Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") applies to all users of the mnlwin gaming platform (the "Platform") accessible at mnlwin.cam and through any associated mobile applications. By creating an account, accessing the Platform, or using any of our services, you ("User," "You," or "Your") acknowledge that you have read, understood, and agreed to the data practices described in this Policy.

mnlwin ("Company," "We," "Us," or "Our") is the data controller responsible for your personal information. We are committed to operating in compliance with the Republic of the Philippines Data Privacy Act of 2012 (RA 10173), its implementing rules and regulations, National Privacy Commission (NPC) guidelines, and applicable international data protection frameworks.

This Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which are incorporated by reference.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an mnlwin account, participate in gaming activities, or communicate with customer support, you provide us with personal information, including but not limited to:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers as required for Know Your Customer (KYC) and anti-money laundering (AML) compliance.
• Contact Information: Email address, mobile phone number, residential address, and postal code.
• Account Credentials: Username, password (stored in encrypted format), and security questions for account recovery purposes.
• Financial Information: Payment method details such as GCash account information, Maya account details, bank account numbers, and transaction history for deposits and withdrawals.
• Verification Documents: Copies of government-issued identification (passport, driver's license, national ID), proof of address (utility bills, bank statements), and proof of payment method ownership submitted for KYC verification.
• Communication Records: Messages, emails, live chat transcripts, and customer support tickets exchanged between you and mnlwin support staff.
• Survey and Feedback Data: Responses to voluntary surveys, promotional questionnaires, and user experience feedback forms.

2.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical and behavioral data through cookies, log files, and similar tracking technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and hardware model.
• Connection Data: IP address, internet service provider (ISP), geographic location (country, region, city), time zone, and connection speed.
• Usage Data: Pages visited, games played, time spent on the Platform, click patterns, navigation paths, referral sources, and session duration.
• Gameplay Data: Bet amounts, game outcomes, win/loss records, bonus utilization, wagering patterns, and transaction history for responsible gaming monitoring and fraud prevention.
• Technical Logs: Server logs, error reports, crash diagnostics, and performance metrics for platform maintenance and optimization.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: GCash, Maya, and banking institutions provide transaction verification, payment confirmation, and fraud detection data.
• Identity Verification Services: Third-party KYC and AML service providers assist in verifying the authenticity of submitted identification documents and screening against sanctions lists.
• Marketing Partners: Affiliate networks and marketing platforms may share attribution data to track referrals and measure campaign effectiveness, subject to applicable data protection laws.
• Regulatory Bodies: PAGCOR and other gaming regulators may provide information related to self-exclusion registries, restricted player lists, or compliance inquiries.

3. How We Use Your Information

mnlwin processes your personal information for the following lawful purposes:

3.1 Account Management and Service Delivery

• Creating, maintaining, and securing your gaming account
• Processing deposits, withdrawals, and financial transactions
• Enabling gameplay, tracking game results, and managing account balances
• Administering bonuses, promotions, loyalty programs, and tournament participation
• Providing customer support, responding to inquiries, and resolving disputes
• Sending transactional notifications such as deposit confirmations, withdrawal approvals, and account status updates

3.2 Legal and Regulatory Compliance

• Verifying your identity and age to ensure compliance with the 21+ legal requirement
• Conducting KYC and AML checks as mandated by PAGCOR and Philippine financial regulations
• Detecting and preventing fraud, money laundering, bonus abuse, and account sharing
• Complying with legal obligations, court orders, and regulatory requests from government authorities
• Maintaining transaction records and audit trails for tax reporting and financial accountability
• Implementing responsible gaming measures, including deposit limits, self-exclusion, and problem gambling detection

3.3 Platform Security and Fraud Prevention

• Monitoring account activity for suspicious behavior, unauthorized access, and security breaches
• Detecting collusion, cheating, bot usage, and other forms of gaming misconduct
• Protecting against distributed denial-of-service (DDoS) attacks, malware, and cyber threats
• Enforcing our Terms and Conditions and preventing prohibited activities
• Investigating security incidents and coordinating with law enforcement when necessary

