Your Privacy Matters: aoewin is committed to protecting your personal information and maintaining transparency about our data practices. This Privacy Policy complies with the Data Privacy Act of 2012 (Republic Act No. 10173) and PAGCOR regulatory requirements.
1. Introduction
This Privacy Policy explains how aoewin ("we," "us," "our," or "the Platform") collects, uses, processes, stores, and protects your personal information when you access or use our online gaming services. By registering an account or using aoewin's services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.
aoewin operates as a PAGCOR-licensed online gaming platform in the Philippines and is subject to Philippine data protection laws, including the Data Privacy Act of 2012 (DPA) and its Implementing Rules and Regulations. We are registered with the National Privacy Commission (NPC) as required by law and implement appropriate technical and organizational measures to protect your personal data.
This Privacy Policy applies to all users of the aoewin Platform, including visitors who browse without registering, registered players, and VIP members. It covers personal data collected through our website, mobile applications, customer support channels, and any other services we provide.
1.1 Data Controller
For purposes of data protection law, aoewin acts as the data controller responsible for determining the purposes and means of processing your personal information. Our Data Protection Officer can be contacted at the details provided in Section 14 of this policy.
3. How We Use Your Data
aoewin processes your personal information for the following legitimate purposes:
3.1 Account Management and Service Provision
- Create, maintain, and manage your gaming account
- Process your deposits, withdrawals, and gaming transactions
- Enable you to participate in games, place bets, and claim winnings
- Provide customer support and respond to your inquiries
- Process bonus claims and verify compliance with promotional terms
- Maintain your transaction history and gaming records
3.2 Verification and Compliance
- Verify your identity and age (21+ requirement)
- Conduct Know Your Customer (KYC) checks as required by PAGCOR
- Prevent underage gambling and unauthorized account access
- Comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations
- Monitor for suspicious transactions and report to regulatory authorities when legally required
- Ensure compliance with self-exclusion and responsible gaming commitments
3.3 Fraud Prevention and Security
- Detect, investigate, and prevent fraudulent activities, bonus abuse, and multi-accounting
- Monitor for collusion, cheating, and other prohibited conduct
- Protect against unauthorized access and cyber attacks
- Enforce our Terms & Conditions and platform rules
- Conduct security audits and risk assessments
3.4 Marketing and Communications
- Send promotional emails, SMS messages, and push notifications about bonuses, tournaments, and new games (only with your consent)
- Personalize offers based on your gaming preferences and history
- Conduct customer satisfaction surveys
- Send important account notifications, policy updates, and security alerts (these are not marketing and cannot be opted out of)
3.5 Platform Improvement and Analytics
- Analyze usage patterns to improve user experience and Platform functionality
- Conduct A/B testing on features and designs
- Optimize game offerings and identify popular content
- Generate aggregated, anonymized statistics for business intelligence
- Debug technical issues and improve system performance
3.6 Legal and Regulatory Obligations
- Respond to legal processes including court orders, subpoenas, and regulatory requests
- Cooperate with law enforcement investigations
- Comply with tax reporting obligations
- Maintain records as required by PAGCOR and other regulatory authorities
- Defend legal claims and enforce our rights
4. Legal Basis for Processing
Under the Data Privacy Act of 2012, we process your personal information based on the following legal grounds:
- Consent: You have given explicit consent for us to process your personal data for specific purposes such as marketing communications. You may withdraw consent at any time through your account settings or by contacting us.
- Contract Performance: Processing is necessary to fulfill our contractual obligations to you under our Terms & Conditions, including providing gaming services, processing transactions, and managing your account.
- Legal Obligation: We are legally required to process certain data to comply with PAGCOR regulations, anti-money laundering laws, tax obligations, and other legal requirements in the Philippines.
- Legitimate Interests: We process data based on our legitimate business interests in fraud prevention, security, platform improvement, and analytics, provided these interests do not override your fundamental rights and freedoms.
