Privacy Policy — good8.win Casino

01 Introduction

good8.win ("we," "us," "our," or the "Company") is committed to protecting the privacy and personal data of every user ("you" or "User") who accesses or registers on our online gaming platform at good8win.org. We understand that entrusting us with your personal information is a significant act of confidence, and we take that responsibility seriously.

This Privacy Policy describes the types of personal data we collect, the purposes for which we process it, the parties with whom we may share it, the security measures we employ to protect it, and the rights you have as a data subject under Philippine law. This Policy applies to all services, features, and content offered through the good8.win platform, including our website, mobile-optimized interface, customer support channels, and promotional communications.

By registering an Account or continuing to use the good8.win platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and may request deletion of your Account and associated data.

02 Personal Data We Collect

good8.win collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is processed. The categories of personal data we collect include:

Identity & Registration Data:

• Full legal name as it appears on a government-issued ID;
• Date of birth (to verify the 21+ age requirement);
• Gender (optional, for personalization purposes);
• Nationality and country of residence;
• Username and password (stored in encrypted form).

Contact Data:

• Email address;
• Mobile phone number;
• Residential address (barangay, city/municipality, province, ZIP code).

Identity Verification (KYC) Data:

• Copies of government-issued photo identification (e.g., Philippine passport, PhilSys National ID, SSS ID, driver's license, UMID);
• Proof of address documents (e.g., utility bill, bank statement);
• Selfie or liveness verification image for identity matching;
• Proof of payment method ownership where required.

Financial Data:

• GCash or PayMaya account reference (masked);
• Bank account details (masked, for withdrawal processing);
• Debit card details (masked, processed via PCI-DSS compliant payment processors);
• Transaction history including deposits, withdrawals, and gaming activity.

Technical & Usage Data:

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session duration, pages visited, and features used;
• Game history, bet amounts, win/loss records, and session logs.

Communications Data:

• Records of customer support interactions (live chat transcripts, email correspondence);
• Responses to surveys, promotions, or feedback requests.

03 How We Collect Your Data

We collect personal data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions;
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you browse or use the Platform;
• From third parties — including identity verification service providers, payment processors, fraud prevention services, and analytics providers, where permitted by applicable law;
• From public sources — such as publicly available government databases or sanctions lists, where required for compliance purposes.

04 How We Use Your Personal Data

good8.win processes your personal data for the following purposes:

• Account creation and management — to register your Account, verify your identity, and maintain your profile;
• Age verification — to confirm that you meet the 21+ age requirement mandated by Philippine law;
• Service delivery — to provide access to games, process deposits and withdrawals, and deliver customer support;
• Legal and regulatory compliance — to fulfill obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine laws;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, and unauthorized Account access;
• Responsible gaming — to monitor gaming behavior, enforce self-exclusion requests, and provide responsible gaming tools;
• Marketing and promotions — to send you relevant offers, bonuses, and updates, subject to your communication preferences (you may opt out at any time);
• Platform improvement — to analyze usage patterns, conduct research, and improve the functionality and user experience of the Platform;
• Dispute resolution — to investigate and resolve complaints, disputes, or legal claims.

05 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, good8.win processes your personal data on the following legal bases:

• Consent — for marketing communications and optional data processing activities where you have provided explicit consent;
• Contractual necessity — to perform our obligations under the Terms & Conditions you have agreed to, including Account management and service delivery;
• Legal obligation — to comply with applicable laws and regulations, including PAGCOR licensing requirements, AMLA obligations, and tax reporting;
• Legitimate interests — for fraud prevention, security monitoring, platform improvement, and responsible gaming enforcement, where these interests are not overridden by your rights and freedoms.

