Privacy Policy – panalowin Casino

1 Introduction

panalowin ("we," "us," "our," or the "Company") is committed to protecting the privacy and personal data of all individuals who use our online gaming platform ("Platform"), accessible at https://panalowin.app. This Privacy Policy ("Policy") describes how we collect, use, store, disclose, and protect your personal information in connection with your use of the Platform and all related services.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It applies to all registered players, visitors, and any other individuals whose personal data is processed by panalowin.

By accessing or using the panalowin Platform, you consent to the collection and use of your personal information as described in this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact us to request account closure. We encourage you to read this Policy carefully and to check back periodically for any updates.

2 Personal Data We Collect

panalowin collects the following categories of personal data from players and users of the Platform:

We collect only the personal data that is necessary for the purposes outlined in this Policy. You are not required to provide any personal data to browse the public areas of our Platform, but registration and identity verification are mandatory to access gaming services and process withdrawals.

3 How We Collect Your Data

panalowin collects personal data through the following methods:

• Direct Collection: When you register an account, complete your profile, submit KYC documents, make deposits or withdrawals, or contact our customer support team.
• Automated Collection: Through cookies, web beacons, and similar tracking technologies when you access and use the Platform. This includes technical data such as IP address, device information, and browsing behavior.
• Third-Party Sources: From payment processors (GCash, PayMaya, banks) to verify transactions; from identity verification services to confirm your identity; and from fraud prevention services to protect the Platform.
• Public Sources: In limited cases, we may collect publicly available information to verify your identity or comply with legal obligations, such as sanctions screening or politically exposed persons (PEP) checks.

We will always inform you at the point of collection what data is being collected and for what purpose. Where consent is required under Philippine law, we will obtain your explicit consent before processing your personal data.

4 How We Use Your Personal Data

panalowin processes your personal data for the following purposes:

• Account Management: To create and maintain your player account, authenticate your identity, and provide access to our gaming services.
• Payment Processing: To process deposits, withdrawals, and refunds through your chosen payment method (GCash, PayMaya, BPI, BDO, Metrobank, etc.).
• KYC and AML Compliance: To verify your identity and age (21+ requirement), prevent fraud, and comply with anti-money laundering regulations applicable in the Philippines.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance via email, live chat, or other communication channels.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling, enforce deposit limits, and facilitate self-exclusion requests where applicable.
• Marketing and Promotions: To send you promotional offers, bonuses, newsletters, and other marketing communications where you have opted in to receive them.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the functionality, security, and user experience of the panalowin Platform.
• Legal Compliance: To comply with applicable laws, regulations, court orders, or requests from regulatory authorities in the Philippines.
• Security and Fraud Prevention: To detect, prevent, and investigate fraudulent activity, unauthorized access, and other security threats to the Platform.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act, panalowin processes your personal data based on one or more of the following legal grounds:

• Consent: You have given explicit consent for us to process your personal data for specific purposes, such as receiving marketing communications.
• Contract Performance: Processing is necessary to fulfill our contractual obligations to you under the Terms & Conditions, including providing gaming services and processing payments.
• Legal Obligation: Processing is required to comply with Philippine laws and regulations, including KYC, AML, and gaming licensing requirements.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests do not override your fundamental rights and freedoms.

Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time by contacting our Data Protection Officer. Withdrawal of consent will not affect the lawfulness of processing conducted prior to withdrawal.

6 Sharing and Disclosure of Your Data

panalowin does not sell, rent, or trade your personal data to third parties for their marketing purposes. However, we may share your personal data with the following categories of recipients where necessary for the purposes outlined in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers to process your deposits and withdrawals.
• Identity Verification Services: Third-party KYC and identity verification providers to confirm your identity and comply with regulatory requirements.
• Fraud Prevention Services: Security and fraud detection providers to protect the Platform and our players from fraudulent activity.
• Game Providers: Third-party game developers and software providers whose games are available on the panalowin Platform.
• Regulatory Authorities: Philippine gaming regulators, the National Privacy Commission, law enforcement agencies, and other government bodies where required by law.
• Legal and Professional Advisors: Lawyers, auditors, and consultants who assist us in complying with legal and regulatory obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.

All third-party service providers are contractually obligated to protect your personal data and use it only for the purposes for which it was disclosed. We conduct due diligence to ensure that our partners maintain adequate data protection standards.

