win3max Privacy Policy

Win3max recognizes that your personal information belongs to you and that you have a right to know how it is handled. This Policy is designed to give you a clear, complete, and honest account of win3max's data practices — what we collect, why we collect it, who sees it, how long we keep it, and what you can do about it. We have written this Policy to comply with the requirements of the Philippine Data Privacy Act of 2012 and to reflect the specific operational context of a PAGCOR-regulated online gaming platform serving Filipino players.

Win3max's ability to operate a licensed gaming platform in the Philippines requires us to collect certain personal data as a matter of regulatory obligation — including identity verification for KYC compliance and transaction records for anti-money laundering purposes. Beyond these regulatory requirements, we collect only what is operationally necessary to deliver and improve the win3max service. We do not collect personal data for the purpose of selling it, and we do not share it with advertisers or data brokers.

• "Personal Data" means any information from which you can be identified, directly or indirectly, including your name, date of birth, mobile number, email address, government ID details, and financial information.
• "Processing" means any operation performed on Personal Data — including collection, recording, storage, use, disclosure, or deletion.
• "Data Subject" means you — the individual whose Personal Data is being processed by win3max.
• "Data Controller" means win3max as the entity that determines the purposes and means of processing your Personal Data.
• "KYC" means Know Your Customer — identity and age verification required by PAGCOR regulation.
• "AML" means Anti-Money Laundering — obligations imposed on win3max under the Anti-Money Laundering Act of 2001 (AMLA), as amended.
• "NPC" means the National Privacy Commission of the Philippines — the government authority responsible for administering and enforcing the Data Privacy Act.

Win3max acts as the Data Controller for Personal Data collected through the win3max Platform at win3max.vip. As Data Controller, win3max is responsible for determining the purposes for which your Personal Data is collected and the manner in which it is processed, stored, and protected.

Win3max has designated a Data Protection Officer ("DPO") as required by the Philippine Data Privacy Act. The DPO is responsible for overseeing win3max's compliance with this Policy and applicable data protection laws. For data-related inquiries, requests, or complaints, you may contact the win3max DPO through the contact details set out in Section 15.

4.1 Registration Data

When you create a win3max account, we collect:

• Full legal name
• Date of birth (to verify 21+ eligibility)
• Email address
• Philippine mobile number
• Username and encrypted password
• Preferred language and currency (Philippine Peso by default)

4.2 KYC and Identity Verification Data

To comply with PAGCOR's licensing requirements, before processing your first withdrawal we collect:

• A copy of a government-issued Philippine identification document (passport, driver's license, SSS/UMID card, or PhilSys National ID)
• A selfie photograph for identity matching
• Proof of payment method ownership where required (e.g., a screenshot of your GCash account registered under the same name)

4.3 Financial Data

To facilitate deposits and withdrawals, we collect:

• Transaction records including deposit amounts, withdrawal requests, and payment method details (GCash number, bank account reference, or USDT wallet address)
• Account balance history and bonus credit records
• Betting and wagering history as required for regulatory reporting

4.4 Technical and Usage Data

When you access the win3max Platform, we automatically collect:

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Session timestamps, pages visited, and features used
• Platform performance data and error logs

4.5 Communications Data

When you contact win3max support or participate in promotions, we collect records of your communications with us, including live chat transcripts, email correspondence, and any feedback or survey responses you submit.

Win3max uses your Personal Data for the following purposes:

Win3max does not use your Personal Data for automated individual decision-making that produces significant legal effects without human review, except where such processing is necessary for fraud prevention and is subject to human oversight.

Under the Philippine Data Privacy Act of 2012, win3max processes your Personal Data on the following legal bases:

• Contract Performance: Processing that is necessary to fulfill the agreement between you and win3max — including account management, game provision, and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR regulatory conditions, anti-money laundering obligations under the AMLA, KYC requirements, and other applicable Philippine laws.
• Legitimate Interest: Processing carried out for win3max's legitimate business interests, including fraud prevention, platform security, and analytics — where such interests do not override your fundamental rights and freedoms.
• Consent: Processing for purposes beyond operational necessity — such as sending you promotional communications — where you have given us your explicit, informed consent. You may withdraw this consent at any time.

Win3max does not sell, rent, or trade your Personal Data to any third party. We share your data only in the following limited circumstances:

• PAGCOR and Regulatory Authorities: As a PAGCOR-licensed operator, win3max is obligated to provide player data, transaction reports, and other information to PAGCOR upon request or as part of standard regulatory reporting.
• Anti-Money Laundering Council (AMLC): Win3max reports covered and suspicious transactions to the AMLC as required under the Anti-Money Laundering Act of 2001.
• Payment Providers: Transaction data is shared with GCash, PayMaya, BDO, BPI, Metrobank, and other payment processors solely to facilitate the processing of your deposits and withdrawals.
• KYC and Identity Verification Providers: Identity documents and selfie photographs are shared with our approved third-party KYC service provider for automated verification, subject to data processing agreements consistent with Philippine law.
• Platform Infrastructure Providers: Technical service providers who host or support the win3max Platform may have limited access to certain data as part of their service delivery, subject to strict confidentiality and security obligations.
• Law Enforcement: Where required by a court order, warrant, or other lawful compulsion issued under Philippine law, win3max will disclose personal data to law enforcement authorities.

