96win Privacy Policy

1.1 This Privacy Policy applies to all personal data processed by 96win in connection with the operation of the 96win online gaming platform available at 96win.bet. It covers all registered players, prospective registrants who visit the site without registering, and any individuals who contact 96win for support or other purposes.

1.2 96win is committed to processing personal data lawfully, fairly, and transparently in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Republic of the Philippines (the "DPA"), its implementing rules and regulations, and the issuances of the National Privacy Commission (NPC).

1.3 The processing of your personal data is also subject to our Terms & Conditions, which govern your use of the 96win platform. This Privacy Policy should be read together with the Terms & Conditions available at 96win.bet/terms-conditions.

1.4 For the purposes of the DPA, 96win acts as the personal information controller in respect of all personal data collected from and about players and platform users. 96win determines the purposes for which, and the manner in which, personal data is processed.

2.1 The personal information controller responsible for your data in connection with 96win is the operator of the 96win platform. All inquiries, requests, and complaints relating to personal data should be addressed to the 96win Data Protection Officer (DPO) using the contact details provided in Section 16 of this Policy.

2.2 96win has appointed a Data Protection Officer in compliance with Section 21 of the DPA. The DPO is responsible for ensuring that 96win's data processing activities comply with applicable Philippine data privacy laws and regulations, and for serving as the primary point of contact for data subjects and the National Privacy Commission.

2.3 96win has registered its data processing systems with the National Privacy Commission as required under the DPA and its implementing regulations. Players may verify 96win's NPC registration status directly with the NPC.

3.1 96win collects the following categories of personal data in connection with the operation of the platform:

A. Registration and Identity Data

• Full legal name as it appears on a Philippine government-issued ID;
• Date of birth (for age verification — minimum 21 years required);
• Registered Philippine mobile number (used as primary identifier and for OTP delivery);
• Email address (where provided);
• Username and password (password stored in irreversibly hashed form — never in plain text).

B. KYC Verification Data

• Photographic copies of Philippine government-issued identification documents (passport, SSS UMID, LTO driver's license, PRC ID, PhilSys National ID);
• Selfie photograph for liveness verification;
• Proof of payment method ownership where required by compliance procedures.

C. Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and payment channel references (GCash, PayMaya, BPI, BDO, Metrobank);
• Payment account identifiers (e.g., mobile number linked to GCash) — full payment card numbers are never stored by 96win;
• Wallet balances, bonus credits, and transaction history.

D. Gaming and Activity Data

• Game session logs including games played, bet amounts, outcomes, and session durations;
• Responsible gaming settings activated (deposit limits, self-exclusion periods);
• Bonus and promotion eligibility records.

E. Technical and Device Data

• IP address and approximate geolocation (city/region level);
• Device type, operating system, and browser type;
• Session timestamps, login history, and access logs;
• Cookie identifiers and analytics data (see Section 7).

F. Communications Data

• Records of your communications with 96win support via live chat and email;
• Survey responses and feedback submissions where voluntarily provided.

4.1 Directly from you — when you register an Account, complete KYC verification, make deposits or withdrawal requests, contact customer support, participate in promotions, respond to surveys, or update your account settings.

4.2 Automatically through platform use — when you navigate, play games, or transact on the 96win platform, our servers automatically record technical data including your IP address, session timestamps, device characteristics, and activity logs.

4.3 Via cookies and similar tracking technologies — as described in Section 7, 96win uses cookies to maintain session integrity, prevent fraud, and improve platform performance.

4.4 From payment service providers — when you initiate a deposit or withdrawal, the relevant payment provider (e.g., GCash, PayMaya, BPI) transmits transaction confirmation data to 96win. 96win does not receive or store full payment account credentials — only reference identifiers and confirmation status.

4.5 From identity verification providers — where 96win uses automated KYC verification tools, identity data provided by you may be processed by a third-party verification service operating under 96win's instructions and applicable Philippine data privacy law.

5.1 96win processes your personal data for the following specific, legitimate purposes. Each processing activity is carried out on one or more lawful bases under the DPA:

5.2 Where processing is based on legitimate interests, 96win has assessed that those interests are not overridden by the fundamental rights and freedoms of data subjects, taking into account the reasonable expectations of Filipino players using an online gaming platform operating under PAGCOR oversight.

6.1 96win may share your personal data with the following categories of recipients, solely to the extent necessary for the stated purpose:

• Payment Processors: GCash (G-Xchange Inc.), PayMaya Philippines Inc., and Philippine banking partners (BPI, BDO, Metrobank) receive transaction data necessary to process your deposits and withdrawals. These entities have their own privacy policies and are regulated by the Bangko Sentral ng Pilipinas (BSP).
• KYC and Identity Verification Providers: Where automated verification tools are used, your identification documents and biometric data (selfie) are shared with the verification provider solely for the purpose of confirming your identity. Such providers are bound by data processing agreements with 96win and applicable DPA requirements.
• Game Providers: Game software providers (e.g., Pragmatic Play, PG Soft, Jili Games) may receive anonymized or pseudonymized session identifiers to facilitate game delivery. Full personal data is not transferred to game providers.
• Regulatory Authorities: 96win will disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities where required by law, court order, or regulatory directive.
• Legal and Compliance Advisors: Professional advisors including lawyers and auditors bound by professional confidentiality obligations may access data to the extent necessary for their engagement.
• IT Service Providers: Cloud hosting and infrastructure providers that store or process 96win platform data operate under data processing agreements requiring compliance with the DPA and maintaining equivalent security standards.