7 Data Retention

panalowin retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specific retention periods include:

• Active Accounts: Personal data is retained for the duration of your active account and for a period of five (5) years following account closure, in compliance with Philippine AML regulations and gaming licensing requirements.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years from the date of the transaction, as required by Philippine law.
• KYC Documents: Identity verification documents are retained for five (5) years following account closure or the last transaction, whichever is later.
• Marketing Data: Marketing preferences and communication history are retained until you opt out or request deletion, after which they are deleted within thirty (30) days.
• Technical Logs: Server logs, IP addresses, and technical data are typically retained for twelve (12) months for security and troubleshooting purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with our data retention and disposal procedures. You may request early deletion of your data by contacting our Data Protection Officer, subject to our legal and regulatory obligations.

8 Cookies and Tracking Technologies

panalowin uses cookies, web beacons, and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

Types of Cookies We Use:

• Essential Cookies: Required for the Platform to function properly, including session management, authentication, and security features. These cookies cannot be disabled.
• Performance Cookies: Collect anonymous data about how you use the Platform, such as pages visited and time spent, to help us improve performance and user experience.
• Functional Cookies: Remember your preferences and settings, such as language selection and display options, to provide a more personalized experience.
• Marketing Cookies: Track your browsing activity to deliver targeted advertisements and promotional offers based on your interests. These cookies require your consent.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect the functionality of the Platform. For more information on managing cookies, please refer to your browser's help documentation.

9 Data Security Measures

panalowin takes the security of your personal data seriously and has implemented technical, organizational, and physical safeguards to protect your information from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• SSL Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols.
• Secure Servers: Personal data is stored on secure servers located in facilities with restricted physical access, 24/7 monitoring, and redundant backup systems.
• Access Controls: Access to personal data is restricted to authorized personnel only, based on the principle of least privilege and need-to-know basis.
• Regular Audits: We conduct regular security audits, vulnerability assessments, and penetration testing to identify and address potential security risks.
• Employee Training: All panalowin employees and contractors receive mandatory data protection and security awareness training.
• Incident Response: We maintain an incident response plan to detect, respond to, and recover from data breaches or security incidents in a timely manner.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorized access to your account.

10 Your Rights as a Data Subject

Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data:

• Right to Be Informed: You have the right to be informed about the collection and processing of your personal data, including the purposes, legal basis, and recipients.
• Right to Access: You have the right to obtain confirmation of whether we are processing your personal data and to request a copy of that data.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure (Right to Be Forgotten): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 15 of this Policy. We will respond to your request within fifteen (15) days, or as otherwise required by Philippine law.

11 Children's Privacy

The panalowin Platform is intended for use by individuals who are at least 21 years of age, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information from our systems and terminate the associated account. Parents or guardians who believe that a minor has provided personal data to panalowin should contact our Data Protection Officer immediately.

We reserve the right to request proof of age at any time and to suspend accounts pending satisfactory age verification. Providing false information regarding your age is a serious violation of our Terms & Conditions and may result in permanent account termination and referral to law enforcement authorities.

12 International Data Transfers

Your personal data is primarily stored and processed within the Philippines. However, in certain circumstances, we may transfer your personal data to third-party service providers located outside the Philippines, including payment processors, cloud hosting providers, and software vendors.

Where personal data is transferred internationally, we ensure that appropriate safeguards are in place to protect your data in accordance with Philippine law. These safeguards may include:

• Standard contractual clauses approved by the National Privacy Commission;
• Adequacy determinations by the NPC confirming that the recipient country provides an adequate level of data protection;
• Binding corporate rules for transfers within multinational corporate groups; or
• Your explicit consent to the international transfer.

For more information about our international data transfer practices, please contact our Data Protection Officer.

13 Third-Party Services and Links

The panalowin Platform may contain links to third-party websites, services, or applications that are not operated or controlled by panalowin. This Privacy Policy applies only to personal data collected by panalowin and does not cover the privacy practices of third parties.

We are not responsible for the privacy policies or practices of third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit before providing any personal information. Your interactions with third-party services are governed solely by the terms and privacy policies of those third parties.

When you use third-party payment methods such as GCash, PayMaya, or bank transfers, your personal data will be processed by those payment providers in accordance with their own privacy policies. panalowin is not responsible for the data practices of third-party payment processors.

14 Changes to This Privacy Policy

panalowin reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. When material changes are made, we will notify you by:

• Posting a prominent notice on the Platform homepage;
• Sending an email notification to your registered email address; or
• Displaying a pop-up notification when you next log in to your account.

The "Effective Date" at the top of this Policy indicates when the most recent version was published. Your continued use of the panalowin Platform following the posting of changes constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated Policy, you should discontinue use of the Platform and may request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Previous versions of this Policy are available upon request by contacting our Data Protection Officer.

15 Contact Us and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer (DPO):

We will respond to all data subject requests within fifteen (15) days of receipt, or as otherwise required by the Philippine Data Privacy Act. If you are not satisfied with our response, you have the right to file a complaint with the National Privacy Commission at [email protected] or visit their website for more information.