goodwin8 Privacy Policy

1. Introduction

goodwin8 ("we," "us," "our," or "the Platform") operates the online casino and sportsbook platform accessible at goodwin8.vip. This Privacy Policy describes how goodwin8 collects, processes, stores, shares, and protects personal information provided by users ("you," "Player," or "Data Subject") in connection with your use of the goodwin8 Platform and related services.

By registering an account on goodwin8 or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the goodwin8 Platform.

This Privacy Policy should be read together with the goodwin8 Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference.

2. Personal Data We Collect

goodwin8 collects personal data that you provide directly, data generated through your use of the Platform, and data received from third parties in connection with our legal and regulatory obligations. The categories of personal data we collect include:

2.1 Data You Provide Directly

• Identity Data: Full legal name, date of birth, nationality, and government-issued ID details (e.g., Philippine passport, SSS, UMID, driver's licence).
• Contact Data: Email address, mobile number, and residential address (including city — e.g., Manila, Cebu, Davao, Quezon City, Makati).
• Account Data: Username, password (stored in hashed form), security questions, and account preferences.
• Financial Data: Payment method details (GCash number, PayMaya account, bank account details for BPI, BDO, or Metrobank), transaction history, deposit and withdrawal records.
• Verification Documents: Copies of government-issued IDs, proof of address, and proof of payment method ownership submitted for KYC purposes.
• Communications Data: Records of your communications with goodwin8 customer support, including live chat transcripts and email correspondence.

2.2 Data Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version, and device identifiers.
• Usage Data: Pages visited, games played, session duration, betting history, wagering patterns, and clickstream data.
• Location Data: General geographic location derived from your IP address.
• Cookie Data: Data collected through cookies and similar tracking technologies as described in Section 8.

2.3 Data from Third Parties

• Identity and fraud verification data from KYC service providers.
• Payment confirmation data from GCash, PayMaya, and banking partners.
• Self-exclusion and responsible gaming data from PAGCOR or other recognized gambling regulatory authorities.

3. How We Use Your Personal Data

goodwin8 uses your personal data for the following purposes:

4. Legal Basis for Processing

goodwin8 processes your personal data on the following legal bases under the Data Privacy Act of 2012 (RA 10173):

• Contractual Necessity: Processing required to perform our contract with you, including account management, game provision, and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (RA 9160), and other applicable Philippine laws.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Processing for direct marketing and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

goodwin8 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:

• Regulatory Authorities: PAGCOR and other Philippine government agencies as required by law, including for AML reporting and responsible gaming compliance.
• KYC & Identity Verification Providers: Third-party service providers engaged to verify your identity and documents as part of our KYC process.
• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers to facilitate deposits and withdrawals.
• Game Software Providers: Licensed game providers (e.g., Pragmatic Play, PG Soft, Evolution Gaming) who may process limited technical data to deliver game services.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and fraud prevention vendors operating under strict data processing agreements.
• Legal & Professional Advisors: Lawyers, auditors, and compliance consultants where necessary for legal proceedings or regulatory matters.

All third-party service providers engaged by goodwin8 are contractually required to process your personal data only on our instructions and in accordance with applicable data protection laws.

6. Data Retention

goodwin8 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

Specific retention periods include:

• Account and Transaction Data: Retained for a minimum of five (5) years following account closure, in accordance with PAGCOR regulations and the Anti-Money Laundering Act.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship.
• Customer Support Records: Retained for three (3) years following the resolution of the relevant support interaction.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever is earlier.
• Technical and Usage Data: Retained for up to twelve (12) months from collection, unless required longer for security or fraud investigation purposes.

Upon expiry of the applicable retention period, goodwin8 will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

7. Data Security

goodwin8 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and the goodwin8 Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Passwords are stored using one-way cryptographic hashing.
• Access Controls: Access to personal data is restricted to goodwin8 personnel and authorized third parties on a strict need-to-know basis. All access is logged and audited.
• Two-Factor Authentication: goodwin8 offers two-factor authentication (2FA) for player accounts to provide an additional layer of security.
• Penetration Testing: The Platform undergoes regular security assessments and penetration testing by independent cybersecurity professionals.
• Incident Response: goodwin8 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) and affected players within the timeframes required by RA 10173.

While goodwin8 takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for maintaining the confidentiality of your goodwin8 account credentials.

8. Cookies & Tracking Technologies

goodwin8 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support our security and fraud prevention measures. The types of cookies we use include:

8.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting Platform functionality.

8.2 Performance & Analytics Cookies

These cookies collect anonymized information about how players use the goodwin8 Platform, such as which pages are visited most frequently and how players navigate between sections. This data helps us improve Platform performance and user experience.

8.3 Functional Cookies

These cookies remember your preferences and settings, such as your preferred language, display settings, and responsible gaming tool configurations, to provide a more personalized experience.

8.4 Marketing Cookies

With your consent, goodwin8 may use cookies to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. You may withdraw consent for marketing cookies at any time through your account settings or browser controls.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by goodwin8:

• Right to Be Informed: You have the right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data goodwin8 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer (DPO) using the contact details provided in Section 13. goodwin8 will respond to all verified data subject requests within thirty (30) days of receipt, in accordance with RA 10173.

10. Minors & Age Restriction

The goodwin8 Platform is strictly intended for persons aged 21 years and above. goodwin8 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has provided personal data to goodwin8, please contact our Data Protection Officer immediately using the contact details in Section 13.

11. International Data Transfers

goodwin8 primarily processes and stores personal data within the Republic of the Philippines. In certain circumstances, personal data may be transferred to, or processed by, service providers located outside the Philippines — for example, cloud infrastructure providers or game software vendors operating internationally.

Where such transfers occur, goodwin8 ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized by the National Privacy Commission.
• Implementing contractual clauses that require overseas recipients to protect your personal data to the same standard required under RA 10173.
• Conducting due diligence on all international data processors to verify their data protection practices.

12. Changes to This Privacy Policy

goodwin8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. When material changes are made, we will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when this Privacy Policy was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how goodwin8 protects your personal data. Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes.

13. Contact Us & Data Protection Officer

goodwin8 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

goodwin8 will acknowledge receipt of your request within three (3) business days and provide a full response within thirty (30) days. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.