3.4 Platform Improvement and Analytics

• Analyzing user behavior to enhance platform performance, usability, and user experience
• Conducting A/B testing to optimize game offerings, interface design, and feature placement
• Generating anonymized and aggregated statistics for business intelligence and strategic planning
• Identifying technical issues, bugs, and performance bottlenecks for continuous improvement

3.5 Marketing and Communication

• Sending promotional emails, SMS notifications, and push alerts about new games, bonuses, and special offers (only if you have opted in to receive marketing communications)
• Personalizing gaming recommendations based on your preferences and gameplay history
• Conducting market research and user surveys to better understand player needs
• Measuring the effectiveness of marketing campaigns and affiliate partnerships

You may opt out of marketing communications at any time by adjusting your account preferences, clicking "unsubscribe" in promotional emails, or contacting customer support. Opting out will not affect transactional communications related to your account.

4. Information Sharing and Disclosure

mnlwin does not sell, rent, or trade your personal information to third parties for their independent marketing purposes. However, we may share your information in the following limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform essential business functions on our behalf, including:

• Payment Processors: GCash, Maya, and banking institutions for deposit and withdrawal processing
• Identity Verification Services: KYC and AML service providers for document verification and sanctions screening
• Cloud Hosting Providers: Secure data storage and server infrastructure management
• Customer Support Platforms: Live chat software, ticketing systems, and CRM tools
• Marketing and Analytics Tools: Email marketing platforms, analytics services (e.g., Google Analytics), and advertising networks
• Game Providers: Third-party game developers and software suppliers who power slot games, live casino tables, and fishing games

These service providers are contractually obligated to process your data solely for the purposes specified by mnlwin, to implement appropriate security measures, and to comply with applicable data protection laws. They are prohibited from using your data for their own purposes.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, law enforcement, and regulatory bodies when required to:

• Comply with legal obligations, court orders, subpoenas, or valid legal processes
• Respond to PAGCOR regulatory inquiries, audits, and compliance reviews
• Cooperate with anti-money laundering investigations conducted by the Anti-Money Laundering Council (AMLC)
• Report suspected criminal activity, fraud, or violations of gaming laws
• Protect the rights, property, and safety of mnlwin, our users, or the public

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

4.4 Anonymized and Aggregated Data

We may share anonymized, aggregated, or de-identified data that cannot reasonably be used to identify you individually. Such data may be used for industry research, statistical analysis, marketing insights, and public reporting without restriction.

5. Data Security Measures

mnlwin implements robust technical, administrative, and physical security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 (Transport Layer Security). Sensitive data at rest is encrypted using AES-256 encryption algorithms.
• Secure Authentication: Passwords are hashed using bcrypt or similar cryptographic algorithms and are never stored in plain text. Two-factor authentication (2FA) is available for enhanced account security.
• Access Controls: Access to personal data is restricted to authorized employees and contractors who require such access to perform their job functions. Role-based access controls (RBAC) limit data exposure on a need-to-know basis.
• Network Security: Firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), and DDoS mitigation services protect our infrastructure from cyber attacks.
• Regular Security Audits: Independent third-party security firms conduct penetration testing, vulnerability assessments, and compliance audits to identify and remediate security weaknesses.
• Incident Response: A dedicated incident response team monitors for security breaches and is prepared to respond swiftly to data security incidents in accordance with NPC breach notification requirements.
• Employee Training: All mnlwin employees undergo regular data privacy and security training to ensure adherence to best practices and internal policies.

While we employ industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect unauthorized account access.

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently, provide personalized user experiences, and generate analytics data. mnlwin uses cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to enhance platform functionality and understand user behavior.

6.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for platform operation. These cookies enable core functionality such as account authentication, session management, load balancing, and security features. The Platform cannot function properly without these cookies.
• Performance and Analytics Cookies: Collect anonymized data about how users interact with the Platform, including pages visited, time spent on pages, click patterns, and error messages. This data helps us improve performance and user experience.
• Functionality Cookies: Remember your preferences, language settings, display options, and game history to provide a personalized experience.
• Advertising and Marketing Cookies: Track your activity across websites to deliver targeted advertisements and measure campaign effectiveness. These cookies may be set by third-party advertising networks.

