megawin Privacy Policy

megawin is an online casino and gaming platform serving the Philippine market. As part of delivering our services — which include live dealer casino games, slot machines, bingo, fishing games, and other interactive entertainment — we necessarily collect and process certain personal information about our players and platform visitors.

We are committed to handling your personal data with the highest standards of care, transparency, and security. This Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

This Policy applies to all personal data collected through the megawin website, mobile platform, customer support channels, and any other touchpoints through which you interact with megawin. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.

If you have any questions about how megawin handles your personal data, please refer to Section 13 of this Policy for our contact details and Data Protection Officer (DPO) information.

megawin collects personal data through several channels: directly from you when you register or interact with our platform, automatically through your use of our services, and in limited cases from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued ID.
• Date of birth (used to verify the 21+ age requirement).
• Email address and mobile phone number.
• Residential address (city, province, postal code).
• Username and encrypted password.
• Government-issued ID details (e.g., Philippine National ID, passport, driver's license) submitted during KYC verification.

2.2 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment references.
• Payment method details (e.g., GCash mobile number, PayMaya account reference, BPI/BDO/Metrobank account details — stored only to the extent required for transaction processing and AML compliance).
• Account balance history and bonus credit records.

2.3 Gaming Activity Data

• Game session logs, including games played, bet amounts, outcomes, and session duration.
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests).
• Bonus and promotion participation history.

2.4 Technical & Device Data

• IP address and approximate geolocation (country and city level).
• Device type, operating system, and browser information.
• Cookie identifiers and session tokens (see Section 6 for full cookie details).
• Platform access logs, including login timestamps and session activity.

2.5 Communications Data

• Records of your communications with megawin's customer support team, including live chat transcripts and email correspondence.
• Feedback, survey responses, and complaint records.
• Marketing communication preferences (opt-in/opt-out status).

megawin uses the personal data we collect for the following specific purposes. We process your data only where we have a valid legal basis to do so (see Section 4):

megawin will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing another valid legal basis.

Under the Philippine Data Privacy Act of 2012, megawin processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfill our contractual obligations to you as a registered player — including account management, game provision, and payment processing.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including anti-money laundering laws, gaming regulations, and tax reporting requirements.
• Legitimate Interests: Processing necessary for megawin's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional personalization features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

megawin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances:

• Service Providers: We share data with trusted third-party service providers who assist us in operating the megawin platform. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting providers, customer support software providers, and fraud detection services. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection laws.
• Game Providers: Certain gaming activity data may be shared with our third-party game software providers to the extent necessary for game operation, fairness certification, and technical support.
• Regulatory Authorities: megawin is required by Philippine law to report certain information to gaming regulatory authorities and financial intelligence units. This includes suspicious transaction reports under anti-money laundering regulations and player data requested pursuant to lawful regulatory investigations.
• Law Enforcement: We may disclose personal data to law enforcement agencies, courts, or other government authorities where required by law, court order, or where we believe disclosure is necessary to protect the rights, property, or safety of megawin, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of megawin's assets, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and the privacy choices available to you.

In all cases of data sharing, megawin takes reasonable steps to ensure that recipient parties maintain appropriate data protection standards consistent with this Policy and applicable Philippine law.

megawin uses cookies and similar tracking technologies to enhance your experience on our platform, maintain session security, and gather analytics data that helps us improve our services. The types of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the megawin platform to function correctly. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences and settings (such as language preference and responsible gaming tool configurations) to provide a more personalized experience.
• Analytics Cookies: We use analytics cookies to understand how players interact with the megawin platform — which pages are visited most frequently, how long sessions last, and where technical issues occur. This data is used in aggregate form to improve platform performance and user experience.
• Security Cookies: These cookies help us detect and prevent fraudulent activity, unauthorized access attempts, and other security threats.

megawin does not use third-party advertising cookies or behavioral tracking cookies for the purpose of serving targeted advertisements on external websites.

megawin retains your personal data for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active account relationship with megawin, plus a minimum of five years following account closure, in compliance with Philippine anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, as required by Philippine financial regulations.
• KYC and Identity Verification Documents: Retained for a minimum of five years following account closure or the completion of the relevant transaction, whichever is later.
• Customer Support Communications: Retained for three years from the date of the last communication, unless a longer period is required for ongoing dispute resolution.
• Marketing Preferences and Consent Records: Retained for the duration of your account plus three years, to demonstrate compliance with consent requirements.
• Technical and Log Data: Retained for up to 12 months for security and fraud prevention purposes, after which it is anonymized or deleted.

When personal data is no longer required for any of the above purposes, megawin will securely delete or anonymize it in accordance with our internal data disposal procedures.

megawin implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and the megawin platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data stored in our databases is encrypted at rest.
• Access Controls: Access to personal data is restricted to megawin employees and contractors who have a legitimate need to access it for their job functions. All staff with data access are subject to confidentiality obligations and regular data protection training.
• Password Security: Player passwords are stored using strong one-way cryptographic hashing algorithms. megawin staff cannot view your password in plain text.
• Infrastructure Security: Our servers are hosted in secure data centers with physical access controls, redundant systems, and regular security patching and vulnerability assessments.
• Fraud Monitoring: megawin operates continuous automated monitoring systems to detect suspicious account activity, unauthorized login attempts, and potential data breaches.

While megawin takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying megawin immediately if you suspect unauthorized access to your account.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by megawin. You may exercise any of these rights by contacting our Data Protection Officer (see Section 13):

megawin will respond to all verified data rights requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We may need to verify your identity before processing your request to protect against unauthorized access to your data.

There is no charge for exercising your data rights in most circumstances. However, where requests are manifestly unfounded or excessive, megawin reserves the right to charge a reasonable administrative fee or decline to act on the request.

The megawin platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. megawin does not knowingly collect personal data from individuals under the age of 21.

If megawin becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the personal data in question, and return any deposited funds to the payment source used. If you believe that a minor has registered on the megawin platform, please contact us immediately at the details provided in Section 13.

The megawin platform may contain links to third-party websites or services, such as payment provider portals or regulatory authority websites. This Privacy Policy applies solely to the megawin platform and does not cover the data practices of any third-party websites or services.

megawin is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit through links on the megawin platform. The inclusion of a link to a third-party site does not constitute megawin's endorsement of that site or its privacy practices.

megawin reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes to this Policy, we will notify you by:

• Sending an email notification to your registered email address.
• Displaying a prominent notice on the megawin platform upon your next login.
• Updating the "Last Updated" date at the top of this page.

Your continued use of the megawin platform after any such changes have been communicated constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you should stop using the platform and may request account closure in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how megawin protects your personal data. Previous versions of this Policy are available upon request from our Data Protection Officer.

If you have any questions, concerns, or requests relating to this Privacy Policy or megawin's data processing practices, you may contact our Data Protection Officer (DPO) through the following channels:

We aim to acknowledge all privacy-related inquiries within 5 business days and to resolve them fully within 30 calendar days. For complex matters, we will keep you informed of progress throughout the process.

If you are not satisfied with megawin's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012. Information about filing a complaint with the NPC is available through official Philippine government channels.

megawin is committed to working constructively with you and with the NPC to resolve any data privacy concerns in a fair and timely manner.