maxwin Privacy Policy

1 Introduction

maxwin ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all users who access and use the maxwin website and gaming services. This Privacy Policy describes how maxwin collects, uses, stores, shares, and protects your personal information when you interact with our platform.

This policy is prepared in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC). As a platform serving Filipino players, maxwin takes its obligations under Philippine data protection law seriously.

By registering an account on maxwin, accessing our website, or using any of our gaming services — including casino games, slots, lottery, bingo, and virtual sports — you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read together with the maxwin Terms & Conditions, which govern your use of the platform as a whole.

2 Personal Data We Collect

maxwin collects personal data that is necessary for the operation of our platform, the delivery of our gaming services, and compliance with applicable Philippine laws and regulations. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Residential address in the Philippines (barangay, city/municipality, province)
• Email address
• Mobile phone number
• Username and encrypted password
• Gender (optional, for personalization purposes)

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (Philippine passport, driver's license, SSS ID, UMID, or PhilSys National ID)
• Proof of residential address documents (utility bills, bank statements, or barangay certificates)
• Selfie or liveness verification images where required
• Source of funds declarations where required by compliance protocols

2.3 Financial & Transaction Data

• GCash account details (registered mobile number and account name)
• PayMaya (Maya) account details
• Bank account details for BPI, BDO, or Metrobank transactions
• Deposit and withdrawal history
• Transaction amounts, dates, and reference numbers
• Bonus and promotional credit history

2.4 Gaming Activity Data

• Game session history, including games played, bets placed, and outcomes
• Wagering patterns and gaming frequency
• Responsible gaming tool usage (deposit limits, self-exclusion requests, cooling-off periods)
• Bonus and promotion participation records

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps and login history
• Cookies and similar tracking technology data (see Section 7)

2.6 Communications Data

• Records of your communications with maxwin customer support
• Feedback, complaints, and dispute records
• Email and SMS communication preferences

3 How We Collect Your Data

maxwin collects your personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion
• Automatically — through cookies, server logs, and analytics tools when you browse or use the maxwin platform
• From third-party payment providers — GCash, PayMaya, and partner banks may share transaction confirmation data with us to process your deposits and withdrawals
• From identity verification partners — where we use third-party KYC service providers to assist with document verification and liveness checks
• From fraud prevention services — we may receive risk signals from fraud detection partners to protect the integrity of the platform

4 How We Use Your Personal Data

maxwin uses your personal data for the following purposes:

Purpose	Data Used
Account registration and management	Registration data, identity data
Age and identity verification (KYC)	KYC documents, date of birth, selfie data
Processing deposits and withdrawals	Financial data, transaction data
Delivering gaming services and personalization	Gaming activity data, preferences
Fraud prevention and platform security	Technical data, transaction data, IP address
Anti-money laundering (AML) compliance	Financial data, KYC data, transaction history
Responsible gaming monitoring	Gaming activity data, responsible gaming tool usage
Customer support and dispute resolution	Communications data, account data
Marketing and promotional communications (with consent)	Contact data, gaming preferences, communication preferences
Platform analytics and improvement	Technical data, gaming activity data (aggregated)
Legal and regulatory compliance	All categories as required by applicable law

5 Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, maxwin processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfill our obligations to you under the maxwin Terms & Conditions, including account management, payment processing, and game delivery
• Legal obligation — processing required to comply with applicable Philippine laws, including KYC/AML obligations under the Anti-Money Laundering Act (AMLA), PAGCOR regulatory requirements, and the Data Privacy Act itself
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests do not override your fundamental rights and freedoms
• Consent — processing for marketing communications and optional personalization features, where you have given us your explicit consent and which you may withdraw at any time

6 Sharing Your Personal Data

maxwin does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients only where necessary and in accordance with this Privacy Policy:

• Payment service providers — GCash, PayMaya, BPI, BDO, and Metrobank, for the purpose of processing your deposits and withdrawals
• KYC and identity verification partners — third-party service providers engaged to assist with document verification and age verification, bound by strict data processing agreements
• Game content providers — software providers whose games are available on the maxwin platform may receive anonymized session data for game performance and integrity purposes
• Fraud prevention and security services — third-party fraud detection platforms that help us identify and prevent unauthorized account access and financial fraud
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where we are legally required to disclose information
• Legal and professional advisors — lawyers, auditors, and compliance consultants engaged by maxwin, subject to professional confidentiality obligations

7 Cookies & Tracking Technologies

maxwin uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the platform. Cookies are small text files stored on your device when you visit the maxwin website. They help us recognize your browser, maintain your session, and remember your preferences.