6.2 In the event of a merger, acquisition, or sale of all or substantially all of 96win's business assets, personal data may be transferred to the acquiring entity, provided that the acquirer agrees to be bound by obligations at least as protective as those set out in this Privacy Policy and applicable Philippine law.

7.1 96win uses cookies and similar client-side technologies to operate and improve the platform. Cookies are small text files stored on your device by your browser when you visit 96win.bet. They allow the platform to remember your session, preferences, and activity.

7.2 96win uses the following types of cookies:

• Strictly Necessary Cookies: Required for the platform to function — they maintain your login session, store security tokens, and enable core features. These cannot be disabled without rendering the platform non-functional.
• Functional Cookies: Store your preferences such as display language and responsible gaming settings so you do not need to re-enter them on each visit.
• Analytics Cookies: Collect anonymized or aggregated data about how players interact with the platform, which pages are most visited, and where errors occur. This data is used to improve 96win's service. Analytics cookies are not linked to identifiable personal data.
• Security and Fraud Prevention Cookies: Help 96win identify suspicious activity, detect automated bot access, and protect player accounts from unauthorized access attempts.

7.3 You may control non-essential cookies through your browser settings. Disabling cookies other than strictly necessary ones will not prevent you from using 96win, but may affect certain platform features such as preference persistence.

7.4 96win does not use third-party advertising or behavioral tracking cookies. No cross-site tracking of your browsing activity outside of 96win.bet is conducted through cookies.

8.1 96win retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer. The following retention periods apply as a general guide:

• Account and Registration Data: Retained for the duration of your account plus five (5) years following account closure, in accordance with standard commercial and regulatory record-keeping requirements;
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years after the date of last transaction, as required under the Anti-Money Laundering Act (RA 9160, as amended);
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of transaction, in compliance with applicable AML and PAGCOR regulatory requirements;
• Gaming Session Logs: Retained for a minimum of two (2) years for responsible gaming monitoring and dispute resolution purposes;
• Customer Support Communications: Retained for two (2) years from the date of the last communication;
• Marketing Consent Records: Retained for as long as necessary to demonstrate compliance with consent requirements under the DPA;
• Technical and Analytics Data: Retained in anonymized or aggregated form for analytical purposes; identifiable technical logs retained for up to twelve (12) months.

8.2 Following the expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be attributed to an identified or identifiable individual.

8.3 Where data is the subject of an ongoing legal dispute, regulatory investigation, or compliance review, retention may be extended until the matter is resolved, regardless of the standard retention periods above.

9.1 96win implements organizational and technical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and 96win servers uses 256-bit TLS/SSL encryption. The 96win.bet domain enforces HTTPS exclusively — unencrypted HTTP connections are redirected;
• Encryption at Rest: Sensitive data stored on 96win servers, including government ID copies and financial identifiers, is encrypted at rest using AES-256 or equivalent standards;
• Password Security: Player passwords are stored using strong, industry-standard one-way hashing algorithms. 96win staff do not have access to plain-text passwords — the password reset process always issues a new credential rather than recovering an existing one;
• Access Controls: Access to personal data within 96win's systems is restricted to staff with a legitimate need to access that data for their role. Access is logged, audited, and reviewed periodically;
• Two-Factor Authentication: 96win's internal administrative systems require multi-factor authentication. Players are strongly encouraged to enable 2FA on their own accounts;
• Fraud Monitoring: Automated systems monitor account and transaction activity for indicators of fraud, unauthorized access, and suspicious patterns on a continuous basis.

9.2 Notwithstanding the above, no security system is completely impenetrable. 96win cannot guarantee the absolute security of your personal data against all possible threats. In the event of a personal data breach that is likely to result in significant harm to you, 96win will notify affected players and the National Privacy Commission in accordance with the DPA's breach notification requirements.

10.1 Right to Be Informed: You have the right to be informed of the manner in which your personal data is being, or will be, processed, including the identity of the data controller, the purposes of processing, and any transfers to third parties. This Privacy Policy fulfills 96win's obligation to inform you.

10.2 Right to Access: You have the right to obtain from 96win confirmation as to whether your personal data is being processed, and where it is, to access that data and receive a copy. Requests must be made in writing to the 96win DPO. 96win will respond within fifteen (15) business days of receiving a verified request.

10.3 Right to Rectification: You have the right to request correction of any inaccurate, incomplete, or outdated personal data held by 96win. You may update basic account information directly through your Account Settings. For KYC data corrections, please contact support.