5. Data Sharing and Disclosure
aoewin does not sell your personal information to third parties. However, we may share your data with the following categories of recipients when necessary for the purposes described in this policy:
5.1 Service Providers and Business Partners
We engage third-party service providers to perform functions on our behalf:
- Payment Processors: GCash, PayMaya, banks, and other payment service providers to process deposits and withdrawals
- Game Providers: Third-party software developers whose games appear on our Platform
- Identity Verification Services: KYC verification vendors that confirm your identity and age
- Cloud Infrastructure Providers: Hosting services that store and process data on our behalf
- Customer Support Tools: Live chat, ticketing, and CRM platforms
- Marketing and Analytics Platforms: Email service providers, SMS gateways, analytics tools (only for permitted marketing activities)
All service providers are contractually obligated to maintain confidentiality and use your data only for the specified purposes. They are prohibited from using your personal information for their own marketing or other unrelated purposes.
5.2 Regulatory and Government Authorities
We disclose personal information to regulatory bodies and government agencies when legally required:
- Philippine Amusement and Gaming Corporation (PAGCOR) for licensing compliance and regulatory audits
- Anti-Money Laundering Council (AMLC) for suspicious transaction reports
- Bureau of Internal Revenue (BIR) for tax reporting and withholding obligations
- National Privacy Commission (NPC) in response to data breach notifications or compliance inquiries
- Law enforcement agencies pursuant to valid legal process or court orders
5.3 Corporate Transactions
In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring or successor entity, subject to the same privacy protections outlined in this policy.
5.4 Legal Protection and Safety
We may disclose personal information if we believe in good faith that such disclosure is necessary to:
- Protect the rights, property, or safety of aoewin, our users, or the public
- Detect, prevent, or address fraud, security, or technical issues
- Enforce our Terms & Conditions or investigate potential violations
- Respond to claims of illegal activity or infringement of third-party rights
6. Data Security Measures
aoewin implements industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security controls include:
- Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. Sensitive data at rest, including passwords and payment information, is encrypted using AES-256 encryption.
- Access Controls: Personal data is accessible only to authorized personnel on a need-to-know basis. We use role-based access controls and multi-factor authentication for administrative access.
- Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation services.
- Regular Security Audits: We conduct periodic security assessments, penetration testing, and vulnerability scans to identify and remediate potential weaknesses.
- Secure Data Centers: Data is hosted in ISO 27001 certified data centers with physical security controls including surveillance, access logging, and environmental monitoring.
- Employee Training: All staff undergo mandatory data protection training and are bound by confidentiality obligations.
- Incident Response: We maintain an incident response plan to detect, contain, and remediate security breaches, with notification procedures compliant with the Data Privacy Act.
Despite our security measures, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and should not share your password with anyone. If you suspect unauthorized access to your account, contact us immediately.
7. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on data type:
- Account Information: Retained for the duration of your active account plus seven (7) years after account closure to comply with PAGCOR recordkeeping requirements and potential legal claims.
- Transaction Records: Maintained for ten (10) years after the transaction date as required by anti-money laundering regulations and tax laws.
- Identity Verification Documents: Retained for seven (7) years after account closure or last transaction, whichever is later.
- Gaming and Betting History: Maintained for seven (7) years to comply with gaming regulations and for dispute resolution purposes.
- Marketing Communications: Retained until you withdraw consent or for three (3) years from last interaction, whichever is earlier.
- Technical Logs: Stored for ninety (90) days for security and troubleshooting purposes, then automatically purged.
- Self-Exclusion Records: Maintained permanently to honor lifetime exclusion requests and prevent account reopening.
After the applicable retention period expires, personal data is securely deleted or anonymized such that you can no longer be identified. Anonymized data may be retained indefinitely for statistical and analytical purposes.
8. Your Privacy Rights
Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:
8.1 Right to Information
You have the right to be informed about the collection and processing of your personal data. This Privacy Policy serves as our primary means of providing that information.
