Privacy Policy – good8.win

01 Introduction

good8.win ("we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our online casino platform. We understand that when you share your personal information with us — whether during registration, account verification, or day-to-day use of the Platform — you are placing your trust in us. We take that responsibility seriously.

This Privacy Policy describes the types of personal information we collect from users of the good8.win website and related services (collectively, the "Platform"), the purposes for which we use that information, the circumstances under which we may share it, and the rights you have with respect to your personal data.

This policy is designed to comply with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. It also reflects our obligations under PAGCOR's data governance requirements for licensed online gaming operators.

Please read this Privacy Policy carefully. If you have questions about how good8.win handles your personal data, you may contact our Data Protection Officer at any time using the details provided in Section 14.

02 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for your personal information is:

As the data controller, good8.win determines the purposes and means of processing your personal data. We are registered with the National Privacy Commission of the Philippines and maintain a Data Protection Officer (DPO) to oversee compliance with applicable data privacy laws.

03 Data We Collect

good8.win collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

We do not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect information about your religious beliefs, political opinions, or health status unless directly relevant to a responsible gaming assessment you have voluntarily initiated.

04 How We Collect Your Data

good8.win collects personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs. See Section 8 for our full Cookies Policy.
• Third-Party Sources: Identity verification data from accredited KYC service providers; fraud screening data from anti-money laundering (AML) compliance partners; payment data from GCash, PayMaya, and banking partners in connection with your transactions.
• Regulatory Sources: Information received from PAGCOR or other regulatory bodies in connection with licensing, compliance audits, or player protection obligations.

05 How We Use Your Data

good8.win uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your good8.win account, including processing your registration, verifying your identity, and managing your account settings.
• Service Delivery: To provide you with access to the games, features, and services available on the good8.win Platform.
• Financial Transactions: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other accepted payment methods.
• Regulatory Compliance: To fulfill our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012, including mandatory reporting and record-keeping requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal conduct on the Platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce deposit limits and self-exclusion requests, and comply with PAGCOR's responsible gaming requirements.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent to receive such communications. You may opt out at any time.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the good8.win Platform.
• Legal Proceedings: To establish, exercise, or defend legal claims in connection with your use of the Platform.

06 Legal Basis for Processing

Under the Data Privacy Act of 2012, good8.win processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to provide you with access to the good8.win Platform and its services, including account management, game access, and payment processing.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AMLA obligations, and NPC data governance standards.
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a secure, fair, and commercially viable online gaming platform, including fraud prevention, security monitoring, and platform analytics — provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and certain non-essential data processing activities, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

07 Data Sharing & Disclosure

good8.win does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Service Providers: Third-party vendors who assist us in operating the Platform, including KYC/identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), cloud hosting providers, and customer support platforms. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data privacy law.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law or regulatory obligation.
• Law Enforcement: Philippine law enforcement agencies, courts, or other public authorities where disclosure is required by a valid legal order, warrant, or subpoena.
• Game Providers: Third-party game studios and live dealer providers whose games are available on the good8.win Platform, to the extent necessary for game operation, dispute resolution, and regulatory compliance.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of good8.win's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

Any third party receiving your personal data is required to maintain appropriate technical and organizational security measures and to use your data only for the specified purpose of the disclosure.

08 Cookies & Tracking Technologies

good8.win uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and gather analytics data. The following types of cookies are used:

• Essential Cookies: Strictly necessary for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gaming limit configurations.
• Analytics Cookies: Used to collect aggregated, anonymized data about how users interact with the Platform, including pages visited, session duration, and navigation paths. This data helps us improve Platform performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and bot traffic on the Platform.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the good8.win Platform, including your account login.

09 Data Retention

good8.win retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including compliance with legal, regulatory, and reporting obligations. The following retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with PAGCOR record-keeping requirements and AMLA obligations.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by the Anti-Money Laundering Act.
• Identity Verification Documents: Retained for a minimum of 5 years following account closure or the completion of the KYC process, whichever is later.
• Customer Support Records: Retained for 3 years from the date of the last interaction, or longer if the records are relevant to an ongoing dispute or legal proceeding.
• Marketing Consent Records: Retained for the duration of your consent and for 1 year following withdrawal of consent, as evidence of the consent given.
• Technical and Usage Data: Retained for up to 2 years from the date of collection, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with good8.win's data disposal procedures.

10 Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by good8.win:

• Right to Be Informed: You have the right to be informed of how your personal data is being collected, processed, and used — which is the primary purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request its transfer to another data controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within 15 business days in accordance with NPC guidelines. We may require you to verify your identity before processing your request.

11 Data Security

good8.win implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the good8.win Platform is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial information, is stored in encrypted form using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized good8.win personnel and service providers on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Intrusion Detection: good8.win employs real-time intrusion detection and prevention systems to monitor for unauthorized access attempts and suspicious activity.
• Regular Security Audits: The Platform undergoes regular independent security audits and penetration testing to identify and remediate vulnerabilities.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, good8.win will notify the National Privacy Commission and affected data subjects within the timeframes prescribed by the Data Privacy Act and NPC Circular No. 16-03.

While good8.win takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your good8.win account credentials and for notifying us immediately if you suspect unauthorized access to your account.

12 Children's Privacy

The good8.win Platform is strictly intended for persons who are 21 years of age or older, in accordance with PAGCOR regulations governing online casino gaming in the Philippines. good8.win does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the good8.win Platform, please contact us immediately at [email protected].

good8.win employs mandatory age verification procedures during the registration process to prevent underage access to the Platform. These procedures include verification of government-issued Philippine identification documents confirming date of birth.

13 Changes to This Privacy Policy

good8.win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered users via email or a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is indicated at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how good8.win protects your personal data. Your continued use of the Platform following the posting of a revised Privacy Policy constitutes your acknowledgment of the changes.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way good8.win handles your personal data, please contact our Data Protection Officer or customer support team:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have not been adequately addressed by good8.win.