goodwin8 Privacy Policy

1. About This Privacy Policy

This Privacy Policy ("Policy") describes how goodwin8 ("goodwin8", "we", "our", or "us") collects, uses, discloses, stores, and protects the personal data of individuals ("you", "your", or "member") who access or use the goodwin8 platform, including the website available at goodwin8.app and any related mobile-optimised services.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines ("NPC"). goodwin8 is committed to ensuring that your personal data is handled responsibly, securely, and in strict accordance with applicable Philippine data privacy law.

This Policy should be read together with the goodwin8 Terms & Conditions, which govern your use of the goodwin8 platform and are incorporated by reference into this Policy.

2. Data Controller

goodwin8 acts as the personal information controller in respect of the personal data collected through the goodwin8 platform. For the purposes of the Data Privacy Act of 2012, goodwin8 determines the purposes and means of processing of your personal data and is responsible for ensuring that such processing is lawful, fair, and transparent.

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact our Data Protection Officer at the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

goodwin8 collects the following categories of personal data from members and prospective members:

• Identity Data: Full legal name, date of birth, nationality, government-issued identification number (e.g., Philippine National ID number, passport number, SSS/GSIS number, driver's licence number, PRC ID number);
• Contact Data: Email address, Philippine mobile number, residential address (city, province);
• Account Data: goodwin8 username, account registration date, account status, login history, session timestamps;
• Financial Data: GCash account number or registered mobile number, bank account details (BPI, BDO, Metrobank, or other Philippine bank where applicable), transaction history (deposits, withdrawals, wagers in PHP), payment method identifiers;
• Gaming Data: Game history, bet amounts in PHP, win/loss records, bonus redemption history, session duration, gaming preferences;
• Verification Data: Copies of government-issued identification documents and selfie photographs submitted for KYC (Know Your Customer) verification;
• Technical Data: IP address, device type, operating system, browser type, mobile network, cookies and session identifiers, referring URL;
• Communications Data: Records of communications between you and goodwin8 support, including live chat transcripts, support ticket content, and email correspondence;
• Responsible Gaming Data: Self-exclusion requests, deposit and loss limit settings, session time preferences, and any communications related to problem gambling support.

4. How We Collect Your Data

goodwin8 collects personal data through the following means:

• Direct collection: Information you provide when registering a goodwin8 account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, participating in promotions, or submitting responsible gaming requests;
• Automated collection: Technical data collected automatically when you access the goodwin8 platform, including IP address, device identifiers, browser data, and session cookies;
• Third-party sources: Identity verification data from KYC service providers; fraud detection data from risk management partners; payment transaction data from GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors.

5. Legal Basis for Processing

goodwin8 processes your personal data only where a lawful basis for processing exists under the Data Privacy Act of 2012. The primary legal bases we rely upon are:

• Contractual necessity: Processing necessary to perform the contract between you and goodwin8 — i.e., operating your account, processing deposits and withdrawals in PHP, enabling game play, and providing customer support;
• Legal obligation: Processing required to comply with applicable Philippine law, PAGCOR regulatory requirements, anti-money laundering obligations under Republic Act No. 9160 (as amended), and KYC requirements;
• Legitimate interests: Processing carried out for goodwin8's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming compliance, where such interests are not overridden by your rights and freedoms;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent where required, including for certain marketing communications. You may withdraw consent at any time without affecting prior lawful processing.

6. How We Use Your Personal Data

goodwin8 uses your personal data for the following purposes:

• To register and maintain your goodwin8 account;
• To verify your identity and age (21+) in compliance with PAGCOR requirements and Philippine law;
• To process deposits, withdrawals, and PHP gaming transactions via GCash, PayMaya, and bank transfer;
• To provide, operate, and improve the goodwin8 platform and game library;
• To deliver customer support via live chat, email, and other channels in Filipino and English;
• To detect, investigate, and prevent fraud, money laundering, and prohibited conduct on the platform;
• To apply and monitor responsible gaming tools, including self-exclusion, deposit limits, and session time reminders;
• To send you account-related communications, including transaction confirmations, security alerts, and system notifications;
• To send you promotional communications about goodwin8 bonuses and offers, where you have provided consent or where permitted by applicable law (you may opt out at any time);
• To comply with anti-money laundering reporting obligations, PAGCOR regulatory reporting, and other legal obligations;
• To analyse platform usage patterns and improve the goodwin8 user experience for Filipino players.

