topwin1 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how topwin1 ("topwin1," "we," "us," or "our") collects, uses, discloses, stores, and protects the personal information of individuals ("you," "your," or "Player") who access or use the topwin1 online gaming platform available at topwin1.vip (the "Platform").

topwin1 is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and all applicable PAGCOR guidelines on player data protection.

This Policy applies to all personal data collected through the Platform, including data collected during account registration, identity verification, gameplay, financial transactions, customer support interactions, and your use of any features or services offered by topwin1.

2. Data Controller Information

topwin1 acts as the data controller for the personal information collected through the Platform. As data controller, topwin1 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection laws.

For all privacy-related inquiries, requests, or concerns, you may contact our Data Privacy Officer using the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

topwin1 collects the following categories of personal data from players and platform users:

3.1 Identity and Registration Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify that you meet the 21+ age requirement)
• Gender (optional, where provided)
• Nationality and country of residence
• Government-issued identification number (e.g., Philippine passport number, driver's license number, PhilSys ID number)

3.2 Contact Information

• Mobile phone number (used for account verification, OTP delivery, and support communications)
• Email address
• Residential address (including barangay, city/municipality, province, and postal code)

3.3 Financial and Transaction Data

• GCash account number and registered name
• PayMaya account details
• Bank account details (BPI, BDO, Metrobank) where used for transactions
• Visa and Mastercard details (card number, expiry, and billing address) where applicable
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used
• Account balance information

3.4 Gaming and Behavioral Data

• Game history, including games played, bet amounts, win/loss records, and session durations
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)
• Platform preferences and settings

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session logs, including login timestamps and activity logs
• Cookie identifiers and similar tracking data (see Section 9)

3.6 Communications Data

• Records of your communications with topwin1 customer support, including live chat transcripts and email correspondence
• Feedback, complaints, and dispute records

4. How We Collect Your Data

topwin1 collects your personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically: Through cookies, web beacons, and similar technologies when you access and use the Platform (see Section 9).
• From third-party payment providers: When you make a deposit or withdrawal via GCash, PayMaya, BPI, BDO, Metrobank, Visa, or Mastercard, we receive transaction confirmation data from these providers.
• From identity verification services: topwin1 may use third-party KYC and identity verification services to verify the accuracy of the information you provide during registration.
• From fraud prevention and compliance services: topwin1 may receive data from third-party fraud detection and anti-money laundering screening services as part of our compliance obligations.

5. How We Use Your Personal Data

topwin1 uses your personal data for the following purposes:

• To create, manage, and maintain your topwin1 account
• To verify your identity and age (21+ requirement) in compliance with PAGCOR guidelines
• To process deposits, withdrawals, and other financial transactions
• To provide customer support and respond to your inquiries and complaints
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities
• To comply with our legal and regulatory obligations under Philippine law and PAGCOR requirements
• To administer bonuses, promotions, and loyalty programs
• To personalize your gaming experience and recommend relevant games or promotions
• To send you account-related communications, including transaction confirmations, security alerts, and policy updates
• To send you marketing communications about topwin1 promotions and offers, where you have consented to receive such communications
• To monitor and improve platform performance, security, and user experience
• To enforce our Terms & Conditions and other platform policies
• To support responsible gaming initiatives, including monitoring for signs of problem gambling and administering self-exclusion requests

6. Legal Basis for Processing

topwin1 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications.
• Contractual necessity: Where processing is necessary to perform our contract with you, including operating your account, processing transactions, and providing gaming services.
• Legal obligation: Where processing is required to comply with applicable laws and regulations, including PAGCOR licensing requirements, anti-money laundering obligations, and tax reporting requirements.
• Legitimate interests: Where processing is necessary for topwin1's legitimate business interests, such as fraud prevention, platform security, and improving our services, provided that such interests are not overridden by your rights and interests.

