256phwin Privacy Policy

1. Introduction

1.1 256phwin is committed to protecting the privacy and personal data of all players who use our online casino and sports betting platform. We understand that trust is the foundation of a good gaming relationship, and we take our data protection responsibilities seriously.

1.2 This Policy applies to all personal information collected through the 256phwin website, mobile platform, customer support channels, and any other interaction you have with 256phwin. It covers players from across the Philippines, including those in Manila, Cebu, Davao, Quezon City, Makati, and all other regions.

1.3 This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and 256phwin.

1.4 256phwin acts as the data controller in respect of the personal information you provide to us. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws, including the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

2. Personal Data We Collect

2.1 Registration Data. When you create a 256phwin account, we collect the following information:

• Full legal name as it appears on your government-issued ID;
• Date of birth (to verify that you are at least 21 years of age);
• Residential address, including city, province, and postal code;
• Email address;
• Mobile phone number;
• Username and encrypted password.

2.2 Identity Verification (KYC) Data. To comply with our Know Your Customer obligations, we may collect:

• Copies of government-issued photo identification (e.g., Philippine passport, SSS ID, PhilHealth ID, driver's license, UMID);
• Proof of residential address (e.g., utility bill, bank statement);
• Proof of payment method ownership (e.g., screenshot of GCash or PayMaya account, bank statement);
• Selfie or live photo for identity confirmation purposes.

2.3 Financial Data. When you make deposits or request withdrawals, we collect:

• Payment method details (e.g., GCash mobile number, PayMaya account details, bank account information for BPI, BDO, Metrobank, or UnionBank);
• Transaction history, including deposit amounts, withdrawal amounts, and dates;
• Currency information (Philippine Peso / ₱).

2.4 Gaming Activity Data. We automatically record information about your gaming activity, including:

• Games played, bets placed, and outcomes;
• Session duration and frequency of play;
• Bonus and promotion usage;
• Responsible gaming tool activations (e.g., deposit limits, self-exclusion requests).

2.5 Technical Data. We collect technical information when you access the platform, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser type;
• Pages visited, links clicked, and time spent on the platform;
• Referring website or source.

2.6 Communications Data. When you contact our support team, we retain records of your communications, including emails, live chat transcripts, and any documents you submit.

3. How We Collect Your Data

3.1 Directly from You. The majority of personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in promotions.

3.2 Automatically. We collect certain technical data automatically through cookies, web beacons, and similar tracking technologies when you access the 256phwin platform. Please refer to Section 9 of this Policy for more information on our use of cookies.

3.3 From Third Parties. We may receive information about you from third-party service providers, including payment processors (such as GCash and PayMaya), identity verification services, fraud prevention agencies, and analytics providers. We only use such information in accordance with this Policy and applicable law.

4. How We Use Your Personal Data

4.1 256phwin uses your personal data for the following purposes:

Purpose	Description
Account Management	To create, maintain, and manage your 256phwin account, including processing deposits and withdrawals.
Identity Verification	To verify your identity and age (21+) in compliance with KYC and AML obligations.
Service Delivery	To provide access to our casino games, sports betting, live dealer tables, and other Services.
Customer Support	To respond to your inquiries, resolve disputes, and provide technical assistance.
Promotions	To administer bonuses, free spins, and other promotional offers you have opted into.
Responsible Gaming	To monitor gaming activity and enforce responsible gaming tools such as deposit limits and self-exclusion.
Fraud Prevention	To detect, investigate, and prevent fraudulent activity, cheating, and money laundering.
Legal Compliance	To comply with applicable Philippine laws, regulations, and regulatory requirements.
Platform Improvement	To analyze usage patterns and improve the performance, security, and user experience of the platform.

5. Legal Basis for Processing

5.1 256phwin processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., to provide the Services you have registered for);
• Legal Obligation: Processing is necessary to comply with our legal obligations, including KYC, AML, and responsible gaming requirements;
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights;
• Consent: Where we rely on your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time.

