pjwin Privacy Policy

pjwin ("pjwin", "we", "us", "our") is the operator of the online gaming platform accessible at pjwin.club and any associated mobile-accessible versions of the Platform (collectively, the "Platform"). This Privacy Policy ("Policy") applies to all personal data that pjwin processes in connection with your use of the Platform, including data collected during account registration, during gameplay, in connection with financial transactions, and through your communications with our support team.

This Policy should be read alongside pjwin's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By registering a pjwin account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Policy applies to all registered players of pjwin, including players based in Metro Manila, Cebu, Davao, and all other regions of the Philippines, as well as any other jurisdiction from which the Platform is lawfully accessible.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations as administered by the National Privacy Commission (NPC), pjwin is the Personal Information Controller in respect of all personal data collected and processed through the Platform.

As a Personal Information Controller, pjwin is responsible for determining the purposes for which, and the means by which, your personal data is processed. pjwin engages certain third-party service providers who act as Personal Information Processors, processing data on pjwin's behalf and strictly under pjwin's documented instructions and applicable data sharing agreements.

For all privacy-related enquiries, data subject rights requests, and complaints, you may contact pjwin's designated Data Protection Officer via [email protected] with the subject line "Data Privacy Request."

pjwin collects personal data across three primary categories. The specific data collected at each stage is described below:

3.1 Registration and Identity Data

3.2 Financial and Transaction Data

• GCash account number (last digits) associated with deposit and withdrawal transactions;
• Maya wallet reference numbers;
• Bank account name and partial account numbers for bank transfer transactions via BDO, BPI, Metrobank, or other approved banks;
• Deposit amounts, withdrawal amounts, transaction timestamps, and transaction reference IDs;
• Account balance history and wagering history.

3.3 Usage and Technical Data

• IP address and approximate geolocation at time of login and gameplay;
• Device type, operating system, browser type and version;
• Session duration and login timestamps;
• Games accessed, bet amounts, and game outcomes (for regulatory compliance and responsible gaming monitoring);
• Support chat transcripts and email correspondence with pjwin's support team.

pjwin collects personal data through the following means:

• Directly from you: When you register an account on pjwin, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account profile settings;
• Automatically during Platform use: Through cookies, web beacons, server logs, and similar tracking technologies that operate when you access and interact with the pjwin Platform;
• From payment processors: pjwin receives transaction confirmation data from GCash, Maya, and banking partners when you make a deposit or request a withdrawal;
• From identity verification providers: Where pjwin engages a third-party KYC verification service, that service may return identity confirmation data to pjwin following document verification;
• From fraud prevention services: pjwin may receive risk-score data from third-party fraud detection services to assist in identifying suspicious account activity.

pjwin processes your personal data only for specific, legitimate purposes. Each processing activity is carried out on one or more of the legal bases recognised under the Data Privacy Act of 2012:

pjwin does not sell your personal data to any third party. Your data may be shared only in the following circumstances and with the following categories of recipient:

• Payment processors: GCash, Maya (PayMaya), BDO, BPI, Metrobank, and other approved payment channels receive transaction data necessary to process your deposits and withdrawals. These processors are subject to their own privacy policies and regulatory obligations under Bangko Sentral ng Pilipinas (BSP) rules;
• Game studio providers: Game providers such as JILI, WM Live, Pragmatic Play, and PG Soft may receive anonymised or pseudonymised session identifiers necessary for game round integrity and dispute resolution. Full personal identity data is not shared with game studios;
• KYC and identity verification partners: Where pjwin uses a third-party service for identity document verification, the minimum necessary data is shared under a data processing agreement;
• Fraud detection services: pjwin may share hashed identifiers and behavioural signals with fraud prevention services to protect the Platform and its players;
• Regulatory and law enforcement authorities: pjwin is legally required to disclose personal data to the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities when required by law or a valid legal process. pjwin will notify affected players of such disclosures to the extent permitted by law;
• Business transfers: In the event of a merger, acquisition, or sale of all or a material part of pjwin's business assets, player personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. pjwin will notify affected players prior to any such transfer taking effect.

Some of pjwin's service providers — particularly game studio technical infrastructure and certain cloud hosting services — may process or store data in jurisdictions outside the Philippines, including in other parts of Asia.

Where personal data is transferred outside the Philippines, pjwin ensures that such transfers are subject to appropriate safeguards consistent with the Data Privacy Act of 2012, including: contractual data processing agreements that impose obligations equivalent to those applicable under Philippine law; and transfers only to jurisdictions or organisations that provide an adequate level of data protection as assessed by pjwin's Data Protection Officer.

