slotwin Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") is issued by the operator of the slotwin platform ("slotwin," "we," "us," "our") and governs the collection, use, storage, sharing, and protection of personal information provided by users ("you," "your") when accessing or using the slotwin website at slotwin.lat, its associated mobile site, and all related services, features, games, and payment functions (collectively, the "Platform").

This Policy is drafted in compliance with Republic Act No. 10173 — the Data Privacy Act of 2012 of the Philippines ("DPA") and its Implementing Rules and Regulations, as overseen by the National Privacy Commission ("NPC"). By registering an account on slotwin or continuing to use the Platform, you acknowledge that you have read, understood, and agree to the data practices described in this Policy.

This Policy applies to all personal data collected through the Platform regardless of the device or network used to access it. It does not apply to third-party websites, payment applications (such as GCash or Maya), or external services linked from the Platform — each of which is governed by its own privacy policy.

2 Data Controller

slotwin is the personal information controller ("PIC") for all personal data collected through the Platform within the meaning of the Philippine Data Privacy Act of 2012. As PIC, slotwin determines the purposes and means of processing your personal data and is responsible for ensuring that all processing activities comply with applicable Philippine data privacy law.

slotwin has appointed a Data Privacy Officer ("DPO") responsible for overseeing compliance with this Policy, the DPA, and NPC issuances. All data privacy inquiries, rights requests, and complaints may be addressed to the slotwin DPO at the contact details set out in Section 14 of this Policy.

Where slotwin engages third-party service providers to process personal data on its behalf, those providers operate as personal information processors ("PIPs") under written data processing agreements that bind them to security and confidentiality obligations consistent with the DPA.

3 Personal Data We Collect

slotwin collects personal data through multiple channels across the lifecycle of your account. The categories of personal data we collect are set out in the table below.

3.1 Data You Provide Voluntarily

Certain personal data is provided by you directly when you register, complete KYC, make deposits or withdrawals, contact support, or update your account settings. This data is necessary for specific purposes as described in Section 5.

3.2 Data Collected Automatically

When you access the slotwin Platform, certain technical and device data is collected automatically through standard web server logs, session management systems, and analytics tools. This data is used primarily for security monitoring, fraud prevention, and platform performance optimization. slotwin does not use this data to identify you personally except in the context of account security investigations.

4 Lawful Basis for Processing

slotwin processes your personal data only where a lawful basis under the Philippine Data Privacy Act applies. The lawful bases applicable to slotwin's processing activities are as follows:

• Contractual Necessity: Processing is necessary to perform the contract between you and slotwin — specifically, to operate your account, process deposits and withdrawals, and deliver game services.
• Legal Obligation: Processing is required to comply with Philippine law, including PAGCOR regulatory obligations, Anti-Money Laundering Act (RA 9160, as amended) requirements, Data Privacy Act compliance, and applicable NPC issuances.
• Legitimate Interest: Processing is necessary for slotwin's legitimate interests, including fraud prevention, platform security, abuse detection, and business analytics — where those interests are not overridden by your data protection rights.
• Consent: Where slotwin relies on consent as the lawful basis (principally for marketing communications), you will be given a clear and specific opportunity to consent, and you may withdraw that consent at any time without affecting the lawfulness of prior processing.

5 How We Use Your Personal Data

slotwin uses the personal data collected for the following purposes, each linked to a lawful basis as described in Section 4:

5.1 Account and Service Delivery

To create and maintain your slotwin account; to authenticate login sessions; to process deposits and withdrawals via GCash, Maya, and Philippine bank channels; to deliver game content; to apply bonuses and loyalty rewards; and to provide 24/7 customer support in English and Tagalog.

5.2 Regulatory and Legal Compliance

To perform identity verification (KYC) as required by PAGCOR framework and Philippine AML law; to monitor transactions for suspicious activity and fulfill mandatory AML reporting obligations; to comply with data retention requirements under applicable Philippine law; to respond to lawful requests from Philippine government authorities, courts, and regulatory bodies.

5.3 Security and Fraud Prevention

To detect, investigate, and prevent fraudulent activity including bonus abuse, multi-accounting, unauthorized access, and financial crime; to monitor login patterns for security anomalies; to enforce age verification and self-exclusion compliance; and to protect the integrity of games and financial transactions on the Platform.

5.4 Platform Improvement and Analytics

To analyze aggregated and anonymized usage patterns to improve Platform performance, game content selection, and user experience; to conduct internal research and product development; and to diagnose technical issues affecting Platform availability and speed on Philippine networks.

