Privacy Policy

Introduction & Scope

This Privacy Policy ("Policy") applies to all personal data processed by good8win in connection with the operation of the good8win platform, accessible at good8win.club. It covers all Filipino players, registered account holders, visitors to the website who have not yet registered, and any other individuals whose personal data good8win processes in the course of operating the Platform.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission ("NPC") of the Philippines. It is also consistent with the data governance requirements applicable to PAGCOR-compliant online gaming operators.

By using the good8win Platform — including visiting the website, creating an account, depositing funds, or playing any game — you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

Data Controller

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, the personal data controller in respect of data processed through the good8win Platform is the operator of good8win.club. All data processing described in this Policy is carried out by or on behalf of good8win.

For all privacy-related inquiries, data subject requests, or concerns about how good8win handles your personal data, you may contact our designated Data Protection Officer (DPO). Contact details are set out in Section 15 of this Policy.

Data We Collect

good8win collects personal data from users at various points during the account registration process, platform use, and customer support interactions. The categories of personal data we collect are described below.

good8win does not collect or store complete payment card numbers. Where payment processing involves bank transfers, only the minimum reference information required to match and confirm a transaction is retained.

How We Collect Data

good8win collects personal data through the following means:

• Direct submission: When you register an account, complete KYC verification, submit a support request, or update your account profile, you provide data directly to good8win;
• Automatic collection: When you access the Platform, technical data such as your IP address, device identifiers, and session logs are collected automatically via server logs, cookies, and similar technologies;
• Payment processors: When you make a deposit or withdrawal via GCash, Maya, or any other accepted Philippine payment channel, limited transaction reference data is shared between the payment provider and good8win to confirm and reconcile the transaction;
• Identity verification services: Where good8win uses a third-party KYC service to assist with document verification, data is processed via that service under a data processing agreement with good8win;
• Publicly available sources: In limited circumstances relevant to AML compliance, good8win may cross-reference publicly available databases such as AMLC watch-lists to fulfil regulatory obligations.

Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules, good8win processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to create and manage your account, process deposits and withdrawals, provide access to games, and perform all other obligations arising from good8win's Terms & Conditions;
• Legal obligation: Processing necessary to comply with PAGCOR regulatory requirements, AML/KYC obligations under Republic Act No. 9160 (as amended), the Data Privacy Act of 2012, and any other applicable Philippine law;
• Legitimate interests: Processing necessary for good8win's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided these interests are not overridden by your data protection rights;
• Consent: For marketing communications (SMS, email), processing is based on your explicit consent, which you may withdraw at any time through your account settings or by contacting support.

How We Use Your Data

good8win uses personal data collected from users for the following purposes:

• Creating, managing, and securing your good8win account;
• Processing deposits, withdrawals, and all financial transactions on the Platform;
• Verifying your identity and age (21+) in compliance with PAGCOR regulations and applicable Philippine law;
• Detecting, investigating, and preventing fraudulent activity, collusion, money laundering, and other prohibited conduct;
• Providing customer support and responding to account-related inquiries;
• Administering responsible gaming tools including deposit limits, self-exclusion, and session timers;
• Sending transactional communications (deposit confirmations, withdrawal updates, security alerts) to your registered mobile number and email address;
• Sending marketing and promotional communications to users who have opted in to receive them;
• Analysing platform usage patterns to improve game offerings, performance, and user experience;
• Complying with regulatory reporting obligations to PAGCOR and other applicable Philippine regulatory authorities.

Sharing Your Data

good8win may share your personal data with third parties only in the following limited circumstances and subject to appropriate data protection safeguards:

All third-party processors engaged by good8win are bound by data processing agreements that require them to process personal data only on good8win's instructions, maintain appropriate security measures, and comply with the Data Privacy Act of 2012.