If you wish to obtain information about the safeguards applied to any specific international data transfer, please contact pjwin via [email protected] with the subject line "International Transfer Enquiry."

pjwin retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

At the end of the applicable retention period, pjwin will securely delete or irreversibly anonymise your personal data unless a longer retention period is required by law or legitimate interests that override your privacy rights.

pjwin implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Security measures in place include:

• Encryption in transit: All data transmitted between your device and the pjwin Platform is encrypted using TLS 1.2 or higher. This is the same standard used by Philippine banking applications and GCash;
• Encryption at rest: Sensitive personal data stored on pjwin's servers — including KYC documents and financial data — is encrypted at rest using industry-standard AES-256 encryption;
• Access controls: Access to personal data within pjwin's systems is restricted on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations;
• Two-factor authentication: pjwin's internal systems require multi-factor authentication for staff access. The pjwin Platform also offers two-factor authentication to players via SMS OTP;
• Regular security assessments: pjwin conducts periodic reviews of its data security measures and responds promptly to identified vulnerabilities.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pjwin will notify you and the National Privacy Commission within the timeframes required under the Data Privacy Act of 2012.

pjwin uses cookies and similar tracking technologies (including web beacons and local storage) to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your login state while you navigate the Platform. These cannot be disabled without impairing core functionality.
• Functional cookies: Remember your preferences — such as your preferred lobby view or language setting — to improve your experience on return visits.
• Analytics cookies: Collect anonymised data on how players use the Platform — which pages are visited most, where players exit, and how long sessions last. This data helps pjwin improve the Platform experience for Filipino players.
• Security cookies: Used to detect and prevent fraudulent activity, including session hijacking and cross-site request forgery (CSRF) attacks.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent the pjwin Platform from functioning correctly, including preventing successful login. Blocking analytics cookies will not affect your gameplay experience.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in respect of your personal data held by pjwin:

To exercise any of these rights, contact pjwin at [email protected] with the subject line "Data Subject Rights Request" or via 24/7 live chat. pjwin will respond to your request within fifteen (15) days of receipt. pjwin will not charge a fee for responding to data subject rights requests unless they are manifestly unfounded or repetitive.

If you are dissatisfied with pjwin's response to a data subject rights request, or if you have concerns about pjwin's data processing practices, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at their official channels.

The pjwin Platform is strictly restricted to persons aged 21 and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. pjwin does not knowingly collect personal data from any person under the age of 21.

If pjwin becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted promptly, the associated account will be immediately suspended, and any funds in the account will be returned to the deposit source following investigation.

If you are a parent or guardian and believe a minor has registered a pjwin account, please contact our support team immediately via 24/7 live chat or at [email protected]. pjwin takes underage access seriously and will act promptly on all such reports.

pjwin processes certain personal data specifically in connection with its responsible gaming obligations. This processing is carried out in the legitimate interests of player protection and in compliance with regulatory expectations applicable to PAGCOR-aligned operators.

Responsible-gaming-related data processing at pjwin includes:

• Monitoring wagering patterns, session frequency, and deposit velocity to identify indicators of potentially problematic gambling behaviour;
• Maintaining records of self-exclusion requests, deposit limits, and cooling-off periods set by players;
• Sharing account status information with recognised self-exclusion registers operated under PAGCOR's responsible gaming framework, where applicable;
• Retaining records of responsible gaming interventions — including player-initiated limits and operator-initiated reviews — for regulatory audit purposes.

Players who self-exclude from pjwin will have their marketing consent treated as withdrawn for the duration of the self-exclusion period. pjwin will not send promotional communications to self-excluded players.

For full details of the responsible gaming tools available on pjwin, please visit our Responsible Gaming page.

pjwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The current version of this Policy, with its effective date, will always be published at pjwin.club/privacy-policy.

Where changes are material — affecting how pjwin uses your personal data in a way that is significantly different from what was described in the version you previously accepted — pjwin will notify you via your registered Philippine mobile number or via a notification within the Platform prior to the changes taking effect.

Continued use of the pjwin Platform following publication of a revised Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not agree with the revised Policy, you may request voluntary account closure as described in pjwin's Terms & Conditions.

For all privacy-related questions, data subject rights requests, and complaints, please contact pjwin's designated Data Protection Officer through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the pjwin Platform. For data privacy matters, please state "Data Privacy" at the start of your chat so the request is routed appropriately.
• Email (plain text — not a link): [email protected] — use subject line "Data Subject Rights Request" or "Privacy Complaint" as appropriate.

pjwin will acknowledge receipt of all privacy requests and complaints within three (3) business days and will provide a substantive response within fifteen (15) business days of receipt, or within such shorter period as may be required by the Data Privacy Act of 2012.

If you are not satisfied with pjwin's response to your privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines through their official channels. pjwin cooperates fully with NPC enquiries and investigations.