Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how one win ("one win," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "Player") who access or use the one win website at onewin.one and all associated services, features, and content (collectively, the "Platform").

This Policy applies to all personal data processed in connection with your use of the Platform, regardless of whether you are a registered player, a visitor browsing the site, or a person who contacts our support team. It covers data collected online through the Platform as well as data you may provide to us through other channels such as email or live chat.

one win is committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner. This Policy is designed to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

By registering an account on one win or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform and close your account.

2. Data Controller Information

For the purposes of the Philippine Data Privacy Act of 2012, one win acts as the Personal Information Controller in respect of the personal data collected through the Platform. This means we determine the purposes and means by which your personal data is processed.

Where we engage third-party service providers to process personal data on our behalf (for example, payment processors or KYC verification providers), those parties act as Personal Information Processors and are contractually bound to process your data only in accordance with our instructions and applicable data protection law.

For all privacy-related enquiries, requests, or complaints, please contact our designated Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

one win collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (for age verification — you must be 21 or older)
• Residential address, including city, province, and postal code
• Email address
• Mobile phone number
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., Philippine passport, driver's license, SSS/UMID card, PhilSys National ID)
• Proof of address documents (e.g., utility bills, bank statements)
• Selfie or facial image for liveness verification, where required
• Source of funds documentation, where required by AML regulations

3.3 Financial & Transaction Data

• GCash account reference or PayMaya / Maya account reference
• Bank account details (bank name, account number) for bank transfer transactions
• Debit card details (card number masked, expiry date) where applicable
• Deposit and withdrawal history, transaction amounts in Philippine Peso (PHP / ₱)
• Bonus and promotional activity records

3.4 Gaming & Behavioral Data

• Game history, bet amounts, win/loss records, and session durations
• Responsible gaming tool usage (deposit limits, self-exclusion requests, cooling-off periods)
• Platform preferences and settings

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Unique device identifiers
• Log data including pages visited, time spent, and clickstream data
• Cookie identifiers and session tokens

3.6 Communications Data

• Records of your communications with our customer support team via live chat or email
• Feedback, complaints, and dispute records

4. How We Collect Your Data

one win collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions.
• Automatically: When you use the Platform, we automatically collect technical and behavioral data through cookies, server logs, and similar technologies.
• From third parties: We may receive identity verification data from KYC/AML service providers, fraud prevention data from security partners, and payment confirmation data from payment processors such as GCash and Maya.
• From regulatory authorities: In limited circumstances, we may receive data from PAGCOR or other Philippine regulatory bodies in connection with compliance obligations.

5. How We Use Your Personal Data

one win uses your personal data for the following purposes:

• Account management: To register, verify, and maintain your one win player account.
• Identity verification: To verify your age (21+), identity, and eligibility to use the Platform in compliance with PAGCOR requirements.
• Payment processing: To process deposits and withdrawals in PHP via GCash, Maya, bank transfer, and debit card.
• Service delivery: To provide access to games, live casino, slots, bingo, and all other Platform features.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Legal & regulatory compliance: To comply with PAGCOR licensing conditions, Philippine AML laws, the Data Privacy Act, and other applicable regulations.
• Fraud prevention & security: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct.
• Responsible gaming: To monitor gaming behavior, enforce responsible gaming tools, and identify players who may need support.
• Platform improvement: To analyze usage patterns and improve the performance, security, and user experience of the Platform.
• Marketing communications: To send you promotional offers and updates about one win, where you have provided consent. You may opt out at any time.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, one win processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you (i.e., to operate your player account and deliver gaming services).
• Legal obligation: Processing required to comply with PAGCOR regulations, AML laws, tax obligations, and other applicable Philippine legal requirements.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Third Parties

one win does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

7.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf, including KYC/identity verification providers, payment processors (GCash, Maya, Philippine banks), fraud detection services, cloud hosting providers, and customer support platform operators. All such providers are contractually bound to process your data only as instructed by one win and in compliance with the Data Privacy Act of 2012.

7.2 Regulatory & Law Enforcement Authorities

We may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory directive.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of one win's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

7.4 With Your Consent

We may share your data with other parties where you have given your explicit prior consent to such sharing.

8. International Data Transfers

one win primarily stores and processes your personal data within the Philippines or in jurisdictions that provide an adequate level of data protection. Where personal data is transferred outside the Philippines — for example, to cloud infrastructure providers — one win ensures that appropriate safeguards are in place, including contractual clauses that meet the standards required by the National Privacy Commission.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the protections described in this Policy.

9. Data Retention

one win retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specific retention periods include:

• Active account data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in accordance with PAGCOR and AMLC record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years after the end of the business relationship, as required by Philippine AML regulations.
• Transaction records: Retained for a minimum of five (5) years in compliance with AMLC reporting obligations.
• Support communications: Retained for three (3) years from the date of the communication, or longer if related to an ongoing dispute or legal matter.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter for compliance documentation purposes.
• Technical log data: Retained for up to twelve (12) months for security and fraud prevention purposes.

When personal data is no longer required, one win will securely delete or anonymize it in accordance with our data disposal procedures.

10. Data Security

one win implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform
• Encryption of sensitive data at rest, including financial and identity information
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular security assessments, penetration testing, and vulnerability scanning
• Multi-factor authentication for administrative access to systems containing personal data
• Incident response procedures for detecting, reporting, and managing personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, one win will notify the National Privacy Commission and affected players in accordance with the timelines prescribed by the Data Privacy Act of 2012 and NPC regulations.

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for keeping your one win login credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

11. Cookies & Tracking Technologies

one win uses cookies and similar tracking technologies (such as local storage and session tokens) to operate and improve the Platform. The types of cookies we use are:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your one win account. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings and display options.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the Platform, helping us identify areas for improvement. We use privacy-respecting analytics tools and do not share this data with advertising networks.

one win does not use third-party advertising cookies, cross-site tracking pixels, or behavioral profiling technologies for marketing purposes.

You can control cookie settings through your browser preferences. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform, including your one win login session.

12. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by one win:

• Right to be informed: The right to be notified of how your personal data is collected and processed — which this Policy fulfills.
• Right of access: The right to request a copy of the personal data we hold about you and information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. We will respond to all verified requests within thirty (30) days, or within such extended period as permitted by applicable law. We may need to verify your identity before processing your request.

13. Minors & Age Restriction

The one win Platform is strictly intended for individuals who are 21 years of age or older, in accordance with the minimum legal gambling age in the Philippines. one win does not knowingly collect personal data from persons under 21 years of age.

If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, delete the personal data, and return any deposits at our discretion. If you believe a minor has registered on the Platform, please contact us immediately at the details provided in Section 15.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms.

14. Changes to This Policy

one win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material changes will be communicated to registered players via email or prominent notice on the Platform at least seven (7) days before taking effect, where practicable.

The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

15. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the Platform
• Response Time: We aim to respond to all privacy requests within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information about how to file a complaint with the NPC is available on the NPC's official website.

Your Privacy Matters: one win is committed to handling your personal data with the highest standards of care and transparency. If you ever have concerns about how your data is being used, please reach out — we are here to help.