cebuwin Privacy Policy

1. Introduction

cebuwin is committed to protecting the privacy and personal data of every Filipino player who uses our platform. This Policy applies to all personal information collected through cebuwin.org, our mobile applications, customer support channels, and any other cebuwin-branded services or touchpoints.

We encourage you to read this Policy carefully before registering an account or using any cebuwin service. By accessing cebuwin.org and creating an account, you acknowledge that you have read and understood this Policy and agree to the collection and use of your information as described herein.

This Policy should be read alongside cebuwin's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Who We Are

cebuwin (cebuwin.org) is an online casino and sports betting platform operated for the Filipino market. We offer a broad range of gaming products including slots, live dealer casino games, sports betting, bingo, and sabong — all designed for players in the Philippines and accessible via local payment methods such as GCash, Maya, BPI, BDO, and Metrobank.

For the purposes of the Philippine Data Privacy Act of 2012, cebuwin acts as the Personal Information Controller with respect to the personal data of its registered players and website visitors. Our designated Data Protection Officer (DPO) can be contacted using the details provided in Section 15 of this Policy.

3. Data We Collect

3.1 Information You Provide Directly

When you register a cebuwin account, use our services, or contact our support team, we may collect the following categories of personal information:

Category	Examples	Purpose
Identity Data	Full name, date of birth, gender, government ID number	Account registration, KYC verification, age verification (21+)
Contact Data	Mobile number, email address, home address	Account communication, OTP verification, support
Financial Data	GCash number, Maya account, bank account details, transaction history	Processing deposits and withdrawals in Philippine Peso
Identity Documents	UMID, Passport, Driver's License, Voter's ID (uploaded copies)	KYC compliance, fraud prevention, regulatory requirements
Account Credentials	Username, hashed password	Account access and security
Support Communications	Live chat transcripts, email correspondence	Customer support, dispute resolution, quality assurance

3.2 Information Collected Automatically

When you access cebuwin.org, we automatically collect certain technical and usage data:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution;
• Usage Data: Pages visited, games played, session duration, clickstream data, search queries within the platform;
• Location Data: Approximate geographic location derived from your IP address (used for regulatory compliance and geo-restriction checks);
• Cookie Data: Information collected via cookies and similar tracking technologies, as detailed in Section 7.

3.3 Information from Third Parties

cebuwin may receive personal information about you from the following third-party sources:

• Payment processors (e.g., GCash, Maya, BPI) — to confirm transaction details;
• KYC and identity verification service providers — to validate government-issued identification;
• Fraud prevention and anti-money laundering (AML) screening services;
• Analytics providers — aggregated and anonymized behavioral data to improve platform performance.

4. How We Use Your Data

cebuwin uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining, and securing your cebuwin account;
• Identity Verification (KYC): Verifying your identity and age (21+ requirement) in compliance with Philippine gaming regulations;
• Payment Processing: Processing deposits and withdrawals in Philippine Peso via your chosen payment method;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, and unauthorized account access;
• Regulatory Compliance: Meeting obligations under the Data Privacy Act of 2012, PAGCOR licensing conditions, and applicable AML/CFT regulations;
• Customer Support: Responding to your queries, resolving disputes, and improving our support services;
• Platform Improvement: Analyzing usage patterns to enhance the cebuwin platform, fix bugs, and develop new features;
• Responsible Gaming: Monitoring gameplay behavior to identify and support players who may be at risk of problem gambling;
• Marketing Communications: Sending promotional offers, bonuses, and cebuwin news — only where you have provided consent or where permitted by law. You may opt out at any time.

5. Legal Basis for Processing

cebuwin processes your personal data on the following legal grounds under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our contract with you (i.e., to provide the cebuwin gaming service as described in our Terms & Conditions);
• Legal Obligation: Processing necessary to comply with Philippine law, including anti-money laundering requirements, PAGCOR regulations, and tax obligations;
• Legitimate Interests: Processing for fraud prevention, platform security, and the improvement of cebuwin services — where our interests are not overridden by your rights;
• Consent: Processing for direct marketing communications and the use of non-essential cookies — where you have given your explicit consent, and which you may withdraw at any time.

6. Data Sharing & Disclosure

cebuwin may share your personal data with the following categories of recipients:

• Payment Service Providers: GCash, Maya, GrabPay, BPI, BDO, Metrobank, Coins.ph, and other payment processors — to facilitate your deposits and withdrawals;
• KYC & Identity Verification Providers: Third-party services that assist in verifying the identity of cebuwin players in compliance with Philippine KYC requirements;
• Fraud Prevention & AML Screening Services: Providers that help cebuwin detect and prevent fraud, money laundering, and other illegal activities;
• IT Infrastructure & Cloud Service Providers: Companies that host cebuwin's servers, databases, and technical infrastructure — all bound by strict data processing agreements;
• Customer Support Platforms: Third-party live chat and ticketing systems used to provide cebuwin's 24/7 support service;
• Regulatory Authorities: Philippine government agencies, PAGCOR, the National Privacy Commission (NPC), or law enforcement — where required by law or court order;
• Professional Advisors: Legal counsel, auditors, and accountants — where necessary and under strict confidentiality obligations.