5.5 Marketing Communications (Consent-Based)

Where you have provided consent, to send you promotional communications about slotwin bonuses, new game launches, seasonal promotions, and platform updates via your preferred communication channel (email, SMS, or in-platform notification). You may opt out of marketing communications at any time through your account settings or by contacting support.

6 Sharing and Disclosure of Personal Data

slotwin does not sell, rent, or trade your personal data to third parties. We disclose personal data only in the circumstances described below:

6.1 Service Providers and Processors

slotwin engages third-party service providers to assist in operating the Platform, including payment processors (GCash/Maya/banks), game content providers (PG Soft, JILI, WM Live, and others), cloud infrastructure providers, KYC verification service providers, and customer support platform vendors. All such providers operate under binding data processing agreements requiring them to process personal data only on slotwin's documented instructions and to maintain security standards consistent with the DPA.

6.2 Regulatory and Government Authorities

slotwin is required by Philippine law to disclose certain personal data to regulatory and government authorities, including PAGCOR (for licensing compliance), the Anti-Money Laundering Council (AMLC) (for mandatory suspicious transaction reporting under RA 9160, as amended by RA 10927), the National Privacy Commission (for data breach notifications and regulatory inquiries), and Philippine courts or law enforcement agencies in response to valid legal orders.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of slotwin's business assets, personal data held by slotwin may be transferred to the successor entity as part of that transaction, subject to the acquiring entity's commitment to honor this Policy or provide you with notice of material changes and an opportunity to exercise your rights.

7 Cookies and Tracking Technologies

7.1 Types of Cookies Used

The slotwin Platform uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication, security token management, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and display options to provide a more personalized experience.
• Analytics Cookies: Collect aggregated, anonymized information about how players use the Platform to help slotwin identify performance issues and improve the user experience. No personally identifiable information is transmitted in analytics cookies.
• Security Cookies: Track login anomalies, detect bot activity, and support fraud prevention systems.

7.2 Managing Cookies

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including logging in and accessing your account balance. Disabling functional or analytics cookies will not affect your ability to play games or process transactions.

8 Data Retention Periods

slotwin retains personal data for as long as necessary to fulfill the purposes for which it was collected, comply with applicable Philippine legal obligations, or resolve active disputes. The retention periods applicable to the main categories of personal data are as follows:

• Account Registration Data: Retained for the duration of your active account plus 5 years following account closure, consistent with Philippine AML record-keeping requirements.
• KYC Identity Documents: Retained for a minimum of 5 years from the date of verification, as required by the Anti-Money Laundering Act as amended by RA 10927 (which extended the coverage of AML requirements to online gaming operators).
• Financial Transaction Records: Retained for 5 years from the date of each transaction in compliance with AMLC record-keeping obligations.
• Gaming Activity Logs: Retained for 2 years from the date of each session, used for dispute resolution, responsible gaming tool monitoring, and PAGCOR compliance audit purposes.
• Customer Support Records: Retained for 3 years from the date of the relevant interaction, used for quality assurance and dispute resolution.
• Technical and Device Data (Security Logs): Retained for 90 days for active security monitoring; extended retention (up to 2 years) may apply where a security incident is under active investigation.
• Marketing Preference Data: Retained until you withdraw consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with slotwin's data disposal procedures.

9 Security Measures

slotwin implements organizational, technical, and physical security measures appropriate to the nature and sensitivity of the personal data processed. These measures include but are not limited to:

• 128-bit SSL/TLS encryption for all data in transit between your device and slotwin servers;
• Encryption of sensitive data at rest, including KYC documents and payment account details;
• Role-based access controls limiting staff access to personal data to those with a documented operational need;
• Two-factor authentication for all slotwin staff accessing systems containing personal data;
• Regular third-party penetration testing and vulnerability assessments of Platform infrastructure;
• Automated security monitoring with 24/7 incident response capability;
• Data processing agreements with all third-party processors imposing equivalent security obligations;
• Staff training on data privacy obligations under the DPA and slotwin's internal policies.

9.1 Data Breach Response

In the event of a personal data breach that is reasonably likely to give rise to a serious risk of harm to affected data subjects, slotwin will notify the National Privacy Commission within 72 hours of becoming aware of the breach, as required under the DPA and NPC Circular No. 16-03. Affected data subjects will be notified without undue delay where the breach is likely to result in high risk to their rights and freedoms.