Win3max works with carefully selected third-party service providers who assist in the operation and delivery of the Platform. These providers are granted access to Personal Data only to the extent necessary for the specific service they provide, and they are contractually bound by data processing agreements that require them to: process data only on win3max's instructions; maintain appropriate technical and organizational security measures; and not disclose or use Personal Data for any purpose other than the contracted service.

Categories of third-party service providers used by win3max include: cloud hosting and infrastructure providers; identity verification and KYC solution providers; payment gateway operators; customer support software providers; and responsible gaming technology providers. Win3max conducts due diligence on all service providers and reviews data processing arrangements periodically.

The win3max Platform uses cookies and similar tracking technologies to operate effectively, enhance your experience, and gather aggregated usage analytics. The types of cookies used by win3max are as follows:

• Essential Cookies: Required for the Platform to function — these enable login session management, security features, and core platform functionality. Essential cookies cannot be disabled without impairing Platform operation.
• Functional Cookies: Remember your preferences such as language settings, display options, and game history to personalize your experience on return visits.
• Analytics Cookies: Collect aggregated, anonymized data about how the Platform is used — pages visited, session length, device types — to help win3max improve the service. This data does not identify individual users.
• Security Cookies: Used for fraud detection and prevention purposes, including identifying suspicious login patterns and unusual account activity.

You may manage non-essential cookies through your browser settings. Disabling cookies may affect certain Platform features. Win3max does not use third-party advertising cookies or behavioral profiling cookies for the purpose of serving targeted advertising.

Win3max implements appropriate technical and organizational measures to protect your Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the win3max Platform
• Encryption of Personal Data stored in our databases, including passwords stored using one-way cryptographic hashing
• Role-based access controls limiting visibility of Personal Data to authorized personnel who have a legitimate operational need
• Regular security vulnerability assessments and penetration testing of Platform infrastructure
• Multi-factor authentication requirements for all win3max internal systems that handle player data
• Incident response procedures for detecting, containing, and reporting data security breaches in accordance with NPC notification requirements

Notwithstanding these measures, no internet transmission or digital storage system can be guaranteed absolutely secure. Win3max encourages you to protect your own account by using a strong, unique password and enabling two-factor authentication on your win3max account. You are also advised not to access your win3max account over unsecured public Wi-Fi networks.

Win3max retains your Personal Data for as long as your account remains active and for a minimum period following account closure, as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted from win3max's active systems or irreversibly anonymized so that it can no longer be linked to an identifiable individual.

As a Data Subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your Personal Data held by win3max:

• Right to be Informed: You have the right to know that win3max is collecting your Personal Data, the purposes for which it is being processed, and the basis on which it is being processed. This Policy fulfills that right.
• Right of Access: You may request a copy of the Personal Data win3max holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you may request that win3max delete your Personal Data. Note that this right is subject to overriding regulatory obligations — we cannot delete data that we are legally required to retain under PAGCOR or AMLA requirements.
• Right to Object: You may object to win3max processing your Personal Data for direct marketing purposes at any time. You may also object to processing based on legitimate interest on grounds relating to your particular situation.
• Right to Data Portability: You may request that win3max provide your Personal Data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Withdraw Consent: Where win3max processes your data based on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe win3max has violated your data privacy rights.

To exercise any of these rights, contact win3max's Data Protection Officer using the details in Section 15. Win3max will respond to valid requests within thirty (30) calendar days. In complex cases, this period may be extended by a further thirty (30) days, with notice provided to you of the reason for the extension.

The win3max Platform is strictly intended for persons aged 21 years and above in compliance with Philippine law and PAGCOR regulation. Win3max does not knowingly collect Personal Data from any person under the age of 21. The registration process requires confirmation of date of birth, and KYC verification confirms age before withdrawal processing.

If win3max becomes aware that Personal Data has been collected from a person under the age of 21, the Account will be immediately closed, all associated data will be deleted to the extent permitted by law, and the matter will be reported to PAGCOR as required. If you believe that a minor has registered on the win3max Platform, please contact us immediately using the details in Section 15.

Win3max may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform operations. When material changes are made, win3max will notify registered Players via email to their registered address and/or via a notice displayed upon login. The effective date of the revised Policy will be clearly stated at the top of this page.

Your continued use of the win3max Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated Policy. We encourage you to review this Policy periodically. If you do not agree with a revised Policy, you should cease using the Platform and may close your Account as described in the win3max Terms and Conditions.

For any questions, requests, or complaints regarding this Privacy Policy or win3max's data practices, please contact the win3max Data Protection Officer or support team through the following channels:

When submitting a data rights request, please include your full name as registered with win3max, your registered email address, and a clear description of the right you wish to exercise or the concern you wish to raise. Win3max may need to verify your identity before processing certain requests to protect against unauthorized access to your data.