06 Data Sharing & Disclosure

good8.win does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors — GCash, PayMaya/Maya, and banking partners, for the purpose of processing deposits and withdrawals;
• Identity verification providers — third-party KYC and AML screening services used to verify your identity and comply with regulatory requirements;
• Game providers — software providers whose games are hosted on the Platform may receive anonymized or pseudonymized session data for technical and audit purposes;
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government bodies, where required by law or court order;
• IT and security service providers — cloud hosting, cybersecurity, and analytics vendors who process data on our behalf under strict data processing agreements;
• Professional advisors — lawyers, auditors, and accountants, where necessary for legal or financial compliance purposes.

All third-party service providers engaged by good8.win are contractually required to process your personal data only for the specified purpose, maintain appropriate security measures, and comply with applicable data protection laws.

07 Data Retention

good8.win retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Active Account data — retained for the duration of your Account's existence plus five (5) years after Account closure, in compliance with AMLA record-keeping requirements;
• KYC and identity documents — retained for a minimum of five (5) years from the date of verification, or longer if required by regulatory authorities;
• Transaction records — retained for a minimum of five (5) years in accordance with AMLA and PAGCOR requirements;
• Customer support records — retained for three (3) years from the date of the interaction;
• Marketing consent records — retained until you withdraw consent, plus one (1) year for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

08 Data Security

good8.win implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption — all data transmitted between your device and our servers is encrypted using TLS 1.2 or higher; sensitive data at rest is encrypted using AES-256;
• Access controls — personal data is accessible only to authorized personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication;
• Password security — user passwords are stored using industry-standard one-way hashing algorithms and are never stored in plain text;
• PCI-DSS compliance — payment card data is processed through PCI-DSS Level 1 compliant payment processors; good8.win does not store full card numbers on its own servers;
• Regular security audits — our systems undergo periodic vulnerability assessments and penetration testing by independent security professionals;
• Incident response — we maintain a documented data breach response plan and will notify affected users and the National Privacy Commission within 72 hours of discovering a breach that poses a real risk of serious harm, as required by the Data Privacy Act.

While we employ robust security measures, no system is completely immune to security risks. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us immediately if you suspect unauthorized access.

09 Cookies & Tracking Technologies

good8.win uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how the Platform is used.

We use the following categories of cookies:

• Strictly necessary cookies — essential for the Platform to function correctly, including session management and security features. These cannot be disabled;
• Functional cookies — remember your preferences such as language settings, game history, and display options to personalize your experience;
• Analytics cookies — collect anonymized data about how users interact with the Platform to help us improve performance and usability;
• Security cookies — used to detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. good8.win does not use cookies to serve third-party advertising or to track your activity across unrelated websites.

10 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by good8.win:

• Right to be informed — to know what personal data we collect, how we use it, and with whom we share it;
• Right of access — to request a copy of the personal data we hold about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data, subject to our legal retention obligations;
• Right to object — to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests;
• Right to data portability — to receive your personal data in a structured, commonly used format where technically feasible;
• Right to lodge a complaint — to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

Please note that certain rights may be limited where processing is required for compliance with legal obligations, prevention of fraud, or protection of the rights of other individuals.

11 Children's Privacy

If you are a parent or guardian and believe that a minor has registered on our Platform or provided us with personal data, please contact us immediately at [email protected] so we can take prompt corrective action.

12 International Data Transfers

good8.win primarily processes and stores personal data within the Philippines. In certain circumstances, your data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international game software vendors.

Where such transfers occur, good8.win ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law;
• Transfers only to countries or organizations recognized as providing adequate data protection;
• Compliance with NPC guidelines on cross-border data transfers.

By using the good8.win Platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards outlined above.

13 Updates to This Privacy Policy

good8.win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. Material changes will be communicated to registered Users via email or a prominent notice on the Platform prior to the effective date of the change.

The "Effective Date" at the top of this Policy indicates when it was last revised. We encourage you to review this page periodically. Your continued use of the Platform following any update constitutes your acceptance of the revised Policy.

14 Contact Us & Data Protection Officer

good8.win has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through its official government channels.