6. Data Sharing and Disclosure

6.1 256phwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment service providers, to process your deposits and withdrawals;
• Identity Verification Providers: Third-party KYC and age verification service providers;
• Fraud Prevention Services: Agencies that help us detect and prevent fraudulent activity;
• IT and Platform Providers: Technology partners who host and maintain the 256phwin platform under strict data processing agreements;
• Regulatory Authorities: Philippine government agencies and regulatory bodies where we are legally required to disclose information;
• Law Enforcement: Philippine law enforcement authorities where required by law or court order.

6.2 All third parties with whom we share personal data are required to handle such data in accordance with applicable data protection laws and our data processing agreements.

7. Data Retention

7.1 256phwin retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulatory obligations. In general:

• Account registration data and KYC documents are retained for a minimum of five (5) years following account closure, in accordance with AML regulations;
• Financial transaction records are retained for a minimum of five (5) years;
• Gaming activity logs are retained for a minimum of three (3) years;
• Customer support communications are retained for a minimum of two (2) years.

7.2 When your personal data is no longer required for the purposes for which it was collected, and there is no legal obligation to retain it, 256phwin will securely delete or anonymize it.

8. Data Security

8.1 256phwin implements a range of technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encrypted storage of sensitive data, including passwords and financial information;
• Strict access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits and vulnerability assessments;
• Firewalls and intrusion detection systems to protect our infrastructure.

8.2 While we take all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 256phwin will notify you and the relevant Philippine authorities in accordance with applicable law.

8.3 You are responsible for maintaining the confidentiality of your account credentials. Please use a strong, unique password for your 256phwin account and do not share it with anyone. If you suspect unauthorized access to your account, contact our support team immediately at [email protected].

9. Cookies & Tracking Technologies

9.1 256phwin uses cookies and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and deliver relevant content. A cookie is a small text file placed on your device when you visit a website.

9.2 We use the following types of cookies:

• Essential Cookies: Necessary for the platform to function correctly, including maintaining your login session and remembering your preferences. These cannot be disabled.
• Analytics Cookies: Help us understand how players use the 256phwin platform so we can improve performance and user experience.
• Functional Cookies: Remember your settings and preferences (e.g., language, currency display) to provide a more personalized experience.
• Security Cookies: Used to detect and prevent fraudulent activity and protect the integrity of the platform.

9.3 You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 256phwin platform. Refer to your browser's help documentation for instructions on managing cookie preferences.

10. Your Data Protection Rights

10.1 Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 256phwin:

• Right to be Informed: The right to be informed about how your personal data is collected and processed, as described in this Policy;
• Right of Access: The right to request a copy of the personal data we hold about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data, subject to our legal retention obligations;
• Right to Object: The right to object to the processing of your personal data in certain circumstances;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

10.2 To exercise any of the above rights, please contact our support team at [email protected]. We will respond to your request within thirty (30) days. We may need to verify your identity before processing your request.

11. Minors and Age Restriction

11.1 The 256phwin platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information and close the associated account.

11.2 If you believe that a minor has registered on the 256phwin platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

12. International Data Transfers

12.1 256phwin primarily processes and stores personal data within the Philippines. In certain circumstances, your personal data may be transferred to and processed in countries outside the Philippines, for example where our technology partners or service providers are located in other jurisdictions.

12.2 Where such transfers occur, 256phwin ensures that appropriate safeguards are in place to protect your personal data, including contractual protections consistent with the requirements of the Philippine Data Privacy Act of 2012.

13. Changes to This Privacy Policy

13.1 256phwin reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players by email or through an in-platform notification.

13.2 Your continued use of the 256phwin Services following the posting of any changes to this Policy constitutes your acceptance of those changes. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

14. Contact Us

14.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the way 256phwin handles your personal data, please contact our Data Protection team. We are available 24 hours a day, 7 days a week.

14.2 Email: [email protected]

14.3 For responsible gaming concerns, including self-exclusion requests, please visit our Responsible Gaming page.