epwin7 Privacy Policy

1. About This Privacy Policy

This Privacy Policy ("Policy") is issued by epwin7 ("we," "us," "our," "the Operator") and applies to all personal data processed in connection with your use of the epwin7 online casino and sports betting platform accessible at epwin7.lat ("the Platform").

epwin7 is committed to protecting the privacy and personal data of all users, including Filipino players who access the Platform from anywhere in the Philippines — whether in Metro Manila, Cebu, Davao, or the broader archipelago. This Policy is designed to be consistent with the Republic Act No. 10173, otherwise known as the Philippine Data Privacy Act of 2012 ("DPA"), and its implementing rules and regulations.

By registering for or using the epwin7 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

2. Personal Data We Collect

epwin7 collects personal data that is necessary to operate the Platform, verify your identity and age, process financial transactions, comply with applicable legal and regulatory obligations, and provide you with a safe and personalised gaming experience. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name (as it appears on your government-issued Philippine ID);
• Date of birth (for age verification — players must be 21 or older);
• Registered Philippine mobile number;
• Email address (if provided during registration);
• Chosen username.

2.2 Identity Verification Data

• Government-issued Philippine identification documents (e.g., PhilSys National ID, UMID, passport, driver's license, voter's ID, PRC ID);
• Selfies or photographs submitted for liveness verification;
• Proof of address documents, where required;
• Proof of payment method ownership, where requested.

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers;
• GCash and Maya account references (display name or last digits, as applicable);
• Bank account details submitted for bank transfer withdrawals (BPI, BDO, UnionBank, Metrobank);
• Cryptocurrency wallet addresses submitted for USDT TRC20 transactions;
• Transaction history and wallet balance records within the Platform.

2.4 Gaming Activity Data

• Game sessions played, bet amounts, outcomes, and win/loss records;
• Bonus and promotion claims and wagering activity;
• Sports bets placed, including market selections, odds accepted, and settlement results;
• Responsible gaming settings you have configured, including deposit limits and self-exclusion status.

2.5 Technical & Device Data

• IP address and approximate geolocation (country/region level);
• Device type, operating system, and browser type and version;
• Session logs including login timestamps and session durations;
• Cookie identifiers and similar tracking data (see Section 7).

2.6 Communications Data

• Records of your communications with the epwin7 support team via Live Chat, Viber, Messenger, or email;
• Feedback and survey responses submitted voluntarily.

3. How We Collect Your Data

epwin7 collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make deposits or withdrawals, contact our support team, participate in promotions, or configure your account settings;
• Automatically — through technical systems as you use the Platform, including server logs, session tracking, and cookie technologies (see Section 7);
• From payment processors — transaction confirmation data received from GCash, Maya, banks, and other payment service providers when you make deposits or request withdrawals;
• From identity verification services — where third-party identity verification providers are used to assist in confirming the authenticity of documents or liveness of selfie submissions;
• From fraud and compliance systems — automated risk and fraud detection systems that analyse transaction patterns and account behaviour against known risk indicators.

4. How We Use Your Personal Data

epwin7 uses your personal data for the following purposes:

epwin7 does not use your personal data for unsolicited third-party marketing. Platform-related promotional communications may be sent to your registered mobile number or email address, and you may opt out of such communications at any time by contacting our support team.

5. Legal Bases for Processing

Under the Philippine Data Privacy Act of 2012, epwin7 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under our Terms & Conditions — including account management, transaction processing, and game delivery;
• Consent: Where you have given us explicit consent for specific processing activities, including optional communications and voluntary data submissions;
• Legal obligation: Processing required to comply with applicable Philippine law, including anti-money laundering obligations, PAGCOR regulatory requirements, and tax law;
• Legitimate interest: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights and freedoms.

6. Data Sharing & Disclosure

epwin7 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly to the extent necessary for the stated purpose:

6.1 Payment Service Providers

Transaction data is shared with GCash (G-Xchange Inc.), Maya (PayMaya Philippines Inc.), BPI, BDO, UnionBank, and other payment processors solely to facilitate deposits and withdrawals. These providers process your data under their own applicable privacy frameworks.

6.2 Identity Verification Providers

Where third-party identity verification services are engaged, identity document images and selfie data may be transmitted to those providers exclusively for verification purposes. Data is not retained by these providers beyond the verification process.

6.3 Game Providers

Game session data (player identifier, bet amounts, outcomes) is shared with licensed game providers — including JILI Games, PG Soft, and Pragmatic Play — to deliver game services, resolve disputes, and ensure RNG integrity. No identity data is shared with game providers beyond anonymised player identifiers.

6.4 Regulatory and Law Enforcement Authorities

epwin7 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory or law enforcement bodies where required by applicable law, regulatory obligation, or valid legal process.

