system can be guaranteed 100% secure. jiwin cannot warrant absolute protection against all possible security threats. Players are encouraged to protect their own accounts by using strong, unique passwords and enabling two-factor authentication.
10.1 jiwin uses cookies and similar tracking technologies on the Platform to deliver core functionality, maintain session state, detect fraud, and improve the Player experience. The categories of cookies used by jiwin are:
10.2 jiwin does not use third-party advertising or cross-site tracking cookies. No cookies are used to build behavioral advertising profiles or to track Player activity outside of the jiwin Platform.
10.3 Players may manage cookie preferences through their browser settings. Disabling certain cookies may impair Platform functionality. Strictly necessary and security cookies cannot be disabled without affecting core Platform services.
11.1 The jiwin Platform is strictly intended for persons aged 21 years or older. jiwin does not knowingly collect personal data from individuals under 21 years of age. If jiwin becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all associated data will be reviewed, and any funds in the account will be handled in accordance with PAGCOR regulations.
11.2 All account registrations are subject to mandatory KYC age verification before Real Money Play is enabled. Government-issued identity documents confirming the Player's date of birth are required for all accounts.
21+ Requirement: If you believe that jiwin has inadvertently collected personal data from a person under 21 years of age, please contact jiwin's Data Protection Officer immediately using the contact details in Section 16. jiwin will take prompt action to investigate and rectify the situation in compliance with PAGCOR regulations and the Data Privacy Act.
12.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by jiwin:
12.2 Right to Access: You have the right to request confirmation of whether jiwin processes your personal data, and if so, to receive a copy of that data and information about how it is processed.
12.3 Right to Correction: You have the right to request that jiwin correct any inaccurate or incomplete personal data held about you without undue delay.
12.4 Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have successfully objected to processing. This right is subject to jiwin's legal retention obligations — data required to be retained under PAGCOR regulations and AML law cannot be deleted before the applicable minimum retention period expires.
12.5 Right to Object: You have the right to object to jiwin's processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
12.6 Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller, where technically feasible.
12.7 How to Exercise Your Rights: To exercise any of the rights described above, submit a written request to jiwin's Data Protection Officer using the contact details in Section 16. jiwin will respond within 15 business days of receiving a valid, complete request. jiwin may request proof of identity before processing a data subject rights request to prevent unauthorized disclosure.
NPC Escalation: If you are not satisfied with jiwin's response to a data subject rights request, or if you believe jiwin has violated your rights under the Data Privacy Act, you may file a complaint with the National Privacy Commission (NPC). Information on how to file an NPC complaint is available on the NPC's official website at privacy.gov.ph.
13.1 jiwin's primary operations and data storage infrastructure are based in the Philippines. In limited circumstances, personal data may be processed outside the Philippines — for example, where jiwin engages international game content providers, KYC verification services, or cloud infrastructure providers with servers in other jurisdictions.
13.2 Where personal data is transferred outside the Philippines, jiwin ensures that such transfers comply with the requirements of the Data Privacy Act and NPC regulations on cross-border data flows. Specifically, jiwin requires that the recipient jurisdiction provides an adequate level of protection or that appropriate safeguards (such as contractual data protection clauses) are in place before any transfer is authorized.
13.3 Players who wish to know more about jiwin's cross-border transfer arrangements may contact the Data Protection Officer using the details in Section 16.
14.1 The jiwin Platform integrates third-party services — including game content from licensed studios, payment processing via GCash and PayMaya, and security tools — that may process certain personal data in connection with their service delivery. jiwin's selection of third-party partners is subject to due diligence on their data privacy and security practices.
14.2 This Policy governs only jiwin's own data processing activities. jiwin is not responsible for the privacy practices of third-party service providers operating under their own privacy policies. Players should review the privacy policies of any third-party service they interact with directly, including GCash, PayMaya, and their respective banking providers.
14.3 jiwin does not include third-party advertising networks, social media tracking pixels, or behavioral analytics tools on the Platform that would allow third parties to collect Player data for their own commercial purposes.
15.1 jiwin may update this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, PAGCOR regulations, or Platform features. The updated Policy will be posted at jiwin.org/privacy-policy with a revised "Last Updated" date.
15.2 For material changes that significantly affect how jiwin processes your personal data or your rights as a Data Subject, jiwin will notify registered Players via email or in-platform notification at least 14 days before the changes take effect.
15.3 Your continued use of the jiwin Platform after the effective date of any Policy update constitutes acceptance of the updated Policy. If you do not agree with the updated Policy, you should discontinue use of the Platform and may request account closure.
16.1 For any questions, concerns, or requests relating to this Privacy Policy or jiwin's data processing practices, you may contact jiwin's Data Protection Officer through the following channels:
16.2 jiwin's DPO will acknowledge all written privacy inquiries within 3 business days and will aim to provide a substantive response within 15 business days. Complex or multi-jurisdictional requests may require additional time; in such cases, jiwin will communicate the expected timeline to the requestor.
16.3 If you are not satisfied with jiwin's response to a privacy inquiry, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the independent government body responsible for enforcing the Data Privacy Act. Information on NPC complaint procedures is publicly available through official Philippine government channels.
Filipino Players: Our support team includes Filipino staff who are available to assist with privacy inquiries in English or Filipino-English. You are always welcome to communicate in the style you are most comfortable with — our team will match your communication preference.
jiwin is PAGCOR-regulated and fully compliant with the Philippine Data Privacy Act. Your personal data is secured, never sold, and always under your control. 21+ only.