zggwin Privacy Policy

1Introduction

zggwin ("we", "us", "our", "the Company") operates the online gaming platform accessible at https://zgg win.org ("Platform"). We are committed to protecting the privacy and personal data of all users ("you", "Player", "User") who access or use our Platform.

This Privacy Policy ("Policy") describes how zggwin collects, uses, stores, shares, and protects your personal data. It applies to all interactions you have with the zggwin Platform, including account registration, gameplay, deposits, withdrawals, customer support communications, and any other use of our services.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC") of the Philippines. It should be read together with our Terms and Conditions.

2Data Controller

For the purposes of the Data Privacy Act of 2012, zggwin is the Personal Information Controller ("PIC") in respect of the personal data you provide when using the Platform. As PIC, zggwin determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with RA 10173 and all applicable Philippine data protection laws.

zggwin has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection legislation. You may contact the DPO directly using the details provided in Section 15 of this Policy.

3Data We Collect

3.1 Identity and Contact Data

When you register a zggwin account, we collect the following personal data:

• Full legal name (as it appears on your government-issued Philippine ID);
• Date of birth (to verify you are at least 21 years of age);
• Residential address (barangay, city/municipality, province, ZIP code);
• Email address;
• Mobile number (Philippine mobile number);
• Government-issued ID type and number (e.g., PhilSys National ID, passport, driver's licence, SSS/GSIS ID, PRC ID, Voter's ID);
• Selfie or live photo for biometric identity verification where required by PAGCOR KYC guidelines.

3.2 Financial Data

To process deposits and withdrawals, we collect:

• GCash or Maya account number (mobile number associated with the e-wallet);
• Philippine bank account details (bank name, account name, account number) for bank transfer transactions;
• Debit card details (card number, expiry date — CVV is never stored);
• Transaction history, including deposit amounts, withdrawal amounts, and timestamps, all denominated in Philippine Peso (PHP).

3.3 Gaming and Behavioural Data

As part of normal Platform operation, we automatically collect:

• Game session logs (games played, wager amounts, win/loss outcomes, session duration);
• Bonus and promotion usage history;
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, cooling-off periods);
• Customer support interaction records (chat transcripts, email correspondence).

3.4 Technical and Device Data

We automatically collect certain technical data when you access the Platform:

• IP address and approximate geolocation (to verify Philippine jurisdiction);
• Device type, operating system, and browser version;
• Session timestamps and login history;
• Cookie identifiers and session tokens (see Section 8).

4How We Collect Your Data

zggwin collects your personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions;
• Automated collection: Technical and behavioural data collected automatically through cookies, server logs, and analytics tools as you use the Platform;
• Third-party sources: Identity verification data from PAGCOR-accredited KYC service providers; fraud and AML screening data from the Anti-Money Laundering Council (AMLC) and licensed screening services; payment verification data from GCash, Maya, and Philippine banking partners.

5Legal Basis for Processing

zggwin processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent (Section 12(a), RA 10173): You have given your informed, freely given, specific, and unambiguous consent to the processing of your personal data for the purposes described in this Policy, as indicated at the time of account registration;
• Contractual necessity (Section 12(b), RA 10173): Processing is necessary for the performance of the contract between you and zggwin (i.e., the Terms and Conditions), including account management, payment processing, and game delivery;
• Legal obligation (Section 12(c), RA 10173): Processing is necessary for compliance with Philippine legal obligations, including PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160, as amended), and the Data Privacy Act itself;
• Legitimate interests (Section 12(f), RA 10173): Processing is necessary for the legitimate interests of zggwin, including fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and freedoms.

6How We Use Your Data

zggwin uses your personal data for the following specific purposes:

• To create, verify, and manage your zggwin account;
• To verify your identity and age (21+) in compliance with PAGCOR KYC requirements;
• To process deposits and withdrawals in Philippine Peso via GCash, Maya, and Philippine bank transfers;
• To deliver and personalise your gaming experience on the Platform;
• To administer bonuses, promotions, and loyalty programmes;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To monitor and enforce responsible gaming commitments, including deposit limits and self-exclusion;
• To respond to your customer support enquiries and resolve disputes;
• To send you transactional communications (account notifications, deposit/withdrawal confirmations, security alerts);
• To send you promotional communications, where you have opted in to receive them (you may opt out at any time);
• To comply with PAGCOR reporting obligations, AMLC suspicious transaction reporting, and NPC data breach notification requirements;
• To improve the Platform through anonymised analytics and performance monitoring.