6.5 Professional Advisers

Legal counsel, auditors, and compliance advisers engaged by epwin7 may access personal data on a need-to-know, strictly confidential basis as required to provide their professional services.

7. Cookies & Tracking Technologies

The epwin7 Platform uses cookies and similar tracking technologies to operate the Platform, maintain your session, remember your preferences, and collect anonymised analytics data that helps us improve the service. The categories of cookies we use are:

• Strictly necessary cookies: Required for the Platform to function — including session management, login state, and security tokens. These cannot be disabled without breaking core Platform functionality;
• Functional cookies: Remember your language, display preferences, and previously selected game categories to improve your experience on return visits;
• Analytics cookies: Collect anonymised data about how users navigate the Platform — pages visited, session durations, and device types — to help us identify and fix usability issues;
• Security cookies: Support fraud detection systems by helping identify unusual patterns of device or browser behaviour within a session.

epwin7 does not use third-party advertising cookies or track your activity across unrelated websites. You can control cookie settings through your browser's privacy settings. Disabling strictly necessary cookies may prevent access to parts of the Platform.

8. Data Retention

epwin7 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, and to comply with applicable legal, regulatory, and tax retention obligations. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your account plus a minimum of five (5) years following account closure, in compliance with Philippine anti-money laundering recordkeeping requirements;
• Financial and transaction data: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable Philippine financial regulations;
• Gaming activity data: Retained for a minimum of two (2) years from the date of activity, and longer where required for dispute resolution or regulatory purposes;
• Support communications: Retained for two (2) years from the date of the communication, or longer where relevant to an ongoing dispute;
• Technical and device data: Retained for up to twelve (12) months, unless retained longer for security investigation purposes;
• Self-exclusion records: Retained permanently to prevent re-registration by self-excluded individuals.

Upon expiration of applicable retention periods, personal data is securely deleted or permanently anonymised in accordance with our internal data lifecycle management procedures.

9. Data Security

epwin7 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the epwin7 Platform — the same encryption standard used by Philippine banks including BPI and BDO;
• Password hashing: Passwords are stored as one-way cryptographic hashes — plaintext passwords are never stored;
• Two-factor authentication (2FA) available to all account holders via OTP sent to your registered Philippine mobile number;
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis, with role-based access controls and access logging;
• Regular security assessments and vulnerability reviews of Platform infrastructure;
• Incident response procedures for the detection, containment, and notification of any personal data breaches.

While epwin7 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You also have a responsibility to protect your account credentials — never share your password or 2FA codes with anyone, including anyone claiming to be epwin7 staff.

10. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by epwin7. To exercise any of these rights, contact our Data Privacy Officer (see Section 14):

Please note that certain data rights are subject to limitations where retention is required by law — for example, transaction records retained to comply with anti-money laundering regulations cannot be deleted on request. epwin7 will respond to all verified data rights requests within thirty (30) days of receipt.

11. Children & Minors

epwin7 implements age verification procedures at the point of account registration and may conduct additional age verification checks at any time. If epwin7 discovers or is notified that personal data has been collected from a person under 21 years of age, that account will be immediately closed, any balance refunded, and all personal data associated with the account deleted as promptly as reasonably practicable.

Parents and guardians who believe that a minor in their care has registered on the epwin7 Platform should contact our support team immediately via Live Chat, Viber, or Messenger.

12. Cross-Border Data Transfers

Some of epwin7's service providers — including game providers such as JILI Games, PG Soft, and Pragmatic Play, as well as certain technical infrastructure providers — may be located outside the Philippines. Where personal data is transferred internationally, epwin7 implements appropriate safeguards to ensure that such transfers comply with the Philippine Data Privacy Act, including:

• Contractual data processing agreements requiring recipient entities to maintain appropriate data protection standards;
• Transfers only to jurisdictions that maintain adequate data protection frameworks, or to recipients that have committed to equivalent protections via contractual measures;
• Minimisation of data transferred internationally — only data strictly necessary for the service purpose is shared with international providers.

epwin7 does not transfer your full identity documents or sensitive financial account data internationally. Transaction processing data shared with international game providers is limited to anonymised player identifiers and game session records.

13. Updates to This Privacy Policy

epwin7 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When material changes are made, we will notify users by posting a notice on the Platform and, where reasonably practicable, by sending a notification to your registered mobile number.

The effective date at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically. Your continued use of the epwin7 Platform after an updated Policy is posted constitutes your acceptance of the revised terms.

14. Contact & Data Privacy Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by epwin7, please contact us through the following channels:

We will acknowledge all privacy-related requests within seventy-two (72) hours and will respond substantively within thirty (30) days, as required by the Philippine Data Privacy Act. For complaints that cannot be resolved through our internal process, you have the right to escalate to the National Privacy Commission of the Philippines.