shewin Privacy Policy

1. Introduction & Data Controller Identity

This Privacy Policy ("Policy") describes how shewin ("shewin," "we," "us," or "our"), operating the platform at https://shewin.one, collects, processes, stores, and protects the personal information of users ("you," "Player," or "User") who access or use the shewin online casino platform.

shewin acts as the Personal Information Controller in respect of all personal data collected through the shewin Platform, as defined under Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA) of the Philippines, and its Implementing Rules and Regulations.

By accessing the shewin Platform and creating an account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal information as described herein.

2. Information We Collect

shewin collects personal information through different means and at different stages of your use of the Platform. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued Philippine ID
• Date of birth (used to verify the 21+ age requirement)
• Registered Philippine mobile number
• Email address
• Username and encrypted password
• Government-issued ID type and number (for KYC verification)
• Proof of address documents (where required for enhanced verification)

2.2 Financial & Transaction Data

• GCash or Maya wallet references associated with your deposits and withdrawals
• BPI, BDO, Metrobank, or other bank account details used for transactions
• Deposit amounts, withdrawal requests, and transaction timestamps
• Bonus and promotional transaction records

2.3 Gaming Activity Data

• Game session logs, bet histories, win/loss records, and wagering patterns
• Responsible gaming tool usage (deposit limits, session timers, self-exclusion requests)
• Customer support interaction records

2.4 Technical & Device Data

• IP address and approximate geolocation (for regulatory jurisdiction verification)
• Device type, operating system, and browser type
• Session duration, pages visited, and click-stream data
• Cookies and similar tracking technology data (see Section 8)

3. How We Use Your Information

shewin uses the personal information we collect exclusively for the following purposes:

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, shewin processes your personal information on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the shewin Terms & Conditions, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with PAGCOR regulations, Anti-Money Laundering Act (AMLA) obligations, KYC requirements, and National Privacy Commission reporting duties.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform integrity — balanced against your rights and not overriding your fundamental privacy interests.
• Consent: Processing for optional marketing communications, which you may withdraw at any time by contacting shewin support or updating your account preferences.

5. Disclosure of Your Information

shewin does not sell, rent, or trade your personal data to third-party marketers. We may disclose your information only in the following limited circumstances:

• Payment processors: GCash (G-Xchange, Inc.), Maya (Voyager Innovations), and Philippine banking partners receive only the transaction data required to process your specific deposit or withdrawal.
• Game content providers: JILI, Evolution Gaming, and other certified platform providers may receive anonymised session identifiers required to operate their games within the shewin environment. They do not receive your identity or contact data.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission may receive personal data as required by applicable Philippine law.
• Law enforcement: In response to a valid court order, warrant, or lawful request from a Philippine government authority.
• Professional advisers: Lawyers, auditors, and accountants bound by professional confidentiality obligations, where necessary for business operations.

All third parties who receive shewin player data are contractually required to implement data protection standards consistent with the DPA and to use that data only for the specified purpose.

6. International Data Transfers

shewin is primarily operated within the Philippines and processes the majority of player data within Philippine jurisdiction. Where technical infrastructure or game content provider operations require data to be processed outside the Philippines, shewin ensures that such transfers comply with the cross-border data flow provisions of the DPA and its Implementing Rules — including the requirement for adequate data protection safeguards in the destination country or contractual protections that provide equivalent protection.

7. Data Retention

shewin retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, as required by AMLA and PAGCOR record-keeping obligations.
• Transaction and gaming records: Retained for a minimum of five (5) years for regulatory compliance and dispute resolution purposes.
• KYC documents: Retained for five (5) years following account closure in compliance with AMLA requirements.
• Marketing data (with consent): Retained until you withdraw consent or request deletion, whichever is earlier.
• Technical logs: Retained for up to twelve (12) months for security and fraud monitoring purposes.

Upon expiry of the applicable retention period, shewin will securely delete or anonymise your personal data in accordance with NPC guidelines.

8. Cookies & Tracking Technologies

shewin uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use are:

• Essential cookies: Required for the shewin Platform to function, including maintaining your login session and enabling secure transactions. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the shewin Platform. This helps us identify popular games, optimise page performance, and improve the overall player experience.
• Security cookies: Used to detect and prevent fraudulent activity and to protect your shewin account from unauthorised access.

shewin does not use third-party advertising or behavioural tracking cookies. You may manage cookie preferences through your browser settings, though disabling essential cookies will impair your ability to use the shewin Platform.

9. Security Measures

shewin implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the shewin Platform
• Encrypted storage of passwords using one-way cryptographic hashing algorithms
• Role-based access controls limiting internal access to personal data on a need-to-know basis
• Regular penetration testing and security audits of the shewin Platform infrastructure
• Two-factor authentication (2FA) available to all shewin account holders
• Real-time fraud detection and anomalous login monitoring

While shewin takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a personal data breach affecting your rights and freedoms, shewin will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by the DPA.

10. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by shewin:

• Right to be Informed: The right to know what personal data shewin collects and how it is processed — which this Policy fulfils.
• Right of Access: The right to request a copy of the personal data shewin holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure / Blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary or where consent has been withdrawn — subject to shewin's legal retention obligations under AMLA and PAGCOR regulations.
• Right to Object: The right to object to the processing of your personal data, including for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe shewin has violated your data privacy rights.

To exercise any of the above rights, please contact shewin's Data Privacy Officer using the details in Section 13. shewin will respond to all verifiable data subject requests within fifteen (15) business days.

11. Children's Privacy

The shewin Platform is strictly for individuals aged 21 years and above. shewin does not knowingly collect personal data from persons under 21 years of age. If shewin becomes aware that a person under 21 has registered an account or provided personal data, that account will be immediately closed, the data will be deleted, and any associated funds will be handled in accordance with PAGCOR guidelines.

If you are a parent or guardian and believe your child has created a shewin account, please contact our support team immediately.

12. Amendments to This Policy

shewin reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via email or through a notice on the shewin Platform at least seven (7) days before taking effect, where practicable. The date of the most recent revision is displayed at the top of this page. Continued use of the shewin Platform after a Policy update constitutes your acceptance of the revised terms.

13. Contact & Data Privacy Officer

For any questions, requests, or concerns relating to this Privacy Policy or shewin's handling of your personal data, please contact:

You also have the right to file a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe shewin has not adequately addressed your data privacy concern.