Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") applies to all personal data processed by goodwin8 in connection with the operation of goodwin8.net and all associated services, including account registration, gaming activity, financial transactions, customer support interactions, and marketing communications (collectively, "goodwin8 Services").

goodwin8 is the data controller responsible for your personal data. goodwin8 processes personal data in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, the standards of the National Privacy Commission of the Philippines, and applicable PAGCOR data handling requirements for licensed online gaming operators.

This Policy applies to all individuals who access or use goodwin8 Services, including registered players, prospective players, and visitors to goodwin8.net. For the purposes of this Policy, "you" and "your" refer to any such individual.

2. Personal Data We Collect

goodwin8 collects personal data in the following categories:

goodwin8 does not intentionally collect sensitive personal information beyond what is required for identity verification and PAGCOR-mandated KYC compliance. Where government-issued ID documents are collected, they are used solely for identity verification purposes and stored with appropriate technical and organizational security controls.

3. How goodwin8 Uses Your Personal Data

goodwin8 uses your personal data for the following purposes:

• Account Management: To create, maintain, and secure your goodwin8 account, process your registration, verify your identity, and enable you to access goodwin8 Services.
• Transaction Processing: To process deposits, withdrawals, and related financial transactions through your chosen payment method (GCash, Maya, bank transfer, etc.).
• Legal & Regulatory Compliance: To fulfill goodwin8's obligations under PAGCOR's licensing requirements, the Philippine Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012. This includes KYC verification, transaction monitoring, and reporting obligations to regulatory authorities.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling behavior, to enforce deposit limits and self-exclusion requests, and to provide responsible gaming tools and support.
• Customer Support: To receive, process, and respond to your support inquiries, complaints, and feedback.
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the performance, features, and user experience of goodwin8 Services.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized access, money laundering, and other illegal conduct on the Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent or where goodwin8 has a legitimate interest in communicating with you as an existing player. You may opt out at any time.

4. Legal Basis for Processing

goodwin8 processes your personal data on the following legal bases as recognized under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform the contract between you and goodwin8 — i.e., to operate your account, process transactions, and provide gaming services.
• Legal Obligation: Processing required to comply with goodwin8's obligations under PAGCOR regulations, AMLA, the Data Privacy Act, and other applicable Philippine law.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming oversight, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. Data Sharing & Third Parties

goodwin8 does not sell your personal data to third parties. goodwin8 shares personal data only in the following circumstances:

• Payment Processors: Financial data necessary to process deposits and withdrawals is shared with relevant payment service providers (e.g., GCash, Maya, BPI, BDO) strictly to the extent necessary to complete financial transactions.
• Game Providers: Technical identifiers and game session data may be shared with certified game providers (e.g., JILI, PG Soft, Pragmatic Play) to enable game functionality and resolve technical disputes.
• KYC & AML Service Providers: Identity verification data may be processed by contracted KYC verification providers operating under data processing agreements that bind them to handle your data in accordance with this Policy and applicable law.
• Regulatory Authorities: goodwin8 is required by PAGCOR regulations and the Anti-Money Laundering Council (AMLC) to report certain transactions and player information. Such disclosures are made only to the extent required by applicable law.
• Analytics Providers: Anonymized and aggregated usage data may be shared with analytics service providers to support platform improvement. No personally identifiable information is shared in this context.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of goodwin8's business, player data may be transferred to the acquiring entity subject to the same data protection standards set out in this Policy.

6. Cookies & Tracking Technologies

goodwin8 uses cookies and similar tracking technologies on goodwin8.net for the following purposes:

• Essential Cookies: Required for the Platform to function, including session management, authentication state, and security tokens. These cannot be disabled without preventing Platform use.
• Analytical Cookies: Used to understand how players use the Platform — which pages are visited, how long sessions last, and where navigation flows break down. This data is aggregated and used to improve goodwin8 Services.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming tool configurations.
• Marketing Cookies: Used to track the effectiveness of marketing campaigns and to personalize promotional content shown to you on the Platform. These are used only with your consent.