10 Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to personal data that slotwin holds about you. slotwin is committed to honoring these rights within the timelines required by law:

10.1 Right to Be Informed

You have the right to be informed that your personal data is being processed, the purposes for which it is being processed, and who it may be shared with. This Policy fulfills slotwin's obligation to provide this information.

10.2 Right of Access

You have the right to request a copy of the personal data that slotwin holds about you, together with information about how that data is processed. Requests for data access will be acknowledged within 3 business days and fulfilled within 15 business days of receipt of a verified request.

10.3 Right to Rectification

You have the right to request correction of inaccurate, incomplete, or outdated personal data. You may update most personal information directly through your slotwin account settings. Requests for correction of KYC data require submission of updated documentation through the support team.

10.4 Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other lawful basis applies, or where processing was unlawful. Please note that this right is subject to slotwin's legal retention obligations under PAGCOR regulations and Philippine AML law — data subject to mandatory legal retention cannot be erased prior to the expiry of the applicable retention period.

10.5 Right to Object

You have the right to object to processing of your personal data where slotwin relies on legitimate interests as the lawful basis, and where your particular circumstances mean that the impact on your rights and freedoms outweighs slotwin's interests. You also have an absolute right to object to processing for direct marketing purposes, which may be exercised at any time.

10.6 Right to Data Portability

Where slotwin processes your data on the basis of your consent or for contractual necessity, and that processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format. slotwin provides data portability exports in JSON or CSV format upon verified request.

10.7 Right to Lodge a Complaint

If you believe that slotwin has handled your personal data in a manner inconsistent with the Philippine Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Before lodging a complaint with the NPC, we encourage you to contact slotwin's DPO directly — most concerns can be resolved efficiently through our internal resolution process.

10.8 Exercising Your Rights

To exercise any of the rights described above, please contact slotwin's Data Privacy Officer using the details in Section 14. slotwin will verify your identity before processing any data subject rights request. We will not charge a fee for exercising your rights except where requests are manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may apply.

11 Minors and Age Restriction

The slotwin Platform is intended exclusively for use by adults aged 21 years or older, consistent with the minimum age requirement for casino-style gambling under the PAGCOR regulatory framework applicable in the Philippines. slotwin does not knowingly collect or process personal data from persons under the age of 21.

If slotwin becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to suspend the relevant account, securely delete the associated personal data to the extent not required for legal reporting purposes, and where applicable, report the matter to relevant Philippine authorities in accordance with PAGCOR obligations.

If you are a parent or guardian and believe that a person under 21 under your care has registered on the slotwin Platform, please contact our support team immediately at the details in Section 14 so that appropriate action can be taken promptly.

12 Cross-Border Data Transfers

In the course of operating the slotwin Platform, personal data may be transferred to or processed in jurisdictions outside the Philippines — for example, where slotwin's cloud infrastructure providers or international game content studios are located. slotwin ensures that all cross-border transfers of personal data are subject to appropriate safeguards consistent with NPC-recognized mechanisms under the Philippine Data Privacy Act.

These safeguards include the use of standard contractual clauses, data processing agreements requiring overseas processors to maintain standards equivalent to those required under the DPA, and where applicable, reliance on adequacy determinations issued by the NPC in respect of certain receiving jurisdictions.

Where a proposed cross-border transfer cannot be supported by an adequate safeguard recognized under the DPA, slotwin will seek your explicit consent to the transfer prior to its execution, except where the transfer is necessary for the performance of a contract directly in your interest or for the establishment, exercise, or defense of legal claims.

13 Changes to This Privacy Policy

slotwin reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC issuances, or Platform operations. When we make material changes to this Policy, we will notify registered Players via email or in-platform notification at least 7 days before the revised Policy takes effect.

The effective date at the top of this Policy reflects the date of the most recent material update. We encourage you to review this Policy periodically. Your continued use of the slotwin Platform after the effective date of any revised Policy constitutes your acknowledgment of the updated terms.

For changes that involve new processing purposes or new categories of data that require your consent under the DPA, slotwin will seek your renewed consent before the new processing begins, and your continued use of the Platform will not be treated as deemed consent to such changes.

14 Contact & Data Privacy Officer

For all matters relating to this Privacy Policy, the exercise of your data subject rights, or concerns about slotwin's data processing practices, please contact slotwin's Data Privacy Officer through the following channel:

slotwin's Data Privacy Officer is the designated point of contact for NPC inquiries and is registered with the National Privacy Commission of the Philippines consistent with NPC registration requirements for personal information controllers.

If you are not satisfied with slotwin's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines at privacy.gov.ph.