8.2 Right of Access
You may request a copy of the personal data we hold about you. You can access most of your information directly through your account dashboard, including transaction history, gaming records, and account details. For additional information, contact our Data Protection Officer.
8.3 Right to Rectification
You may request correction of inaccurate or incomplete personal information. You can update most information through your account settings. For changes to verified information (name, date of birth), you must contact customer support and provide supporting documentation.
8.4 Right to Erasure (Right to be Forgotten)
You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or you withdraw consent. However, we may retain data when legally required (e.g., for regulatory compliance, tax obligations, or ongoing legal proceedings).
8.5 Right to Object and Restrict Processing
You may object to processing based on legitimate interests or for direct marketing purposes. You can opt out of marketing communications at any time using the unsubscribe link in emails or through account settings. Note that you cannot opt out of essential service communications (e.g., account security alerts, regulatory notifications).
8.6 Right to Data Portability
Upon request, we will provide your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) to facilitate transfer to another service provider where technically feasible.
8.7 Right to Withdraw Consent
Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing conducted before withdrawal.
8.8 How to Exercise Your Rights
To exercise any of these rights, contact our Data Protection Officer at [email protected] or submit a request through your account dashboard. We will respond to verified requests within fifteen (15) days as required by law. If your request is complex or we receive numerous requests, we may extend the response period and will notify you accordingly.
We may request additional information to verify your identity before processing rights requests. If we deny your request, we will provide reasons and inform you of your right to file a complaint with the National Privacy Commission.
9. Cookies and Tracking Technologies
aoewin uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze Platform usage, and deliver personalized content.
9.1 Types of Cookies We Use
- Essential Cookies: Required for basic Platform functionality including authentication, security, and load balancing. These cannot be disabled without preventing access to our services.
- Performance Cookies: Collect anonymous usage statistics to help us understand how visitors interact with the Platform and identify areas for improvement.
- Functionality Cookies: Remember your preferences such as language settings, display options, and favorite games to provide a personalized experience.
- Marketing Cookies: Track your activity across sessions to deliver targeted advertisements and promotional offers. These are only set with your consent.
9.2 Third-Party Cookies
Some cookies are placed by third-party service providers such as analytics platforms (Google Analytics), payment processors, and game providers. These parties have their own privacy policies governing their data collection practices.
9.3 Managing Cookies
You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though this may affect Platform functionality. You can adjust cookie settings in your account preferences to disable non-essential cookies. Note that disabling essential cookies will prevent you from logging in and using our services.
10. Third-Party Services and Links
Our Platform may contain links to third-party websites, payment processors, or game providers. aoewin is not responsible for the privacy practices or content of external sites. We encourage you to review the privacy policies of any third-party services you access through our Platform. Third-party game providers may collect additional data during gameplay; consult their respective privacy policies for details.
11. International Data Transfers
Your personal information is primarily processed and stored within the Philippines. However, some of our service providers (such as cloud infrastructure providers or payment processors) may process data in other countries. When we transfer personal data internationally, we ensure appropriate safeguards are in place through standard contractual clauses, adequacy decisions, or other mechanisms recognized under Philippine law to protect your data.
12. Children's Privacy
aoewin's services are strictly intended for individuals who are twenty-one (21) years of age or older. We do not knowingly collect personal information from minors. Our age verification processes are designed to prevent underage access. If we become aware that we have inadvertently collected personal data from a person under 21, we will immediately delete the account, forfeit all funds, and permanently block access. If you believe a minor has created an account, please contact us immediately at [email protected].
13. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform functionality. The "Last Updated" date at the top of this document indicates the most recent revision. Material changes will be communicated via email or prominent on-site notification at least thirty (30) days before taking effect. Your continued use of the Platform after changes become effective constitutes acceptance of the revised Privacy Policy. We encourage you to review this policy periodically.
Consent Acknowledgment: By using aoewin's services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal information as described herein.