7. Sharing Your Personal Data

topwin1 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

7.1 Service Providers and Data Processors

topwin1 engages trusted third-party service providers who process personal data on our behalf, including:

• Payment processors and e-wallet providers (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard) for the purpose of processing financial transactions
• Identity verification and KYC service providers for the purpose of verifying player identity and age
• Fraud detection and anti-money laundering screening services
• Cloud hosting and data storage providers operating secure server infrastructure
• Customer support platform providers facilitating live chat and email support
• Analytics service providers helping us understand platform usage and improve user experience

All third-party service providers engaged by topwin1 are contractually required to process your personal data only in accordance with our instructions and to implement appropriate security measures to protect your data.

7.2 Regulatory and Law Enforcement Authorities

topwin1 may disclose your personal data to PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), or other competent Philippine government authorities where required by law, court order, or regulatory directive. topwin1 will notify you of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of topwin1's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that may result.

7.4 With Your Consent

topwin1 may share your personal data with other third parties where you have given your explicit consent to such sharing.

8. Data Retention

topwin1 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements.

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and applicable anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of 2001 (Republic Act No. 9160) and its amendments.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the transaction for which verification was conducted.
• Customer support records: Retained for three (3) years from the date of the interaction, unless a longer retention period is required for dispute resolution or legal proceedings.
• Marketing consent records: Retained until you withdraw your consent or for three (3) years from the date of consent, whichever is earlier.

When your personal data is no longer required for the purposes for which it was collected and no legal obligation requires its continued retention, topwin1 will securely delete or anonymize your data.

9. Cookies and Tracking Technologies

topwin1 uses cookies and similar tracking technologies to operate and improve the Platform, personalize your experience, and analyze platform usage. A cookie is a small text file placed on your device when you visit the Platform.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against fraudulent activity. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences and settings, such as your preferred language and display options, to provide a more personalized experience.
• Analytics Cookies: Help us understand how players use the Platform by collecting aggregated, anonymized data about page visits, session durations, and feature usage. This data is used to improve platform performance and user experience.
• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, unauthorized access, and other security threats on the Platform.

9.2 Managing Cookies

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform and your ability to access some features. Strictly necessary cookies cannot be disabled as they are essential for the Platform to operate.

10. Security of Your Personal Data

topwin1 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the topwin1 Platform
• Encryption of sensitive data at rest, including financial information and identity documents
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing
• Multi-factor authentication requirements for administrative access to systems containing personal data
• Secure data centers with physical access controls and environmental safeguards
• Employee training on data protection obligations and security best practices
• Incident response procedures for detecting, reporting, and managing personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, topwin1 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

While topwin1 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the security of your topwin1 account credentials.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by topwin1:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, and processed, as set out in this Privacy Policy.
• Right to Access: You have the right to request a copy of the personal data topwin1 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update most of your account information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to topwin1's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time through your account settings or by contacting our support team.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that topwin1 has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of these rights, please contact our Data Privacy Officer using the details in Section 14. topwin1 will respond to all data subject requests within thirty (30) days of receipt. We may require you to verify your identity before processing your request.

12. Children and Minors

The topwin1 Platform is strictly intended for individuals who are at least twenty-one (21) years of age. topwin1 does not knowingly collect personal data from individuals under the age of 21.

If topwin1 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account on the topwin1 Platform, please contact our support team immediately.

13. Changes to This Privacy Policy

topwin1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The most current version of this Policy will always be available on the topwin1 Platform.

Where changes are material, topwin1 will notify registered players via the email address or mobile number associated with their account at least fourteen (14) days before the changes take effect. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how topwin1 protects your personal data.

14. Contact and Data Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by topwin1, please contact our Data Privacy Officer:

• Email: [email protected]
• Live Chat: Available on all pages of the topwin1 Platform, daily from 8:00 AM to 12:00 MN (Philippine Standard Time)

topwin1 will acknowledge all privacy-related inquiries within two (2) business days and endeavor to resolve them within thirty (30) days of receipt.

If you are not satisfied with topwin1's response to your privacy inquiry, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.