Plain-language summary: HelloWin collects the information needed to run your account, process payments, and comply with Philippine gaming regulations. We do not sell your personal data to third-party marketers. You have the right to access, correct, or request deletion of your data at any time.
1. Overview and Scope
HelloWin operates the online gaming platform at hellowin.best and is committed to protecting the personal information of every Filipino player who uses the platform. This Privacy Policy explains our data practices in full — what we collect, why, how it is stored, and what rights you have over your own information.
This policy applies to all players who create a HelloWin account, visit the HelloWin website, use the mobile web interface, or interact with HelloWin through any supported channel including live chat and email. It applies regardless of how you access HelloWin — whether on a smartphone, tablet, or desktop computer.
HelloWin's data practices are governed by applicable Philippine data protection legislation, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations. We treat compliance with this legislation as a baseline — not a ceiling.
Legal basis: HelloWin processes personal data on three grounds: (1) fulfilling our contractual obligations to you as a registered player; (2) complying with legal and regulatory requirements applicable to licensed gaming operators; and (3) our legitimate interest in maintaining platform security and preventing fraud.
2. What Personal Information HelloWin Collects
HelloWin collects personal information only to the extent necessary to provide our services, meet regulatory obligations, and keep the platform secure. Here's a breakdown of the categories of data we collect and specific examples within each.
| Category | Examples of Data Collected | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number and copy | Yes — KYC |
| Contact Data | Mobile number, email address, home address | Yes — Account |
| Financial Data | GCash/Maya account number, bank account details, card type and last four digits, transaction history | Yes — Payments |
| Account Data | Username, account balance, gaming history, bet records, bonus usage, session logs | Yes — Platform |
| Technical Data | IP address, device type and operating system, browser type, screen resolution, login timestamps | Yes — Security |
| Usage Data | Pages visited, time on site, features used, click patterns, game preferences | Analytics |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | Support |
HelloWin does not collect sensitive personal data such as religious beliefs, political affiliations, or health information unless you voluntarily provide this in a responsible gaming context — for example, when requesting a self-exclusion citing a medical reason. Any such information is handled with the highest level of care and access controls.
3. How HelloWin Collects Your Information
HelloWin collects personal information through four main channels. Understanding these helps you know exactly where your data comes from when it enters our systems.
Directly From You
When you register an account, complete KYC verification, deposit funds, fill out contact forms, or communicate with support — you provide information directly to HelloWin.
Automatically Through the Platform
As you use HelloWin, our systems automatically record technical and usage data — your IP address, session duration, games played, bet amounts, and device information.
From Payment Processors
When you use GCash, Maya, or a bank transfer, the payment provider shares transaction confirmation and account reference data with HelloWin to credit your balance and verify ownership.
From Identity Verification Partners
For KYC compliance, HelloWin uses licensed third-party identity verification services that cross-reference your submitted documents against official records and fraud databases.
4. Why HelloWin Uses Your Personal Data
HelloWin uses player data for specific, legitimate purposes. We do not collect data speculatively — every piece of information we hold serves a defined function within the operation of the platform or our legal obligations as a licensed gaming operator.
- Account creation and management. Your registration details allow HelloWin to create, authenticate, and manage your account. Without this, you cannot log in, play games, or process transactions.
- Identity verification (KYC). Philippine gaming regulations require HelloWin to verify the identity of all players before processing withdrawals. This protects both you and the platform from fraud and money laundering.
- Processing deposits and withdrawals. Financial data is used solely to execute your requested payment transactions through your chosen payment method — GCash, Maya, bank transfer, or card.
- Providing customer support. Communication data from your interactions with HelloWin's support team is retained to provide context in follow-up queries and to train and evaluate our support quality.
- Fraud prevention and platform security. Technical data — IP addresses, device fingerprints, login patterns — is used to detect unusual account behavior, unauthorized access attempts, and potential fraudulent activity.
- Responsible gaming monitoring. Account and usage data helps HelloWin identify potential problem gambling patterns so that appropriate interventions — limit suggestions, support referrals — can be offered proactively.
- Regulatory compliance and reporting. As a licensed operator, HelloWin is required to maintain player records and submit reports to gaming regulatory authorities. Your data may form part of these legally required reports.
- Platform improvement. Aggregated and anonymized usage data helps HelloWin identify which features players use most, where usability issues exist, and how game performance can be optimized.
- Marketing communications (with consent). If you have opted in to receive promotional emails or SMS from HelloWin, your contact details are used to send you relevant offers and platform news. You can opt out at any time.
Marketing opt-out: You can unsubscribe from HelloWin marketing communications at any time by clicking the unsubscribe link in any email, replying STOP to any SMS, or contacting HelloWin support. Opting out of marketing does not affect your ability to use the platform.
5. Who HelloWin Shares Your Data With
HelloWin does not sell your personal information to third parties. Full stop. We share data only where it is necessary to deliver our services, comply with legal requirements, or protect the security of the platform.
The categories of third parties who may receive your data — and the reason for each — are listed below. All third-party data processors are contractually required to maintain confidentiality standards at least as stringent as HelloWin's own.
- Payment processors (GCash, Maya, GrabPay, banks, card networks) — to execute your requested transactions.
- Identity verification services — to complete KYC checks as required by Philippine gaming regulations.
- Fraud detection providers — to identify and prevent fraudulent account activity across the platform.
- Cloud infrastructure and hosting providers — to store data on secured servers. All hosting providers are contractually bound to process data only on HelloWin's instructions.
- Gaming regulatory authorities — when required by law or in response to a lawful regulatory request.
- Law enforcement agencies — when HelloWin is legally compelled to disclose, or where disclosure is necessary to prevent serious harm.
