bigwin99 Privacy Policy

This Policy applies to all personal data collected and processed by bigwin99 in connection with the operation of the bigwin99 online gaming platform, including but not limited to: account registration, identity verification, payment processing, gameplay activity, sports betting, customer support interactions, marketing communications, and website browsing activity.

This Policy applies to all individuals who interact with bigwin99 in any capacity, including registered players, prospective players who visit bigwin99.asia without registering, and individuals who contact bigwin99 through any communication channel. The Policy covers personal data processing activities regardless of the medium or device through which interaction occurs — including desktop browsers, mobile browsers, and any future bigwin99 applications.

This Policy should be read in conjunction with bigwin99's Terms & Conditions, which govern the contractual relationship between bigwin99 and registered players. In the event of any conflict between this Policy and the Terms & Conditions on a matter of personal data processing, this Privacy Policy shall prevail.

For the purposes of the Philippine Data Privacy Act of 2012 and the NPC's Implementing Rules and Regulations, bigwin99 acts as the Personal Information Controller (PIC) for all personal data collected through the bigwin99 platform and associated services. As PIC, bigwin99 determines the purposes and means of processing personal data relating to registered and prospective players.

For specific processing activities performed in partnership with licensed third-party service providers — such as payment processors, game studios, identity verification services, and fraud prevention providers — those third parties may act as Personal Information Processors (PIPs) operating under contractual obligations to bigwin99 that ensure compliance with applicable Philippine data protection standards.

bigwin99 has designated a Data Protection Officer (DPO) in accordance with NPC requirements. The DPO is responsible for overseeing bigwin99's data protection strategy, ensuring compliance with the Data Privacy Act, handling Data Subject Rights requests, and serving as the primary point of contact for the National Privacy Commission. Contact details for the DPO are provided in Section 15 of this Policy.

bigwin99 collects the following categories of personal data, depending on the nature of your interaction with the platform:

3.1 Identity & Registration Data

Data Type	Examples	When Collected
Full legal name	As it appears on government-issued ID	Registration & KYC
Date of birth	For age verification (21+ requirement)	Registration & KYC
Mobile number	Philippine mobile number (Globe, Smart, DITO)	Registration
Email address	Personal or work email	Registration
Residential address	Street, barangay, city/municipality, province	KYC verification
Government ID	PhilSys ID, UMID, Passport, Driver's License, Voter's ID	KYC verification
Selfie / biometric photo	Liveness check image for identity confirmation	KYC verification

3.2 Financial & Transaction Data

• GCash account number linked to your bigwin99 account
• Maya, GrabPay, or other e-wallet account identifiers (if used)
• Philippine bank account details (BPI, BDO, Metrobank, or other banks, if used for bank transfer)
• Transaction history: deposit amounts, dates, and references
• Withdrawal history: amounts, dates, destination accounts, and processing status
• Bonus and promotional credit history

3.3 Gaming & Platform Activity Data

• Game session records: games played, session durations, stakes, and outcomes
• Sportsbook betting history: markets, selections, stake amounts, and results
• Responsible gaming tool usage: deposit limits set, session time reminders, self-exclusion history
• Platform navigation and feature usage patterns
• Customer support interaction records, including live chat transcripts and email correspondence

3.4 Technical & Device Data

• IP address and approximate geographic location at login
• Device type, operating system, and browser type
• Device identifiers and session tokens
• Cookies and similar tracking technologies (see Section 9)
• Login timestamps and session duration records

bigwin99 collects personal data through the following means:

• Directly from you: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automatically from your device: Technical data collected passively through cookies, server logs, and analytics tools when you browse or use the bigwin99 platform.
• From identity verification providers: Data returned from third-party KYC and AML screening services engaged by bigwin99 to verify your identity and screen against regulatory watchlists.
• From payment processors: Transaction confirmation data returned by GCash, Maya, bank APIs, and other payment processors when you make deposits or receive withdrawals.
• From fraud prevention and security services: Risk scores, device fingerprint data, and flagged behavior signals from third-party fraud prevention providers integrated into the bigwin99 platform.
• From public and regulatory sources: Publicly available records and PAGCOR self-exclusion registers, which bigwin99 screens against to prevent excluded individuals from accessing the platform.

bigwin99 processes personal data only for specified, explicit, and legitimate purposes. The following table summarizes our primary processing activities, their purposes, and the legal basis under the Data Privacy Act of 2012:

Processing Activity	Purpose	Legal Basis (RA 10173)
Account registration	Creating and managing your bigwin99 player account	Contractual necessity
KYC / age verification	Verifying identity, confirming 21+ age requirement	Legal obligation (PAGCOR / AML regulations)
Payment processing	Processing GCash deposits, withdrawals, and refunds	Contractual necessity
AML screening	Compliance with AMLA and PAGCOR AML obligations	Legal obligation
Fraud prevention	Detecting and preventing fraudulent, abusive conduct	Legitimate interest
Platform security	Protecting accounts and platform integrity	Legitimate interest
Responsible gaming	Monitoring for problem gambling indicators; enforcing limits	Legal obligation / legitimate interest
Customer support	Responding to queries, complaints, and disputes	Contractual necessity
Marketing communications	Sending promotional offers, bonuses, and platform updates	Consent (opt-in)
Platform analytics	Improving platform performance and user experience	Legitimate interest

bigwin99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only where necessary and under strict contractual obligations. The following categories of third parties may receive your personal data in connection with the operation of the bigwin99 platform:

6.1 Payment Service Providers

GCash (Mynt), Maya (PayMaya Philippines, Inc.), GrabPay, BPI, BDO, Metrobank, and other payment processors receive transaction-related personal data necessary to execute deposits and withdrawals. These entities process data under their own privacy policies and are independently licensed and regulated in the Philippines.

6.2 Identity Verification & KYC Providers

Third-party KYC and identity verification service providers receive copies of your identity documents and biometric data solely for the purpose of verifying your identity and age on behalf of bigwin99. These providers operate under contractual data processing agreements with bigwin99 and are prohibited from using your data for any purpose beyond bigwin99's verification requirements.

6.3 Game Studio Providers

Licensed game providers — including JILI Games, Pragmatic Play, Evolution Gaming, PG Soft, and others — may receive anonymized or pseudonymized player session data necessary to operate fair gaming environments. Game providers do not receive identifiable personal data beyond what is technically necessary for session management.

6.4 Regulatory and Law Enforcement Authorities

bigwin99 may be required by law, court order, or regulatory mandate to disclose personal data to: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or law enforcement agencies conducting legitimate investigations. bigwin99 will comply with all legally valid disclosure requests.

6.5 Professional Advisors

bigwin99 may share personal data with its legal, accounting, and compliance advisors under strict confidentiality obligations where necessary for the provision of professional services related to the operation of the platform.

bigwin99 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligation. The following retention guidelines apply:

• Active account data: Retained for the duration of your active bigwin99 account relationship plus the legally required retention period following account closure.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, consistent with PAGCOR AML record-keeping requirements and the Anti-Money Laundering Act.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLA and applicable tax regulations.
• Customer support records: Retained for three (3) years from the date of each interaction, to support dispute resolution and regulatory audit requirements.
• Marketing consent records: Retained for the duration of the consent plus three (3) years thereafter, to document the legal basis for marketing communications.
• Technical and log data: Retained for up to twelve (12) months in active systems, with compressed archives retained for up to five (5) years for security investigation and forensic purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or permanently anonymized in accordance with NPC-approved disposal methods. bigwin99 maintains a data retention schedule reviewed annually by the Data Protection Officer.

bigwin99 implements a comprehensive program of technical and organizational security measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

8.1 Technical Safeguards

• 256-bit AES SSL/TLS encryption for all data in transit between your device and bigwin99 servers
• Encryption at rest for sensitive personal data stored in bigwin99 databases
• Multi-factor authentication requirements for internal staff access to production systems containing personal data
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists
• Intrusion detection systems and real-time security monitoring of platform infrastructure
• Automated fraud detection systems that flag anomalous access patterns and unauthorized login attempts

8.2 Organizational Safeguards

• Role-based access controls ensuring staff access to personal data only where strictly necessary for job function
• Mandatory data protection training for all bigwin99 employees with access to personal data
• Confidentiality agreements binding all staff, contractors, and third-party processors
• Documented incident response procedures compliant with NPC breach notification requirements
• Annual privacy impact assessments and data protection audits overseen by the Data Protection Officer

bigwin99 uses cookies and similar tracking technologies on the bigwin99.asia platform. Cookies are small text files stored on your device that allow the platform to recognize your browser and remember certain information across sessions.

9.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for platform functionality — including your login session token, security cookies, and load-balancing cookies. These cannot be disabled without preventing basic platform use.
• Functional Cookies: Remember your language preferences, game lobby layout preferences, and other platform personalization settings.
• Analytics Cookies: Collect anonymized data about how players use the bigwin99 platform — which pages are visited most, where users drop off, and how features are used — to inform platform improvement decisions.
• Security & Fraud Prevention Cookies: Used by bigwin99's fraud detection and bot prevention systems to distinguish legitimate player sessions from automated or fraudulent access attempts.