All third-party service providers that process personal data on cebuwin's behalf are required to enter into data processing agreements and are prohibited from using your data for any purpose other than providing services to cebuwin.

7. Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device when you visit cebuwin.org. They allow the platform to recognize your browser, remember your preferences, and analyze how you interact with cebuwin. We also use similar technologies such as web beacons and local storage.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the cebuwin platform to function — enabling login sessions, security checks, and core navigation. These cannot be disabled;
• Performance & Analytics Cookies: Help us understand how players use cebuwin — which pages are visited most, where errors occur, and how to improve the experience. Data is aggregated and anonymized;
• Functional Cookies: Remember your preferences such as language settings, last-played game, and display options;
• Marketing & Targeting Cookies: Used to deliver relevant promotional content and measure the effectiveness of cebuwin's marketing campaigns. These are only set with your consent.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and receive alerts when a new cookie is set. Note that disabling certain cookies may affect the functionality of cebuwin. For marketing and targeting cookies, you may withdraw your consent at any time via cebuwin's cookie preference settings.

8. Data Retention

cebuwin retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. Our general retention principles are as follows:

• Active Account Data: Retained for the duration of your cebuwin account and for a period of up to five (5) years after account closure, in compliance with AML and record-keeping requirements;
• KYC & Identity Documents: Retained for a minimum of five (5) years after the end of the customer relationship, as required by AMLC regulations;
• Transaction Records: Retained for five (5) years for financial compliance and audit purposes;
• Support Communications: Retained for up to two (2) years for quality assurance and dispute resolution;
• Marketing Preferences: Retained until you withdraw consent or close your cebuwin account.

When personal data is no longer required, cebuwin securely deletes or anonymizes it in accordance with our data disposal procedures.

9. Security Measures

cebuwin implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and cebuwin's servers is encrypted using industry-standard TLS protocols;
• Encrypted Data Storage: Sensitive personal and financial data is stored in encrypted databases with strict access controls;
• Two-Factor Authentication (2FA): Available for all cebuwin player accounts to add an additional layer of login security;
• Access Controls: cebuwin employee access to personal data is strictly limited on a need-to-know basis, with all access logged and monitored;
• Regular Security Audits: cebuwin's platform and infrastructure undergo regular independent security assessments and penetration testing;
• Fraud Detection Systems: Real-time monitoring for unusual account activity, suspicious transactions, and potential unauthorized access.

While cebuwin takes all reasonable precautions to protect your data, no internet transmission or electronic storage system is completely secure. In the event of a data breach that affects your rights, cebuwin will notify you and the National Privacy Commission (NPC) as required by law.

10. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by cebuwin. To exercise any of these rights, contact our Data Protection Officer using the details in Section 15.

cebuwin will respond to all verified privacy rights requests within thirty (30) days of receipt. We may need to verify your identity before processing certain requests to ensure we are dealing with the account holder.

11. Minors & Age Policy

If you are a parent or guardian and believe that your child has registered a cebuwin account or provided personal information to us, please contact our Data Protection Officer immediately using the contact details in Section 15. We take all such reports seriously and will act promptly.

cebuwin employs age verification checks during the registration process and may request government-issued proof of age at any time. Accounts where the registered player is found to be under 21 years of age will be immediately closed and any deposits refunded to the verified payment source.

12. International Data Transfers

cebuwin primarily stores and processes personal data within the Philippines. In some cases, data may be transferred to and processed by cebuwin's service providers located outside the Philippines — for example, cloud infrastructure providers or global fraud prevention services.

Where such international transfers occur, cebuwin ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to provide a standard of data protection equivalent to that required under the Philippine Data Privacy Act of 2012.

By using cebuwin, you consent to the transfer of your personal data to service providers outside the Philippines where such transfers are necessary to provide the cebuwin service, subject to the safeguards described above.

13. Third-Party Services & Links

The cebuwin platform may contain links to third-party services, payment gateways, or game providers. These third-party services have their own privacy policies, and cebuwin is not responsible for their data practices. We encourage you to review the privacy policies of any third-party services you interact with through cebuwin.

Game content provided by third-party game studios on the cebuwin platform is subject to the privacy practices of those studios. These providers may collect certain gameplay data directly. cebuwin requires all game providers to comply with applicable data protection laws, but their specific data collection practices are governed by their own privacy policies.

14. Changes to This Privacy Policy

cebuwin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via email or in-platform notification at least seven (7) days before the changes take effect. The effective date of the current version is always displayed at the top of this page.

Your continued use of cebuwin after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, you must stop using cebuwin and may close your account by contacting our support team.

15. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or cebuwin's handling of your personal data, please contact our designated Data Protection Officer: