Plain-language notice: This policy is written in plain Filipino English so it's actually readable. PaldoWin collects personal data to verify your identity, process your transactions, and keep your account secure. We never sell your data. If you have questions at any point, our support team is available 24/7 at support@paldowin.best.
1. Introduction
PaldoWin takes the privacy and security of its players' personal information seriously. This Privacy Policy describes how PaldoWin collects, uses, stores, and protects personal data belonging to players and visitors of the paldowin.best website and associated services.
This policy applies to all PaldoWin products and services, including sports betting, card games, Pusoy, jackpot slots, live dealer games, the Refer a Friend programme, and all customer support interactions. By registering a PaldoWin account or by continuing to use the PaldoWin platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.
PaldoWin's data practices are governed by the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its implementing rules and regulations issued by the National Privacy Commission (NPC). PaldoWin complies fully with these requirements and respects the rights of every Filipino data subject.
2. Who We Are – Data Controller
For the purposes of the Philippine Data Privacy Act, PaldoWin is the data controller responsible for your personal information. This means PaldoWin determines the purposes for which your data is used and the manner in which it is processed.
PaldoWin operates as a Philippine-licensed online gaming platform serving players located in the Philippines. Our registered contact for data privacy enquiries is our Data Protection Officer (DPO), reachable via the contact details in Section 14 of this policy.
Data Protection Officer: PaldoWin has appointed a dedicated DPO in compliance with NPC requirements. All data privacy requests, complaints, and enquiries are handled by the DPO team via support@paldowin.best with "Privacy" in the subject line.
3. Personal Data We Collect
PaldoWin collects personal data that is necessary for the operation of a licensed online gaming platform. The categories of personal data we collect are described below.
3.1 Identity and Contact Information
- Full legal name as it appears on your government-issued ID
- Date of birth (for age verification – 21+ requirement)
- Philippine residential address
- Mobile phone number (Philippine number)
- Email address
3.2 Identity Verification Documents
- Government-issued photo ID (Philippine passport, UMID, SSS ID, driver's licence, PhilSys National ID, or postal ID)
- Proof of address documents where required
- Selfie photograph for liveness verification where applicable
3.3 Financial and Payment Data
- GCash, Maya, or other e-wallet account identifiers registered in your name
- Bank account details where used for deposits or withdrawals via InstaPay or PESONet
- Visa or Mastercard card details (card number, expiry, billing name – processed by certified payment processors, not stored directly by PaldoWin)
- Transaction history: deposit amounts, withdrawal amounts, dates, and reference numbers
3.4 Account and Gaming Activity Data
- PaldoWin account username and encrypted password
- Betting history across all PaldoWin products
- Game session data including duration, stakes, and outcomes
- Bonus and promotion usage history
- Responsible gaming preferences and tool settings
3.5 Technical and Device Data
- IP address and approximate geolocation (to confirm Philippines residency)
- Device type, operating system, and browser version
- Session logs and access timestamps
- Cookie identifiers and session tokens
3.6 Communications Data
- Records of live chat conversations with PaldoWin support
- Email correspondence with PaldoWin
- Complaint and dispute records
4. How We Collect Your Personal Data
PaldoWin collects personal data through the following channels:
- Directly from you: When you register a PaldoWin account, submit KYC documents, make deposits or withdrawals, contact customer support, or participate in promotions.
- Automatically from your device: When you access the PaldoWin platform, our servers automatically collect technical data such as your IP address, device information, and session logs.
- From payment processors: Transaction confirmation data is shared with PaldoWin by the payment service provider (e.g., GCash, Maya) after a transaction is authorised. PaldoWin does not receive full payment credentials for card transactions – these are handled entirely by the payment processor.
- From identity verification providers: Where PaldoWin uses a third-party KYC verification service, that provider returns a verification result and certain verified data points to PaldoWin. The verification provider processes your documents under their own privacy policy, which you will be informed of during the KYC process.
- From cookies and tracking technologies: As described in Section 8 of this policy.
5. Why We Use Your Personal Data
PaldoWin uses your personal data only for the following purposes, each of which is necessary for operating a licensed online gaming platform fairly and legally in the Philippines:
- Account management: Creating and maintaining your PaldoWin account, processing logins, and managing account settings.
- Identity and age verification: Confirming that you meet the 21+ age requirement and are a resident of the Philippines as required by our gaming licence.
- Anti-money laundering (AML) compliance: PaldoWin is required under Philippine law to monitor transactions and verify the source of funds for certain deposit and withdrawal amounts. This is a legal obligation, not a choice.
- Payment processing: Routing your deposit to your wallet and routing your withdrawal to your registered payment account.
- Customer support: Responding to your queries, resolving disputes, and maintaining records of our interactions.
- Platform security and fraud prevention: Detecting and preventing unauthorised account access, duplicate accounts, bonus abuse, and other fraudulent activity.
- Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and applying the responsible gaming tools you have set in your account.
- Regulatory reporting: Submitting reports required by our Philippine gaming regulator and other authorities as required by law.
- Platform improvement: Analysing aggregated, anonymised usage data to improve PaldoWin's products and user experience.
- Marketing communications: Sending you relevant promotions and offers by email or SMS, where you have given consent to receive these. You can withdraw this consent at any time.
6. Legal Basis for Processing
Under the Philippine Data Privacy Act, PaldoWin is required to have a lawful basis for processing your personal data. The bases we rely on are:
- Contractual necessity: Processing required to fulfil your account agreement with PaldoWin – including account creation, payment processing, game delivery, and support.
- Legal obligation: Processing required to comply with Philippine law, including AML obligations, gaming regulatory requirements, and tax reporting.
- Legitimate interests: Processing for fraud prevention, platform security, and aggregated analytics, where these do not override your privacy rights.
- Consent: Processing for direct marketing communications. You may withdraw marketing consent at any time by contacting support or using the unsubscribe link in any PaldoWin marketing email.
7. Who We Share Your Data With
PaldoWin does not sell, rent, or trade your personal data. We share data only in the following circumstances and only with parties who are contractually bound to protect it:
7.1 Payment Service Providers
PaldoWin shares transaction reference data with GCash, Maya, GrabPay, Coins.ph, and bank partners to process deposits and withdrawals. These providers receive only the data necessary to complete the transaction.
7.2 Identity Verification Providers
PaldoWin uses third-party KYC verification services to process identity documents. These providers operate under separate data processing agreements and are certified to handle Philippine personal data.
7.3 Regulatory and Law Enforcement Authorities
PaldoWin is legally required to disclose player information to the Philippine gaming regulator, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or law enforcement agencies when lawfully requested. PaldoWin will always verify the legality of any such request before disclosing data.
7.4 Service Providers
PaldoWin uses trusted technology service providers for platform hosting, email delivery, customer support software, and security monitoring. These providers act as data processors under written agreements that restrict them from using your data for any purpose other than providing services to PaldoWin.
No overseas data transfers: PaldoWin stores and processes player data on servers located within or accessible from the Philippines. Any service providers who process data outside the Philippines are required to provide equivalent data protection standards as a contractual condition.
8. Cookies and Tracking Technologies
PaldoWin uses cookies and similar technologies on the paldowin.best website to keep the platform functional and secure. A cookie is a small text file stored on your device when you visit a website. PaldoWin uses the following categories of cookies:
You can manage optional cookie preferences from your browser settings. Disabling essential or security cookies will prevent PaldoWin from functioning correctly and may result in your being unable to log in.
9. How Long We Keep Your Data
PaldoWin retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Philippine law.
After the applicable retention period, PaldoWin securely deletes or anonymises your personal data. Anonymised data may be retained for statistical and platform improvement purposes without limit, as it can no longer identify you.
10. How We Keep Your Data Secure
PaldoWin implements technical and organisational security measures appropriate to the sensitivity of the personal data it holds. These measures include:
- SSL/TLS encryption: All data transmitted between your device and PaldoWin's servers is encrypted using industry-standard TLS protocols.
- Encrypted data storage: Sensitive data including passwords (hashed and salted), payment identifiers, and identity documents are stored in encrypted form.
- Access controls: PaldoWin staff access to player personal data is restricted on a strict need-to-know basis. All internal access is logged and audited.
- Two-factor authentication: Available for all PaldoWin player accounts and mandatory for all internal staff accounts with access to player data.
- Regular security assessments: PaldoWin's platform undergoes regular security reviews and penetration testing by qualified security professionals.
- Data breach response: PaldoWin has a documented data breach response plan. In the event of a breach affecting your personal data, PaldoWin will notify affected players and the National Privacy Commission within the timeframes required by RA 10173.
While PaldoWin takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for using a secure device and connection when accessing PaldoWin.
11. Your Data Privacy Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data held by PaldoWin. To exercise any of these rights, contact our Data Protection Officer at support@paldowin.best with "Privacy Request" in the subject line.
Right to Be Informed
You have the right to know what personal data PaldoWin collects, why it is collected, how it is used, and with whom it is shared. This Privacy Policy fulfils that right.
Right to Access
You may request a copy of the personal data PaldoWin holds about you. PaldoWin will respond to verified access requests within 15 business days.
Right to Rectification
If any personal data PaldoWin holds about you is inaccurate or incomplete, you have the right to have it corrected. Most basic account details can be updated directly from your account dashboard.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the original purpose, where you withdraw consent, or where it has been unlawfully processed – subject to PaldoWin's legal retention obligations under AML and gaming regulations.
Right to Object
You may object to PaldoWin processing your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to PaldoWin demonstrating compelling grounds.
Right to Data Portability
Where processing is based on your consent or a contract, you may request your personal data in a structured, machine-readable format for transfer to another service.
Right to File a Complaint
If you believe PaldoWin has violated your data privacy rights, you may file a complaint with the Philippine National Privacy Commission (NPC) at privacy.gov.ph.
12. Children's Privacy
PaldoWin's platform is strictly for adults aged 21 and above. PaldoWin does not knowingly collect personal data from individuals under the age of 21. Age verification is performed on all accounts before real-money gaming is permitted.
If PaldoWin discovers that personal data has been collected from a player who is under 21 years of age, that account will be immediately suspended, all associated data will be deleted, and any deposited funds will be returned to the originating payment account. If you believe a minor has registered a PaldoWin account, please contact us immediately at support@paldowin.best.
13. Updates to This Privacy Policy
PaldoWin may update this Privacy Policy from time to time to reflect changes in our data practices, changes in Philippine law, or changes to the services we provide. When we make material changes, we will notify registered players via the email address on their account at least 14 days before the changes take effect.
The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of PaldoWin following any update constitutes your acknowledgement of the revised policy.
Minor updates – such as typographical corrections or clarifications that do not change the substance of the policy – may be published without advance notice.
14. How to Contact Us About Privacy
For all data privacy enquiries, requests, and complaints, please contact PaldoWin's Data Protection Officer:
Include "Privacy Request" or "Privacy Complaint" in the subject line. Our DPO team will acknowledge your message within one business day and provide a full response within 15 business days.
For general privacy questions, you can also reach our support team via live chat from your PaldoWin account dashboard at any time. Live chat agents can escalate data privacy requests to the DPO team on your behalf.