Cookies & Tracking Technologies

good8win uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function, including maintaining your logged-in session, remembering your language preferences, and enabling core security features. These cookies cannot be disabled without materially impairing Platform functionality;
• Performance cookies: Collect aggregated, anonymised data about how users navigate the Platform to help good8win identify and fix technical issues and improve page load performance across Philippine mobile networks;
• Analytics cookies: Enable good8win to analyse usage patterns, game popularity, and deposit flow to make informed product development decisions. Data collected is aggregated and does not identify individual users;
• Security cookies: Support fraud detection, bot prevention, and account takeover protection by tracking login patterns and device consistency.

good8win does not use advertising or retargeting cookies on behalf of third-party advertisers. You may manage cookie preferences through your browser settings, though disabling essential cookies may prevent parts of the Platform from functioning correctly.

Data Retention

good8win retains personal data for as long as necessary to fulfil the purposes for which it was collected, comply with applicable Philippine legal and regulatory obligations, and resolve any disputes or enforce our rights.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data that can no longer be linked to any individual may be retained indefinitely for analytical purposes.

Data Security

good8win implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the good8win Platform;
• Encryption at rest for all sensitive personal data including KYC documents and financial account references stored on good8win's servers;
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need;
• Two-factor authentication requirements for all administrative access to systems containing personal data;
• Regular security assessments and penetration testing of Platform infrastructure;
• Automated anomaly detection systems monitoring for unusual account activity, login patterns, and transaction irregularities.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected users, good8win will notify the National Privacy Commission (NPC) and affected data subjects within the timeframes required by the Data Privacy Act of 2012 and its Implementing Rules.

Your Rights Under RA 10173

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, Filipino players whose personal data is processed by good8win have the following rights:

To exercise any of the above rights, please contact good8win's Data Protection Officer using the contact details in Section 15. We will respond to all verifiable data subject requests within fifteen (15) calendar days of receipt, in accordance with NPC requirements. Some rights are subject to exemptions where processing is required to comply with legal obligations — we will explain any applicable exemption clearly in our response to your request.

Children & Minors

If you are a parent or guardian and believe that a minor in your household has created an account on good8win, please contact our support team immediately at [email protected]. We will investigate and take appropriate action within 24 hours of receiving your report.

Marketing Communications

good8win may send promotional communications — including bonus offers, new game announcements, and platform updates — via SMS to your registered Philippine mobile number and via email to your registered address. These communications are sent only to users who have opted in to receive marketing at the time of registration or through their account settings.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in Account > Notification Settings;
• Clicking the unsubscribe link in any marketing email sent by good8win;
• Replying STOP to any marketing SMS (where technically available through your carrier); or
• Contacting good8win support at [email protected] and requesting removal from all marketing lists.

Opting out of marketing communications does not affect transactional communications such as deposit confirmations, withdrawal notifications, security alerts, or responsible gaming notifications — these are sent regardless of marketing preferences as they are essential to safe and informed account use.

Changes to This Policy

good8win may update this Privacy Policy from time to time to reflect changes in the Platform's data processing practices, updates to applicable Philippine law, or NPC regulatory guidance. Where changes are material, good8win will notify registered users via email and via an in-Platform notification displayed on your next login, at least seven (7) days before the changes take effect.

The "Effective Date" at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you must cease using the Platform and contact support to arrange account closure.

Previous versions of this Privacy Policy are available upon written request to the Data Protection Officer.

Contact & Data Protection Officer

For all privacy-related inquiries, data subject access requests, complaints, or concerns about good8win's handling of your personal data, please contact our designated Data Protection Officer through the following channels:

If you are not satisfied with good8win's response to a privacy request or complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC is the regulatory body responsible for enforcing the Data Privacy Act of 2012 in the Philippines.

good8win's support team is Filipino-fluent and available 24 hours a day, seven days a week. Privacy requests can be submitted in English or Filipino (Tagalog). Our DPO processes requests from players across Manila, Cebu, Davao, Quezon City, Makati, and all Philippine regions.