Types of Cookies We Use

• Strictly necessary cookies — essential for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings, game display options, and responsible gaming tool configurations.
• Analytics cookies — help us understand how players use the platform, which pages are most visited, and where technical issues occur. This data is aggregated and anonymized.
• Performance cookies — monitor platform load times and game performance to help our technical team identify and resolve issues quickly.

maxwin does not use advertising or targeting cookies. We do not share cookie data with advertising networks or use cookies to build profiles for third-party marketing purposes.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may affect your ability to use certain features of the maxwin platform, including staying logged in to your account.

8 Data Retention

maxwin retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our standard retention periods are as follows:

• Account and registration data — retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLC record-keeping requirements
• KYC and identity verification documents — retained for a minimum of five (5) years from the date of submission, or longer if required by applicable law or ongoing regulatory proceedings
• Financial and transaction records — retained for a minimum of five (5) years from the date of each transaction, in compliance with anti-money laundering regulations
• Gaming activity data — retained for three (3) years from the date of each session, or longer where required for dispute resolution or regulatory purposes
• Customer support communications — retained for two (2) years from the date of the last communication in each support thread
• Marketing consent records — retained for the duration of your consent and for one (1) year following withdrawal of consent

When personal data is no longer required and the applicable retention period has expired, maxwin will securely delete or anonymize the data in accordance with our internal data disposal procedures.

9 Data Security

maxwin implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption at rest and in transit — all personal data is encrypted using AES-256 encryption at rest, and all data transmitted between your device and our servers is protected by TLS 1.3 encryption
• Access controls — access to personal data is restricted to authorized maxwin personnel on a strict need-to-know basis, with role-based access controls and multi-factor authentication required for all internal systems
• Regular security audits — our platform and infrastructure undergo regular penetration testing and security audits conducted by independent third-party security specialists
• Intrusion detection — we operate 24/7 monitoring systems that detect and respond to suspicious activity on our platform and infrastructure
• Secure development practices — all maxwin software is developed following secure coding standards, with security reviews conducted at each stage of the development lifecycle
• Staff training — all maxwin personnel who handle personal data receive regular data protection and security awareness training

10 Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by maxwin:

• Right to be informed — you have the right to be informed about how your personal data is collected, used, and processed, which is the primary purpose of this Privacy Policy
• Right of access — you have the right to request a copy of the personal data maxwin holds about you, along with information about how it is being processed
• Right to rectification — you have the right to request correction of any inaccurate or incomplete personal data we hold about you
• Right to erasure — you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations
• Right to object — you have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests
• Right to data portability — you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible
• Right to lodge a complaint — you have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 15 of this policy. We will respond to all data subject requests within thirty (30) days of receipt, in accordance with NPC guidelines.

Please note that some rights are subject to limitations under applicable law — for example, we may be unable to delete data that we are legally required to retain for AML or regulatory compliance purposes.

11 Children's Privacy

The maxwin platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. maxwin does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, delete the personal data in question, and take appropriate steps to prevent recurrence. If you believe that a minor has registered on the maxwin platform, please contact our support team immediately so that we can investigate and take action.

12 International Data Transfers

In some cases, your personal data may be transferred to, stored in, or processed in countries outside the Philippines — for example, where our technology infrastructure, KYC partners, or game content providers operate servers in other jurisdictions.

Where such international transfers occur, maxwin ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under Philippine law. These safeguards may include:

• Data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission
• Transfers to countries that have been assessed as providing an adequate level of data protection
• Binding corporate rules where transfers occur within a group of companies

By using the maxwin platform and agreeing to this Privacy Policy, you consent to the transfer of your personal data to other countries where necessary for the purposes described in this policy, subject to the safeguards described above.

13 Third-Party Links

The maxwin platform may contain links to third-party websites or services — for example, links to payment provider portals or responsible gaming support organizations. This Privacy Policy applies only to the maxwin platform and does not cover the privacy practices of any third-party websites or services.

maxwin is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party websites you visit before providing them with your personal data.

14 Updates to This Privacy Policy

maxwin reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidelines. When material changes are made to this policy, we will notify registered players by email and/or by posting a prominent notice on the maxwin platform.

The updated Privacy Policy will take effect from the date of publication unless a later effective date is specified. The "Last Updated" date at the top of this policy will always reflect the date of the most recent revision.

Your continued use of the maxwin platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated policy, you must stop using the platform and may request account closure by contacting our support team.

15 Contact Us & Data Protection Officer

maxwin has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 17-01. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact our DPO directly.

You can reach the maxwin Data Protection Officer and support team by email at:

When contacting us regarding a privacy matter, please include your registered account username and a clear description of your query or request. Our DPO will acknowledge receipt of your request within five (5) business days and will provide a full response within thirty (30) days, in accordance with NPC guidelines.

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for enforcing the Data Privacy Act of 2012 and can be reached through their official government channels.