helllowin Privacy Policy

1. Who We Are

helllowin ("we," "us," "our," or the "Company") operates the online gaming platform accessible at helllowin.org (the "Platform"). helllowin is a PAGCOR-licensed online gaming operator serving players in the Philippines. We are the data controller responsible for the personal information you provide when you register, play, or otherwise interact with the helllowin Platform.

This Privacy Policy applies to all personal data collected through the helllowin Platform, including our website, mobile-optimized interface, live chat support, and any other digital touchpoints operated by helllowin. It does not apply to third-party websites or services that may be linked from our Platform.

By creating a helllowin account or using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein. If you do not agree with this Policy, please do not use the helllowin Platform.

2. Information We Collect

helllowin collects personal information that is necessary to provide our gaming services, comply with regulatory obligations, and improve your experience on the Platform. The categories of information we collect include:

2.1 Information You Provide Directly

• Registration data: Full name, date of birth, gender, nationality, residential address (including city — e.g., Manila, Cebu, Davao, Quezon City, Makati), email address, and mobile number;
• Identity verification documents: Government-issued photo ID (e.g., PhilSys ID, passport, driver's license, SSS/GSIS card), proof of address, and selfie photographs submitted for KYC purposes;
• Financial information: GCash mobile number, PayMaya account details, bank account information (BPI, BDO, Metrobank), and transaction history;
• Communications: Messages sent to our support team via live chat or email, including any attachments or screenshots you provide.

2.2 Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers;
• Usage data: Pages visited, games played, session duration, betting history, wagering patterns, login timestamps, and navigation paths within the Platform;
• Location data: General geographic location derived from your IP address, used to verify that you are accessing the Platform from a permitted jurisdiction;
• Cookies and similar technologies: As described in Section 6 of this Policy.

2.3 Information from Third Parties

helllowin may receive personal information about you from third-party sources, including payment processors, identity verification service providers, fraud prevention agencies, and PAGCOR or other regulatory bodies, where permitted by applicable law.

3. How We Use Your Information

helllowin uses the personal information we collect for the following purposes:

4. Legal Basis for Processing

helllowin processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and game delivery;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AML regulations, tax reporting requirements, and other applicable Philippine laws;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing communications, where you have provided explicit consent. You may withdraw this consent at any time by contacting our support team or updating your account notification preferences.

5. Sharing Your Information

helllowin does not sell your personal information to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals;
• Identity verification providers: Third-party KYC and AML service providers engaged to verify your identity and screen against sanctions lists;
• Game providers: Software providers whose games are hosted on the helllowin Platform, who may receive anonymized or pseudonymized gameplay data for technical and fairness purposes;
• Regulatory authorities: PAGCOR and other Philippine government agencies, where disclosure is required by law or regulatory obligation;
• Law enforcement: Philippine law enforcement agencies, courts, or other public authorities, where disclosure is required by a valid legal order;
• IT and infrastructure providers: Cloud hosting, cybersecurity, and technical support providers engaged by helllowin to operate and maintain the Platform, subject to strict data processing agreements.

All third parties with whom helllowin shares personal data are required to handle such data in accordance with applicable data protection laws and helllowin's data protection standards.

6. Cookies & Tracking Technologies

helllowin uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit our website. We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and game display options, to personalize your experience.
• Analytics cookies: Collect anonymized data about how players use the Platform, helping us identify areas for improvement. This data does not identify you personally.
• Marketing cookies: Used to deliver relevant promotional content based on your activity on the Platform. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the helllowin Platform. For more information on managing cookies, refer to your browser's help documentation.

7. Data Retention

helllowin retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, regulatory, and contractual obligations. Specifically:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by AML regulations;
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship;
• Support communications: Retained for two (2) years from the date of the last interaction, unless a longer retention period is required for dispute resolution;
• Marketing data: Retained until you withdraw your consent or request deletion, subject to any overriding legal retention obligations.

When personal data is no longer required, helllowin will securely delete or anonymize it in accordance with our data disposal procedures.

8. Data Security

helllowin implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the helllowin Platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Multi-factor authentication options for account access;
• Regular security audits and penetration testing conducted by independent cybersecurity professionals;
• Strict access controls limiting employee access to personal data on a need-to-know basis;
• Staff training on data protection and information security best practices.

While helllowin takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, helllowin will notify the National Privacy Commission (NPC) and affected individuals in accordance with the requirements of the Data Privacy Act of 2012.

9. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by helllowin:

• Right to be informed: The right to know how your personal data is being collected, processed, and used — which is the purpose of this Privacy Policy;
• Right of access: The right to request a copy of the personal data helllowin holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to helllowin's legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact helllowin's Data Protection Officer via the contact details provided in Section 14. helllowin will respond to all data subject requests within thirty (30) days of receipt, in accordance with the Data Privacy Act of 2012.

10. Children's Privacy

The helllowin Platform is strictly intended for individuals who are at least twenty-one (21) years of age, as required by PAGCOR regulations governing online gaming in the Philippines. helllowin does not knowingly collect personal data from individuals under the age of 21.

If helllowin becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and take appropriate action in accordance with our Terms & Conditions and applicable law. If you believe that a minor has registered on the helllowin Platform, please contact us immediately using the details in Section 14.

11. International Data Transfers

helllowin primarily stores and processes your personal data within the Philippines. In certain circumstances, your personal data may be transferred to, stored in, or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international game software vendors.

Where such transfers occur, helllowin ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to handle your data in accordance with standards equivalent to those required by the Philippine Data Privacy Act of 2012. By using the helllowin Platform, you consent to such transfers where they are necessary for the provision of our services.

12. Third-Party Services

The helllowin Platform may contain references to or integrations with third-party services, including payment gateways and game software providers. These third parties operate under their own privacy policies, which helllowin does not control. helllowin is not responsible for the privacy practices of any third-party service provider.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the helllowin Platform. helllowin's Privacy Policy applies solely to data collected and processed by helllowin directly.

13. Changes to This Policy

helllowin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, helllowin will notify registered players via the email address or mobile number on file, or by posting a prominent notice on the Platform.

The date of the most recent revision is indicated at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how helllowin protects your personal data. Your continued use of the Platform following the posting of any changes constitutes your acceptance of the revised Policy.

14. How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way helllowin handles your personal data, please contact our Data Protection Officer:

• Live Chat: Available 24/7 from your helllowin account dashboard — the fastest way to reach us
• Email: [email protected]
• Data Protection Officer: [email protected]

helllowin aims to respond to all privacy-related inquiries within five (5) business days. For formal data subject requests, please allow up to thirty (30) days for a full response, as required by the Data Privacy Act of 2012.

If you are not satisfied with helllowin's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.