7Sharing Your Data

7.1 We Do Not Sell Your Data

zggwin will never sell, rent, lease, or trade your personal data to third-party marketers, data brokers, or any other commercial entity for their own marketing purposes. This is an absolute commitment.

7.2 Authorised Third-Party Sharing

We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• PAGCOR: As our regulatory authority, PAGCOR may require access to player data for licensing compliance, audit, and responsible gaming enforcement purposes;
• Anti-Money Laundering Council (AMLC): We are legally required to report covered and suspicious transactions to the AMLC under RA 9160, as amended by RA 10365;
• KYC and identity verification providers: PAGCOR-accredited third-party services that assist with identity document verification and biometric checks;
• Payment processors: GCash (Mynt), Maya (Voyager Innovations), and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) solely for the purpose of processing your transactions;
• Game software providers: Licensed game developers whose titles are hosted on the Platform may receive anonymised session data for game performance and fairness auditing purposes;
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection vendors operating under strict data processing agreements and bound by Philippine data protection standards;
• Law enforcement and courts: Where required by a valid Philippine court order, subpoena, or lawful request from a government authority.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of zggwin's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance.

8Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the zggwin Platform. They help us recognise your device, maintain your session, and understand how you use the Platform so we can improve it.

8.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. You cannot opt out of these without ceasing to use the Platform;
• Functional cookies: Remember your preferences (e.g., language, responsible gaming settings) to personalise your experience;
• Analytics cookies: Collect anonymised data about how Players use the Platform (pages visited, session duration, error reports) to help us improve performance. No personally identifiable information is included in analytics data.

9Data Security

zggwin implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.3 (Transport Layer Security);
• Encryption at rest: Sensitive personal data stored in our databases is encrypted using AES-256 encryption;
• Access controls: Personal data is accessible only to authorised zggwin personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication;
• Regular security audits: We conduct periodic penetration testing, vulnerability assessments, and security audits of our Platform and infrastructure;
• Data breach response: In the event of a personal data breach, zggwin will notify the National Privacy Commission (NPC) within 72 hours of discovery, and affected Players will be notified without undue delay, in accordance with NPC Circular 16-03.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your zggwin account credentials and for notifying us immediately if you suspect unauthorised access to your account.

10Data Retention

zggwin retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations:

• Active account data: Retained for the duration of your account's active status plus five (5) years after account closure, in compliance with PAGCOR record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act (RA 9160, as amended);
• KYC and identity documents: Retained for five (5) years after account closure or the last transaction, whichever is later, in compliance with AMLC regulations;
• Customer support records: Retained for three (3) years from the date of the last interaction;
• Analytics data: Anonymised and aggregated — retained indefinitely as it contains no personally identifiable information;
• Marketing preferences: Retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction methods.

11Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by zggwin:

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. We will respond to all verified requests within fifteen (15) business days, in accordance with NPC guidelines. We may need to verify your identity before processing your request.

12Children's Privacy and Age Restriction

If we discover that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, delete all personal data collected, and report the incident to PAGCOR as required. If you are a parent or guardian and believe your child has registered on zggwin, please contact our Data Protection Officer immediately using the details in Section 15.

13Cross-Border Data Transfers

zggwin's primary data processing infrastructure is located within the Republic of the Philippines. In limited circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, where a game software provider or cybersecurity vendor operates servers in another jurisdiction.

Any cross-border transfer of personal data is conducted in strict compliance with Section 21 of RA 10173 and NPC Circular 17-01. Before transferring data outside the Philippines, zggwin ensures that:

• The recipient country provides an adequate level of data protection, as determined by the NPC; or
• Appropriate safeguards are in place, such as binding contractual clauses that impose data protection obligations equivalent to those under RA 10173; and
• The transfer is reported to the NPC where required.

14Updates to This Privacy Policy

zggwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or PAGCOR and NPC regulatory requirements. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page;
• Notify registered Players via email at least fourteen (14) days before the changes take effect;
• Display a prominent notice on the Platform for at least thirty (30) days following the update.

Your continued use of the zggwin Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must close your account before the effective date of the update.

15Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. For more information on your rights and how to file a complaint, visit the NPC's official channels.

For responsible gaming support, please visit our Responsible Gaming page. For the full terms governing your use of the Platform, please refer to our Terms and Conditions.