No cross-border transfers without safeguards: If any HelloWin service provider is located outside the Philippines, HelloWin ensures that appropriate data transfer safeguards are in place — including data processing agreements that comply with Philippine data protection requirements.
7. How HelloWin Secures Your Data
Data security isn't something HelloWin treats as an afterthought. Given that the platform handles financial transactions and sensitive personal information for hundreds of thousands of Filipino players, robust security practices are non-negotiable.
HelloWin uses industry-standard security measures across all layers of its infrastructure — from the moment data leaves your device to how it's stored on our servers.
- SSL/TLS encryption on all data transmitted between your browser and HelloWin's servers. The padlock icon in your browser confirms this is active.
- Encrypted data storage for sensitive fields including passwords (hashed, never stored as plain text), ID document copies, and financial account references.
- Role-based access controls — HelloWin staff can only access player data to the extent required by their specific job function. Access is logged and regularly audited.
- Two-factor authentication (2FA) is available for all HelloWin accounts and strongly recommended. Enabling 2FA significantly reduces the risk of unauthorized access even if your password is compromised.
- Regular penetration testing by independent security firms to identify and remediate vulnerabilities before they can be exploited.
- Incident response plan — in the event of a confirmed data breach, HelloWin will notify affected players and the relevant Philippine regulatory authority within the legally required timeframe.
Your role in security: HelloWin's protections work best when players also take basic precautions — using a strong, unique password for your HelloWin account, enabling 2FA, not sharing your login credentials, and logging out when using a shared device. HelloWin will never ask for your full password via chat or email.
8. How Long HelloWin Keeps Your Data
HelloWin retains personal data only for as long as it is needed for the purpose it was collected — or as required by applicable law. Here's how our retention periods work in practice.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | Regulatory requirement for gaming operators |
| Transaction and financial records | 7 years from transaction date | Anti-money laundering compliance |
| Gaming history and bet records | 5 years from each session date | Dispute resolution, regulatory reporting |
| Support communications | 2 years from last interaction | Quality assurance, follow-up context |
| Technical and session logs | 12 months | Security monitoring and fraud detection |
| Marketing consent records | Until consent is withdrawn + 2 years | Proof of lawful basis for marketing |
When a retention period expires, HelloWin securely deletes or anonymizes the relevant data so that it can no longer be associated with an individual player. Anonymized aggregated data — used for statistical analysis only — may be retained indefinitely as it contains no personal identifiers.
9. Your Data Rights as a HelloWin Player
As a Filipino player, you have meaningful rights over your personal data under the Data Privacy Act of 2012. HelloWin is committed to facilitating these rights promptly and without unnecessary barriers. Here's what you can ask for and how.
Right to Access
You can request a copy of all personal data HelloWin holds about you. We'll provide this in a readable format within 30 days of your request.
Right to Correction
If any of your personal data held by HelloWin is inaccurate or outdated, you can request that it be corrected. Some corrections require re-submission of supporting documents.
Right to Deletion
You can request deletion of your personal data. Note that HelloWin may be required to retain certain records for regulatory compliance — we'll explain clearly what can and cannot be deleted.
Right to Object
You can object to HelloWin processing your data for marketing purposes at any time. You can also object to processing based on legitimate interests in specific circumstances.
Right to Data Portability
You can request your personal data in a structured, machine-readable format to transfer to another service. This applies to data you provided directly to HelloWin.
Right to Restrict Processing
In certain situations — for example, while a correction request is being processed — you can ask HelloWin to temporarily restrict how your data is used.
To exercise any of these rights, contact HelloWin's Data Protection Officer at privacy@hellowin.best. Please include your full registered name and account email address so we can locate your records quickly. We will respond within 30 days. If we cannot fulfil a request in full — for example, because a legal retention requirement overrides a deletion request — we will explain the reason clearly.
Complaints: If you are not satisfied with how HelloWin has handled your personal data or a data rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Details on how to do so are available on the NPC's official website.
10. Minors and Age Restrictions
HelloWin's services are strictly for persons aged 21 years and above. HelloWin does not knowingly collect personal information from anyone under the age of 21. Age verification is part of the registration process, and KYC verification confirms age before any withdrawal is processed.
If HelloWin becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately closed, all deposits returned, and any winnings voided. Associated personal data will be deleted from HelloWin's systems as quickly as our regulatory obligations permit.
If you believe that a minor may have accessed HelloWin using false information, please contact HelloWin support immediately at support@hellowin.best. We take these reports seriously and respond with urgency.
11. Changes to This Privacy Policy
HelloWin reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, legal requirements, or the features of the HelloWin platform. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page.
- Send an email notification to all registered HelloWin players summarizing the key changes.
- Display a platform notification to logged-in users when they next visit HelloWin after the update takes effect.
We recommend reviewing this page periodically even if you haven't received a notification — minor clarifications and formatting corrections may be made without triggering a formal notice. Continued use of HelloWin after a policy update constitutes acceptance of the revised terms.
12. Contact HelloWin About Privacy
If you have questions about this Privacy Policy, want to exercise a data right, or have a concern about how HelloWin has handled your personal information, please reach out through the channels below.
Data Protection Officer: privacy@hellowin.best
General Support: support@hellowin.best
Live Chat: Available 24/7 on the HelloWin platform
Response Time: Within 30 days for formal data rights requests; typically same day for general privacy questions via live chat.
When submitting a data request by email, please include your full registered name and the email address associated with your HelloWin account. This helps our Data Protection Officer locate your records without unnecessary delay. Identity verification may be required before certain requests can be processed, in accordance with our obligation to protect player data from unauthorized third-party access.