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. Most modern browsers allow you to review, block, and delete cookies via the Settings or Privacy menu.

7. Data Retention

goodwin8 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

• Account & KYC Data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLA record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years per AMLA requirements.
• Gaming Activity Logs: Retained for a minimum of two (2) years for dispute resolution and regulatory audit purposes.
• Customer Support Communications: Retained for two (2) years from the date of the last interaction in a support thread.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which data is deleted within thirty (30) days.

Upon expiry of the applicable retention period, goodwin8 will securely delete or anonymize your personal data so that it can no longer be attributed to you as an identified individual.

8. Data Security

goodwin8 implements technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and goodwin8 servers.
• Encryption at rest for sensitive data categories including identity documents and financial account identifiers.
• Role-based access controls limiting internal access to personal data to goodwin8 personnel with a legitimate operational need.
• Two-factor authentication requirements for administrative access to systems containing personal data.
• Regular security testing, vulnerability assessments, and penetration testing of goodwin8's infrastructure.
• Incident response procedures for the detection, containment, and notification of personal data breaches.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, goodwin8 will notify the National Privacy Commission and affected individuals as required by the Data Privacy Act of 2012 and its Implementing Rules.

While goodwin8 takes these measures seriously, no data transmission over the internet is 100% secure. You are responsible for maintaining the security of your goodwin8 account credentials and for logging out of shared or public devices after each session.

9. Your Data Protection Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by goodwin8:

• Right to Be Informed: The right to know what personal data goodwin8 holds about you, the purpose of collection, and how it is processed — which this Policy addresses.
• Right of Access: The right to request a copy of the personal data goodwin8 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to goodwin8's legal retention obligations under PAGCOR and AMLA regulations, which may take precedence over erasure requests.
• Right to Object: The right to object to processing of your personal data for direct marketing purposes. Marketing opt-out takes effect within thirty (30) days of request.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe goodwin8 has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, contact goodwin8's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." goodwin8 will respond to verified requests within thirty (30) days. goodwin8 may require identity verification before processing data access or erasure requests.

10. Children's Privacy

goodwin8 Services are strictly intended for individuals aged 21 years and above. goodwin8 does not knowingly collect personal data from individuals under the age of 21. goodwin8's registration process includes age verification measures to prevent underage access.

If goodwin8 becomes aware that personal data has been collected from an individual under 21, the relevant account will be immediately closed, the personal data will be deleted, and any associated balances will be forfeited in accordance with goodwin8's Terms and Conditions. If you believe a minor has registered a goodwin8 account, please contact [email protected] immediately.

11. International Data Transfers

goodwin8's primary operations and data storage infrastructure are located within or managed in accordance with Philippine legal requirements. Where personal data is transferred to service providers or technology partners located outside the Philippines (for example, cloud infrastructure providers or game certification laboratories), goodwin8 ensures that such transfers are subject to appropriate safeguards — including contractual clauses that provide equivalent data protection to that available under Philippine law.

goodwin8 does not transfer personal data to countries or entities that do not provide adequate data protection standards without implementing appropriate protective measures.

12. Policy Updates

goodwin8 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform functionality. Material changes to this Policy will be communicated to registered players via their registered email address or through a notice displayed on the goodwin8 Platform at least fourteen (14) days before the changes take effect.

The current version of this Privacy Policy is always available at goodwin8.net/privacy-policy with the effective date clearly displayed at the top of the document. Continued use of goodwin8 Services following the effective date of an updated Policy constitutes acceptance of the changes.

13. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or goodwin8's handling of your personal data, please contact goodwin8's Data Protection Officer through the following channels:

• Email: [email protected] (Subject: "Data Privacy Request")
• Live Chat: Available 24/7 on goodwin8.net

goodwin8 is committed to resolving data privacy concerns promptly and transparently. If you are not satisfied with goodwin8's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines at www.privacy.gov.ph.