6.3 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Please note that disabling cookies may limit your ability to use certain features of the Platform. You can manage cookie preferences through:

• Browser Settings: Configure cookie preferences in Chrome, Firefox, Safari, Edge, or your mobile browser settings
• Cookie Consent Banner: Adjust cookie categories through our cookie preference center displayed on your first visit
• Opt-Out Tools: Use third-party opt-out tools such as the Network Advertising Initiative (NAI) opt-out page or the Digital Advertising Alliance (DAA) opt-out page

7. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012 and international data protection laws, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. This includes account data, transaction history, gameplay records, and communication logs. You can access most of this information directly through your account dashboard.

7.2 Right to Rectification

If your personal information is inaccurate, incomplete, or outdated, you have the right to request correction or updating of your data. You can update most account information through your account settings or by contacting customer support.

7.3 Right to Erasure (Right to Be Forgotten)

You may request deletion of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent. However, we may retain certain data to comply with legal obligations, resolve disputes, enforce our Terms and Conditions, or prevent fraud.

7.4 Right to Restriction of Processing

You have the right to request that we limit the processing of your personal information in specific situations, such as when you contest the accuracy of the data or object to processing while we verify the lawfulness of the processing.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) and to transmit that data to another service provider.

7.6 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes, including profiling related to marketing. You may also object to processing based on legitimate interests.

7.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

7.8 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] or through the contact methods listed in Section 12. We will respond to your request within thirty (30) days as required by law. Verification of your identity may be required before we process your request.

8. Data Retention and Deletion

mnlwin retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods vary depending on the type of data:

• Account Information: Retained for the duration of your active account and for six (6) years after account closure to comply with PAGCOR record-keeping requirements and anti-money laundering regulations.
• Transaction Records: Retained for ten (10) years as required by Philippine tax law and financial regulations.
• KYC Documents: Retained for seven (7) years after account closure in accordance with AML compliance requirements.
• Marketing Communications: Retained until you opt out or withdraw consent, after which data is deleted within ninety (90) days.
• Technical Logs: Retained for twelve (12) months for security monitoring and troubleshooting purposes, then anonymized or deleted.

After the applicable retention period expires, we securely delete or anonymize your personal information using industry-standard data destruction methods. In some cases, anonymized data may be retained indefinitely for statistical and research purposes.

9. Children's Privacy

mnlwin is strictly an adult-only gaming platform. You must be at least 21 years of age to register an account or participate in any gaming activities. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete such information and terminate the associated account.

If you are a parent or guardian and believe that your child has provided personal information to mnlwin, please contact us immediately at [email protected] so we can take appropriate action.

10. International Data Transfers

Your personal information may be transferred to, stored, and processed in jurisdictions outside the Philippines, including countries that may not provide the same level of data protection as Philippine law. When we transfer personal data internationally, we implement appropriate safeguards, such as:

• Standard contractual clauses approved by the National Privacy Commission or European Commission
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules for intra-group data transfers
• Your explicit consent for specific transfers

We ensure that all international data transfers comply with applicable data protection laws and that your rights remain protected regardless of where your data is processed.

11. Policy Updates

mnlwin reserves the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through:

• Email notification to the address associated with your account
• Prominent banner notification on the Platform homepage
• In-app notification upon your next login

The "Effective Date" at the top of this Policy indicates when the most recent changes were made. Your continued use of the Platform after changes are posted constitutes acceptance of the revised Privacy Policy. If you do not agree with the updated Policy, you should discontinue use of the Platform and request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

12. Contact Information

If you have questions, concerns, or complaints regarding this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact us:

• Email: [email protected] (Data Protection Inquiries)
• Live Chat: Available 24/7 on the Platform
• Customer Support: 24 hours a day, 7 days a week

Data Protection Officer Contact:
For specific privacy rights requests or formal complaints, you may contact our Data Protection Officer directly at [email protected] with "DPO – Privacy Request" in the subject line.

National Privacy Commission (Philippines):
If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the National Privacy Commission:

• Website: privacy.gov.ph
• Email: [email protected]
• Hotline: (+63 2) 8234-2228

mnlwin is licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR). For regulatory inquiries, please contact PAGCOR through their official channels.