Pinata Win Privacy Policy – Your Data Rights in the PH

1. Introduction

Welcome to the Pinata Win Privacy Policy. This document applies to all users of the Pinata Win website, mobile platform, and related services ("Platform"). When we say "Pinata Win," "we," "us," or "our," we're referring to the operator of the Pinata Win betting platform serving the Philippine market.

As a platform serving Filipino players, we understand how important it is to keep your personal information private and secure. You trust us with your details — your name, contact info, financial data — and we take that responsibility seriously. This Pinata Win Privacy Policy is designed to be straightforward, not filled with legal jargon that nobody actually reads.

By registering an account, making a deposit, or using any service on the Pinata Win platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal information as described herein. Kung hindi ka sang-ayon, please discontinue use of the platform and contact our support team.

2. Data We Collect

Pinata Win collects personal data in several ways — directly from you when you register or transact, automatically through your use of the platform, and from third-party verification services we use for compliance purposes. Here's what we collect:

We do not collect sensitive personal information beyond what is strictly required for identity verification and legal compliance. We never ask for your religious beliefs, political affiliation, or health data.

3. How We Use Your Data

Every piece of data Pinata Win collects serves a specific purpose. We use your personal information to:

• Verify your identity and ensure compliance with Philippine age verification requirements (21+ only).
• Process deposits and withdrawals via GCash, Maya, GrabPay, Coins.ph, InstaPay, PESONet, BDO, BPI, UnionBank, and Visa/Mastercard.
• Manage your account, including maintaining betting history, bonus tracking, and account security.
• Comply with legal obligations, particularly Anti-Money Laundering Act (AMLA) reporting requirements and NPC data processing obligations.
• Detect and prevent fraud, including identifying suspicious betting patterns, account takeover attempts, and prohibited activity.
• Provide customer support — so our team can resolve your issues quickly and accurately.
• Send you relevant communications, including account updates, security alerts, and (with your consent) promotional offers about Pinata Win.
• Improve our platform through analysis of aggregated, anonymised usage data to enhance features and fix issues.

We never use your data to make automated decisions that would significantly affect you without human oversight. If you receive a marketing communication and want to opt out, just contact our support team or click the unsubscribe link in the email.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act, every processing activity must have a lawful basis. Pinata Win relies on the following legal bases:

• Contractual necessity — Processing required to fulfil our obligations to you under the Pinata Win Terms and Conditions, such as account management and transaction processing.
• Legal obligation — Processing required to comply with Philippine laws, including AMLA, tax reporting, and NPC data processing requirements.
• Legitimate interests — Processing for fraud prevention, platform security, and improving our services, where your rights are not overridden by those interests.
• Consent — Where we process data specifically for marketing communications or non-essential cookies, we will always ask for your explicit consent first.

5. Data Sharing and Disclosure

Pinata Win does not sell, rent, or trade your personal data. We share your information only in the following limited circumstances:

• Payment processors — We share necessary financial data with GCash, Maya, GrabPay, InstaPay, and bank partners solely to process your deposits and withdrawals.
• Identity verification providers — Third-party KYC partners may process your ID documents to verify your identity. These providers are bound by strict data processing agreements.
• Regulatory authorities — We are legally required to disclose certain information to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory bodies upon lawful request.
• IT and security service providers — Cloud hosting, cybersecurity, and fraud detection vendors who process data on our behalf under strict confidentiality obligations.
• Legal proceedings — If required by a valid court order or other legal process under Philippine law.

6. Cookies and Tracking Technologies

Pinata Win uses cookies and similar tracking technologies to improve your experience on our platform. Here's what we use and why:

• Essential cookies — Required for the platform to function, including session management, login authentication, and security. You cannot opt out of these.
• Functional cookies — Remember your preferences, such as language settings and odds format. These improve your experience but are not essential.
• Analytical cookies — Help us understand how players use Pinata Win so we can improve navigation, fix errors, and enhance features. Data is aggregated and anonymised.
• Marketing cookies — Used only with your explicit consent to deliver relevant promotional content. You can withdraw consent at any time via your browser settings or account preferences.

Most browsers allow you to refuse or delete cookies through settings. However, disabling essential cookies may affect your ability to log in and use the platform properly. For full cookie management instructions, refer to your browser's help documentation.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Philippine law. Our standard retention periods are as follows:

• Account and identity data — Retained for the duration of your account plus five (5) years after closure, as required under AMLA and related regulations.
• Transaction and betting records — Retained for five (5) years to meet anti-money laundering and tax compliance requirements.
• Customer support communications — Retained for three (3) years from the date of the last communication.
• Marketing consent records — Retained until you withdraw consent, plus three (3) years for audit purposes.
• Technical logs — Retained for twelve (12) months for security and fraud investigation purposes.

When data is no longer required, we securely delete or anonymise it so it can no longer be linked to you personally.

8. Security Measures

Keeping your data safe is one of Pinata Win's top priorities. We've put in place a multi-layered security framework to protect your personal and financial information:

• Encryption — All data in transit is encrypted using TLS 1.3. Data at rest is encrypted using AES-256.
• Access controls — Only authorised Pinata Win personnel with a legitimate need can access your personal data. Access is logged and regularly audited.
• Two-factor authentication (2FA) — Available for all player accounts and mandatory for internal staff accessing the platform's administrative systems.
• Penetration testing — We engage independent cybersecurity firms to conduct regular penetration tests and vulnerability assessments.
• Incident response — In the event of a data breach affecting your rights, we will notify you and the National Privacy Commission within 72 hours, as required by the DPA and its Implementing Rules and Regulations.

Despite our best efforts, no system is 100% secure. We encourage you to use a strong, unique password for your Pinata Win account and enable two-factor authentication for extra protection.

9. Exercising Your Data Rights

To exercise any of your rights under the Philippine Data Privacy Act, simply reach out to our Data Protection Officer (DPO). Here's what to expect:

• Submit your request via email to dpo@pinatawin.net with a clear description of the right you wish to exercise.
• We may ask you to verify your identity before processing the request to prevent unauthorised access to your data.
• We will respond to your request within fifteen (15) working days of receipt, or notify you if more time is needed.
• In cases where we are unable to fulfil a request (e.g., due to a legal obligation to retain data), we will explain why clearly.
• Exercising your rights is free of charge. We will never charge you for accessing or correcting your own data.

10. Protection of Minors

Pinata Win is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under 21. If we discover that a minor has registered an account or provided data, we will immediately close that account and securely delete all associated personal information.

Parents and guardians who believe a minor may have registered on Pinata Win are encouraged to contact us immediately at support@pinatawin.net so we can take swift action. We take the protection of young people very seriously — huwag nating hayaan ang mga bata na makalaro sa platform na ito.

11. Changes to This Privacy Policy

Pinata Win may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Post the updated policy on this page with a revised effective date.
• Notify you via email or a prominent notice on the platform at least seven (7) days before significant changes take effect.
• Where required by law, seek your fresh consent before processing your data under new terms.

We encourage you to review this page periodically so you're always up to date on how Pinata Win handles your information. Your continued use of the platform after changes take effect constitutes acceptance of the updated Pinata Win Privacy Policy.

12. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Pinata Win Privacy Policy or your personal data, please contact:

• General Support: support@pinatawin.net
• Data Protection Officer: dpo@pinatawin.net
• Live Chat: Available 24/7 on the Pinata Win platform
• Response Time: Within 15 working days for formal data requests; under 24 hours for general enquiries

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. We would always prefer to resolve things directly first — but your right to escalate is always there, kabayan.