7. Data Sharing & Disclosure

goodwin8 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash (Mynt — Globe Fintech Innovations, Inc.), PayMaya (Maya Philippines, Inc.), BPI, BDO, Metrobank, Visa, Mastercard, InstaPay, PESONet, and other payment service providers, for the purpose of processing PHP deposits and withdrawals;
• KYC and identity verification providers: Third-party service providers engaged to assist with age and identity verification as required by PAGCOR and Philippine law;
• Game content providers: Software providers such as JILI Games, PG Soft, Pragmatic Play, Evolution Gaming, and others, to the minimum extent necessary to enable game play on the goodwin8 platform;
• Fraud prevention and security partners: Service providers assisting goodwin8 with risk management, fraud detection, and platform security;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government agencies, where disclosure is required by law or regulatory obligation;
• Professional advisers: Legal counsel, auditors, and other professional advisers bound by confidentiality obligations;
• Business successors: Any successor entity in the event of a merger, acquisition, or reorganisation of goodwin8, subject to equivalent data protection commitments.

All third-party service providers engaged by goodwin8 are contractually required to process personal data only in accordance with goodwin8's instructions and to implement appropriate technical and organisational security measures.

8. Cookies & Tracking Technologies

The goodwin8 platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. The types of cookies used include:

• Strictly necessary cookies: Required for the platform to function correctly, including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and account display options, to improve your goodwin8 experience.
• Analytics cookies: Used to collect anonymised data about how Filipino players use the goodwin8 platform, enabling us to identify performance issues and improve the user experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised account access on the goodwin8 platform.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the goodwin8 platform. goodwin8 does not use cookies to serve third-party advertising.

9. Data Retention

goodwin8 retains your personal data for as long as your account is active and for such period thereafter as is required to fulfil the purposes described in this Policy or to comply with applicable legal obligations.

Specifically: account and identity data is retained for a minimum of five (5) years after account closure, in compliance with Philippine anti-money laundering law; financial transaction records are retained for a minimum of five (5) years from the date of the transaction; KYC verification documents are retained for the duration of the account relationship and for five (5) years thereafter; gaming data is retained for three (3) years after account closure unless a longer retention period is required by law.

After the applicable retention period expires, personal data is securely deleted or anonymised. You may request early deletion of your personal data in accordance with your rights under Section 11, subject to goodwin8's legal retention obligations.

10. Data Security

goodwin8 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the goodwin8 platform;
• Encryption of sensitive data at rest, including financial data and KYC documents;
• Role-based access controls limiting access to personal data to authorised goodwin8 personnel on a need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning of the goodwin8 platform;
• Two-factor authentication (2FA) options for member accounts;
• Secure data centre infrastructure with physical access controls.

Despite these measures, no method of data transmission or storage is completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, goodwin8 will notify the National Privacy Commission and affected members in accordance with the requirements of the Data Privacy Act of 2012.

11. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, goodwin8 members have the following rights in respect of their personal data:

To exercise any of these rights, please contact goodwin8's Data Protection Officer using the contact details in Section 15. goodwin8 will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with the Data Privacy Act of 2012.

12. Children and Minors

The goodwin8 platform is strictly intended for individuals who are 21 years of age or older. goodwin8 does not knowingly collect or process personal data of individuals under the age of 21. Where goodwin8 becomes aware that personal data has been collected from a person under 21 years of age, such data will be deleted promptly and the associated account will be closed.

If you are a parent or guardian and believe that a minor has registered a goodwin8 account or provided personal data to goodwin8 without appropriate consent, please contact us immediately at the details provided in Section 15 so we can take appropriate action.

13. Cross-Border Data Transfers

Some of goodwin8's service providers, including game content providers and technology infrastructure partners, may be located outside the Philippines. Where goodwin8 transfers personal data outside the Philippines, it ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012, including contractual data protection clauses, adequacy assessments, and other lawful transfer mechanisms recognised by the National Privacy Commission.

14. Changes to This Privacy Policy

goodwin8 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform operations. The "Last updated" date at the top of this page will be revised when changes are made. For significant changes affecting your rights, goodwin8 will notify registered members via email or in-account notification. Your continued use of the goodwin8 platform after any change constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

15. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by goodwin8, please contact our Data Protection Officer:

If you are not satisfied with goodwin8's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC complaint process is available through the NPC's official government channels.