w63 Privacy Policy — Your Data, Protected

w63 ("the Company," "we," "us," "our") is the data controller responsible for the personal information collected through the w63 online gaming platform accessible at w63.one. As data controller, w63 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable Philippine data privacy laws.

w63 operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR). Our data processing activities are conducted in accordance with PAGCOR's licensing requirements, which include obligations relating to player identity verification, anti-money laundering (AML) compliance, and responsible gaming record-keeping.

For all data privacy inquiries, requests, and complaints, you may contact our designated Data Protection Officer (DPO) using the contact details provided in Section 13 of this Privacy Policy.

w63 collects the following categories of personal data from Players and visitors to the w63 platform:

w63 does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect biometric data, health information, or political or religious affiliations.

w63 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access and use the w63 platform. See Section 9 for more details on cookies.
• Third-Party Sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance service providers; payment verification data from payment processors (GCash, PayMaya, and banking partners).
• Regulatory Sources: Information received from PAGCOR or other regulatory authorities in connection with licensing obligations, compliance investigations, or legal proceedings.

w63 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your w63 account, including processing your registration, verifying your identity, and enabling you to log in securely.
• Service Delivery: To provide you with access to w63's gaming services, process your wagers, credit winnings to your wallet, and deliver the features and functionality of the platform.
• Payment Processing: To process deposits and withdrawals through your chosen payment method (GCash, PayMaya, bank transfer, or debit card), verify payment ownership, and maintain accurate financial records.
• KYC and Age Verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with PAGCOR licensing requirements and Philippine AML regulations.
• Regulatory Compliance: To fulfill our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine laws, including reporting obligations to regulatory authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal or prohibited conduct on the w63 platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce deposit limits and self-exclusion requests, and fulfill our responsible gaming obligations under PAGCOR's framework.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance.
• Marketing and Promotions: To send you promotional offers, bonus notifications, and platform updates via SMS or in-platform notifications, where you have consented to receive such communications. You may opt out at any time by contacting our support team.
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the performance, features, and user experience of the w63 platform.

Under the Data Privacy Act of 2012, w63 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to provide the w63 gaming service, process payments, and manage your account.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing conditions, AMLA reporting obligations, and NPC data privacy requirements.
• Legitimate Interests: Processing necessary for w63's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

w63 does not sell your personal data to third parties. We share your personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: GCash, PayMaya, and our banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) receive the financial data necessary to process your deposits and withdrawals.
• KYC and Compliance Providers: Third-party identity verification and AML screening service providers receive identity data necessary to complete KYC checks and comply with anti-money laundering obligations.
• Game Content Providers: Licensed game studios and live dealer providers may receive your account identifier and session data necessary to deliver game content and record game outcomes.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities may receive personal data where required by law, court order, or regulatory directive.
• IT and Infrastructure Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements that require them to maintain confidentiality and implement appropriate security measures.
• Professional Advisors: Legal counsel, auditors, and compliance consultants who require access to personal data in the course of providing professional services to w63, subject to professional confidentiality obligations.

w63 does not transfer your personal data outside the Philippines except where required by a specific service provider arrangement, in which case we ensure that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012.

w63 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and AMLA record-keeping obligations.
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• KYC Documents: Retained for a minimum of five (5) years following the completion of the KYC process or account closure, whichever is later.
• Communications and Support Data: Retained for three (3) years from the date of the communication, unless the subject matter relates to an ongoing dispute or regulatory investigation, in which case data is retained until the matter is fully resolved.
• Technical and Usage Data: Retained for up to twelve (12) months from collection, after which it is aggregated or anonymized for analytical purposes.
• Responsible Gaming Records: Self-exclusion and deposit limit records are retained for the duration of the restriction plus five (5) years, to prevent circumvention of responsible gaming measures.

Upon expiry of the applicable retention period, w63 will securely delete or anonymize your personal data in accordance with our data disposal procedures, unless retention is required by a specific legal obligation or ongoing regulatory proceeding.

w63 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• Encryption: All data transmitted between your device and the w63 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. Sensitive data at rest, including passwords and financial information, is encrypted using strong cryptographic algorithms.
• Access Controls: Access to personal data within w63's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data privacy training.
• Two-Factor Authentication: w63 supports and encourages the use of two-factor authentication (2FA) for Player accounts to provide an additional layer of security against unauthorized access.
• Penetration Testing and Audits: w63's platform and infrastructure undergo regular security assessments, penetration testing, and vulnerability scans conducted by qualified security professionals.
• Incident Response: w63 maintains a documented data breach response procedure. In the event of a personal data breach that poses a real risk of serious harm to affected individuals, w63 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay.

While w63 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your w63 account credentials and for notifying us immediately if you suspect unauthorized access to your account.

w63 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain your session, and collect usage data for analytical and security purposes. The following types of cookies are used on the w63 platform:

• Strictly Necessary Cookies: Essential for the operation of the w63 platform. These cookies enable core functions such as session management, login authentication, and security features. They cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences and settings (e.g., language, display preferences) to provide a more personalized experience on w63. These cookies do not track your activity across other websites.
• Analytical Cookies: Collect anonymized or aggregated data about how Players use the w63 platform, including pages visited, session duration, and navigation paths. This data helps w63 identify areas for improvement and optimize platform performance.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and bot traffic on the w63 platform.

You may manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling strictly necessary cookies may impair your ability to use certain features of the w63 platform, including logging in to your account.

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by w63:

• Right to Be Informed: The right to be informed of how your personal data is collected, used, stored, and shared — which is the primary purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data w63 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate, incomplete, or outdated personal data w63 holds about you.
• Right to Erasure or Blocking: The right to request the deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, or where processing is unlawful. Note that this right may be limited where w63 is required to retain data by law or regulatory obligation.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on w63's legitimate interests, on grounds relating to your particular situation.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Damages: The right to claim compensation for any damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data by w63.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that w63 has violated your data privacy rights.

To exercise any of the above rights, please contact our Data Protection Officer using the contact details in Section 13. w63 will respond to all verified data privacy requests within fifteen (15) business days of receipt. We may require you to verify your identity before processing your request to protect against unauthorized access to your personal data.

The w63 platform is strictly intended for persons who are at least twenty-one (21) years of age. w63 does not knowingly collect personal data from individuals under the age of 21. The collection of personal data from minors is not permitted under any circumstances on the w63 platform.

If w63 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data collected, and return any deposited funds to the payment method used. If you are a parent or guardian and believe that your child has registered on w63, please contact our support team immediately so that we can take prompt action.

w63 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or the features and services offered on the w63 platform.

When material changes are made to this Privacy Policy, w63 will notify registered Players by posting a prominent notice on the w63 platform and, where practicable, by sending an in-platform notification or SMS to your registered mobile number. The updated Privacy Policy will take effect on the date specified in the notice.

Your continued use of the w63 platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. We encourage you to review this page periodically. The "Last Updated" date at the top of this page will always reflect the most recent revision.

If you do not agree with any changes to this Privacy Policy, you must cease using the w63 platform and may request account closure in accordance with the Terms & Conditions. Please visit our Terms & Conditions page for the full account closure procedure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by w63, please contact our designated Data Protection Officer (DPO):

If you are not satisfied with w63's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through their official government channels.