yeswin Privacy Policy

// SECTION_01

1. Data Controller

yeswin is the data controller of the personal information collected through the yeswin.bet website and all associated mobile or web-based interfaces. As data controller, yeswin determines the purposes and means of processing your personal data and is accountable for ensuring that all processing is lawful, fair, and transparent.

yeswin has designated a Data Protection Officer (DPO) in compliance with the requirements of the National Privacy Commission (NPC) of the Philippines. For any data-related queries or requests, you may reach the DPO through the contact details provided in Section 13 of this Policy.

// SECTION_02

2. Data We Collect

yeswin collects personal data from you at various points during your use of the platform. The categories of personal data we collect are described in the table below. We only collect data that is necessary for the specific purpose identified — we do not collect data speculatively or in excess of what is required.

// SECTION_03

3. How We Use Your Data

yeswin uses your personal data only for clearly defined, legitimate purposes. The table below maps each processing purpose to the data categories used. We do not use your data for purposes incompatible with those listed here without first obtaining your separate consent.

yeswin does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except where required by law or where you have given explicit consent and appropriate safeguards are in place.

// SECTION_04

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, yeswin relies on one or more of the following legal bases when processing your personal data:

• Contractual Necessity: Processing is required to perform the contract between you and yeswin — i.e., to operate your account, process bets, and deliver gaming services you have requested.
• Legal Obligation: Processing is necessary to comply with yeswin's obligations under Philippine law, including Anti-Money Laundering Act (RA 9160 as amended), PAGCOR licensing requirements, and mandatory reporting obligations to the Anti-Money Laundering Council (AMLC).
• Legitimate Interests: Processing is necessary for yeswin's legitimate interests in preventing fraud, securing the platform, improving services, and managing business operations — provided those interests are not overridden by your rights and interests.
• Consent: Where yeswin relies on your consent as the legal basis — for example, for sending promotional communications — you may withdraw that consent at any time by updating your notification preferences in your account dashboard or by contacting support.
• Vital Interests: In rare circumstances, processing may be necessary to protect the vital interests of you or another person (e.g., where responsible gaming concerns require urgent action).

// SECTION_05

5. Sharing Your Data

yeswin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the circumstances described below, and only to the extent necessary for the specific purpose.

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and USDT wallet processors receive the minimum financial and identity data required to process your deposits and withdrawals securely.
• Identity Verification Partners: KYC verification service providers process your government ID images and identity data to fulfil yeswin's know-your-customer obligations. All such partners are contractually bound to process data only on yeswin's instructions and to maintain equivalent data protection standards.
• Gaming Content Providers: Third-party game studios and live dealer operators that supply game content to the yeswin platform may receive limited gaming session data (e.g., player ID, bet amounts) to facilitate gameplay. These providers do not receive your full identity or financial data.
• Regulatory Authorities: yeswin is legally obligated to disclose player data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and Philippine law enforcement agencies where required by law or pursuant to a lawful order.
• Analytics Providers: Anonymised or aggregated usage data may be shared with analytics providers to support platform improvement. No personally identifiable data is shared for analytics purposes.
• Professional Advisers: Lawyers, auditors, and other professional advisers retained by yeswin may access personal data where strictly necessary for their advisory services, subject to professional confidentiality obligations.

// SECTION_06

6. Cookies & Tracking Technologies

yeswin uses cookies and similar tracking technologies on the yeswin.bet website to support platform functionality, enhance security, and analyse usage patterns. The categories of cookies we use are described below.

You can manage your cookie preferences through your browser settings. Disabling strictly necessary or security cookies may impair your ability to use the yeswin platform. yeswin does not use advertising or retargeting cookies.

// SECTION_07

7. Data Security

yeswin implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and yeswin's servers is encrypted using industry-standard 256-bit TLS. This applies to all platform interactions, including login, deposits, withdrawals, and live chat.
• Encryption at Rest: Sensitive personal data — including identity documents, financial account references, and KYC records — is encrypted at rest using AES-256 encryption in yeswin's data storage systems.
• Access Controls: Access to player personal data within yeswin's systems is restricted on a strict need-to-know basis. Employee access is governed by role-based access controls, and all access to sensitive data is logged and audited.
• Multi-Factor Authentication (MFA): yeswin's internal systems require multi-factor authentication for all staff accessing personal data. Players are encouraged — and may be required — to enable MFA on their yeswin accounts.
• Penetration Testing & Security Audits: yeswin engages independent security specialists to conduct regular penetration tests and security audits of the platform and its data infrastructure.
• Incident Response: In the event of a personal data breach that is likely to result in risk to your rights and freedoms, yeswin will notify the National Privacy Commission and affected players within the timeframes prescribed by the Data Privacy Act of 2012.

// SECTION_08

8. Data Retention

yeswin retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law. The retention periods below reflect the minimum legal requirements and yeswin's legitimate operational needs.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where anonymised data is retained beyond these periods for statistical analysis, it is no longer considered personal data under the Data Privacy Act.

// SECTION_09

9. Your Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by yeswin. These rights can be exercised by contacting yeswin's Data Protection Officer using the details in Section 13.

yeswin will respond to data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, yeswin may extend this period by a further 30 days and will notify you of the extension and the reason for it. There is no fee for exercising your rights, unless a request is manifestly unfounded or excessive.

// SECTION_10

10. Children & Minors

The yeswin platform is strictly restricted to persons aged 21 and above, in accordance with Philippine gambling regulations. yeswin does not knowingly collect personal data from individuals under the age of 21.

During account registration, yeswin collects your date of birth and verifies it against a government-issued ID as part of the KYC process. If yeswin discovers that personal data has been collected from a person under 21 — whether through a misrepresentation during registration or any other means — the account will be immediately suspended, all deposits will be returned to the originating payment source, any winnings will be forfeited, and all associated personal data will be securely deleted in accordance with applicable law.

// SECTION_11

11. Cross-Border Data Transfers

yeswin's primary data processing infrastructure is located within the Philippines. In certain circumstances, personal data may be transferred to or accessed from locations outside the Philippines — for example, where a third-party service provider (such as a game studio or identity verification provider) operates servers in another jurisdiction.

Where such transfers occur, yeswin ensures that equivalent data protection standards apply through one or more of the following mechanisms:

• The recipient country has been assessed as providing an adequate level of data protection by the National Privacy Commission of the Philippines.
• yeswin has entered into a Data Transfer Agreement with the recipient that incorporates standard contractual clauses approved by the NPC.
• The transfer is necessary for the performance of your contract with yeswin (e.g., processing a payment through an international payment network).
• The transfer is required by Philippine law or a lawful court or regulatory order.

You may request further information about cross-border transfers affecting your personal data by contacting yeswin's Data Protection Officer.

// SECTION_12

12. Policy Updates

yeswin reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, yeswin will notify registered players by:

• Sending a notification to the email address on your yeswin account
• Displaying a prominent notice on the yeswin.bet website or within the platform
• Updating the "Last Updated" date at the top of this page

Your continued use of the yeswin platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the updated Policy, you should cease using the platform and may request account closure by contacting yeswin support.

yeswin recommends that you review this Privacy Policy periodically. Archived versions of previous Privacy Policies are available on request from the Data Protection Officer.

// SECTION_13

13. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about yeswin's data processing practices, you may contact us through the following channels:

• Data Protection Officer: Reachable via [email protected] — please include "DPO Request" in the subject line of your email.
• 24/7 Live Chat: Available inside your yeswin account dashboard for general privacy queries and account-level data requests.

yeswin will acknowledge receipt of your request within 3 business days and provide a substantive response within 30 calendar days.

If you are not satisfied with yeswin's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.