9.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most modern browsers — including Chrome on Android, Safari on iPhone, and desktop browsers — allow you to view, block, or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the bigwin99 platform. Detailed instructions for managing cookies in popular Philippine mobile browsers are available through your device's browser settings menu.

bigwin99 does not use third-party advertising cookies or cross-site tracking cookies for purposes unrelated to the operation of the bigwin99 platform.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by bigwin99:

To exercise any of the above rights, please submit a written request to the bigwin99 Data Protection Officer at [email protected]. Requests will be acknowledged within 3 business days and fulfilled within 30 calendar days, subject to identity verification and any applicable legal limitations. bigwin99 will not charge a fee for processing Data Subject Rights requests made in good faith.

bigwin99 is strictly prohibited from collecting personal data from, or providing services to, individuals under the age of 21 years. This minimum age requirement is mandated under PAGCOR regulations governing casino-style gambling in the Philippines.

bigwin99 implements mandatory age verification as part of the KYC process for all newly registered accounts. Accounts where age verification returns a result below 21 years will be immediately closed and all associated funds returned. bigwin99 does not knowingly or intentionally process the personal data of minors under 18 years for any purpose.

If bigwin99 discovers that personal data has been submitted by or on behalf of a person under 21 years of age — whether through inadvertent registration, misrepresentation of age, or any other means — bigwin99 will take immediate steps to close the account, delete the associated personal data to the extent permitted by legal retention obligations, and report the incident to relevant regulatory authorities where required.

bigwin99 primarily processes personal data within the Philippines. However, certain third-party service providers — including international game studios, global fraud prevention platforms, and cloud infrastructure providers — may process personal data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, bigwin99 ensures that such transfers comply with the requirements of the Data Privacy Act and applicable NPC regulations, including ensuring that the recipient jurisdiction provides an adequate level of protection, or that appropriate contractual safeguards (such as Standard Contractual Clauses aligned with NPC guidance) are in place to protect your personal data during international processing.

bigwin99 will not transfer personal data to jurisdictions known to have inadequate data protection standards without implementing compensating controls sufficient to protect your rights as a Philippine data subject. Specific information about cross-border transfers is available from the Data Protection Officer upon request.

bigwin99 may send promotional communications — including bonus offers, new game announcements, sportsbook promotions, VIP program updates, and platform news — to registered players who have opted in to receive such communications during registration or account setup.

Marketing communications from bigwin99 may be delivered via SMS to your registered Philippine mobile number, via email, or via in-platform notifications when you are logged in to your bigwin99 account.

13.1 Withdrawing Marketing Consent

You may withdraw your consent to receive marketing communications at any time through any of the following methods:

• Updating your communication preferences in your bigwin99 Account Settings → Notifications
• Replying STOP to any marketing SMS sent by bigwin99
• Clicking the unsubscribe link in any marketing email from bigwin99
• Contacting bigwin99 support via live chat and requesting removal from marketing lists
• Submitting an opt-out request to the DPO at [email protected]

Opt-out requests will be processed within 5 business days. Withdrawing marketing consent will not affect your ability to use the bigwin99 platform or access any features. You will continue to receive transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts) which are necessary for account management and cannot be disabled.

bigwin99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or our platform operations. Material changes to this Policy — those that significantly affect how we collect, use, or share personal data or that affect your rights as a data subject — will be communicated to registered players via the email address or mobile number associated with their bigwin99 account at least ten (10) calendar days before the amended Policy takes effect.

Non-material changes — such as typographical corrections, structural reorganization without substantive change, or clarifications that do not alter the meaning of any provision — may be published without individual notification. The "Last Updated" date displayed at the top of this Policy and in the Table of Contents sidebar will always reflect the date of the most recent revision.

We recommend that you review this Policy periodically. Your continued use of the bigwin99 platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with any material change to this Policy, you may close your account by contacting bigwin99 support before the change takes effect.

For any questions, concerns, requests, or complaints relating to this Privacy Policy or bigwin99's handling of your personal data, please contact the bigwin99 Data Protection Officer:

• DPO Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 from within the bigwin99 platform (requires login)
• Response Time: Privacy-related inquiries acknowledged within 3 business days; substantive responses within 30 calendar days

If you are not satisfied with bigwin99's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. The NPC is the independent government authority responsible for administering and implementing the Data Privacy Act of 2012 and protecting the personal data rights of Filipino citizens.