10.4 Right to Erasure or Blocking: You have the right to request deletion or blocking of your personal data where the data is incomplete, outdated, false, or unlawfully obtained, or where it is no longer necessary for the purposes for which it was collected. Note that regulatory retention obligations under the AML Act and PAGCOR rules may prevent immediate deletion of certain categories of data even following a valid erasure request.

10.5 Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation, and 96win will cease processing unless 96win demonstrates compelling legitimate grounds that override your rights.

10.6 Right to Data Portability: You have the right to request a machine-readable copy of personal data you have provided to 96win, in a commonly used electronic format, to the extent technically feasible and where processing is based on consent or contract.

10.7 Right to Complain to the NPC: If you believe that 96win has processed your personal data in violation of the DPA, you have the right to file a complaint with the National Privacy Commission of the Philippines. We encourage you to contact 96win first to allow us to address your concern, but your right to approach the NPC directly is unconditional.

11.1 The 96win platform is not directed to children or to individuals below 21 years of age. 96win does not knowingly collect, process, or store personal data relating to persons under 21. If 96win discovers that personal data has been collected from an individual under 21, that data will be deleted immediately, the associated account will be terminated, and — where required by law — the matter will be reported to relevant authorities.

11.2 If you are a parent or guardian and you believe that a person under 21 in your care has provided personal data to 96win, please contact the 96win DPO immediately using the contact details in Section 16. 96win will take prompt action to investigate and remediate the situation.

12.1 The 96win platform is operated from the Philippines and is primarily designed to serve Filipino players. Most personal data processing occurs within the Philippines or on infrastructure with servers located in countries with substantially similar data protection standards.

12.2 Where personal data is transferred to a country outside the Philippines — for example, in connection with game software providers whose technical infrastructure is located abroad, or with internationally operating KYC verification providers — 96win ensures that such transfers are carried out under appropriate safeguards including contractual protections requiring the recipient to maintain standards equivalent to those imposed by the DPA.

12.3 96win does not transfer your personal data to countries or territories that have been assessed by the National Privacy Commission as providing inadequate levels of data protection, without first implementing appropriate contractual safeguards and, where required, notifying the NPC of the transfer.

13.1 96win will send you promotional and marketing communications — including information about new games, bonus offers, promotions, and platform updates — only if you have expressly consented to receive such communications during account registration or through your account settings.

13.2 Marketing communications may be delivered via SMS to your registered Philippine mobile number, and by in-platform notification. Each marketing message will clearly identify 96win as the sender and include clear instructions for withdrawing consent.

13.3 You may withdraw your marketing consent at any time by: (a) updating your communication preferences in your 96win Account Settings; or (b) contacting 96win support and requesting removal from marketing communications. Withdrawal of marketing consent will be actioned within five (5) business days. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred prior to withdrawal, and does not affect your account access or the services provided to you under your account.

13.4 Transactional and service communications — such as deposit confirmations, withdrawal notifications, KYC status updates, responsible gaming tool confirmations, and security alerts — are sent as a necessary part of operating your 96win account and are not subject to marketing opt-out preferences.

14.1 The 96win platform may contain references or links to third-party websites, payment services, or game providers. 96win is not responsible for the data privacy practices of third parties and does not control how those parties collect, use, or protect personal data.

14.2 When you interact with a third-party payment provider — for example, when initiating a GCash or PayMaya transaction — you are interacting with that third party's platform and are subject to their privacy policies. 96win encourages you to review the privacy policies of any third-party services you use in connection with your 96win account.

14.3 The inclusion of a payment provider, game provider, or other third-party service on the 96win platform does not constitute 96win's endorsement of that party's privacy practices. Any concerns about third-party data handling should be raised directly with the third party concerned.

15.1 96win may update or amend this Privacy Policy from time to time to reflect changes in applicable Philippine law, regulatory guidance from the National Privacy Commission, changes to 96win's data processing activities, or technological developments affecting the platform.

15.2 Where changes are material — meaning they significantly affect your rights as a data subject or 96win's data processing practices — 96win will provide notice by publishing the updated policy on the 96win platform with a revised "Last Updated" date and, where practicable, by sending an in-platform notification to registered players.

15.3 Your continued use of the 96win platform following publication of an updated Privacy Policy constitutes your acknowledgment of the updated policy. If you do not accept any changes, please cease using the platform and contact 96win to exercise your right to account closure and data erasure (subject to applicable retention obligations).

15.4 The current version of the 96win Privacy Policy is always available at 96win.bet/privacy-policy. The "Last Updated" date at the top of this page indicates when the most recent changes were made.

16.1 For any questions, concerns, or requests relating to this Privacy Policy or 96win's data processing activities, including the exercise of your data subject rights, please contact the 96win Data Protection Officer:

16.2 If you believe your data privacy rights have been violated and 96win has failed to adequately address your concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about the NPC complaint process is available through the NPC's official channels.

16.3 This Privacy Policy was last updated in January 2026. It supersedes all previous versions of the 96win Privacy Policy. The current version is the definitive version and is available at all times at 96win.bet/privacy-policy.