good8win Privacy
Policy

1. Introduction

good8win ("Company," "Platform," "we," "us," "our") is committed to protecting the privacy and personal data of all registered players and visitors to good8win.one (the "Website"). This Privacy Policy ("Policy") explains how good8win collects, processes, stores, shares, and protects personal data in connection with the provision of its online casino, sports betting, and related gaming services (the "Services").

This Policy applies to all personal data collected through the good8win website, mobile-optimised site, any good8win-branded application, customer support channels, and any other means through which you interact with good8win. By registering an account or continuing to use the good8win platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the good8win Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations, good8win is the personal information controller responsible for the personal data collected through the Platform. Queries relating to the processing of personal data may be directed to the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

3.1 Registration Data

When you create a good8win account, we collect:

• Philippine mobile number (primary account identifier);
• Date of birth (for age verification; players must be 21 or older);
• Chosen username and account password (stored in hashed form);
• Email address (optional, for account recovery).

3.2 Identity Verification (KYC) Data

To comply with PAGCOR regulatory requirements and Philippine anti-money laundering laws, good8win collects:

• Full legal name as it appears on a government-issued ID;
• Date of birth;
• Residential address;
• Copy of a valid Philippine government-issued identification document (UMID, Driver's License, Passport, or PhilSys National ID);
• Selfie photograph for liveness verification, where required.

3.3 Financial Data

good8win processes financial data necessary to facilitate deposits and withdrawals, including:

• GCash mobile number linked to your good8win account;
• Bank account details (BPI, BDO, Metrobank) where provided for withdrawal purposes;
• USDT wallet address where provided for cryptocurrency transactions;
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used.

good8win does not store full card numbers or other sensitive payment credentials on its servers. Payment processing is handled through third-party payment service providers operating in compliance with applicable security standards.

3.4 Usage Data

When you access and use the good8win platform, we automatically collect:

3.5 Communications Data

When you contact good8win support via chat, SMS, or email, we retain records of those communications for quality assurance and dispute resolution purposes.

4. How We Use Your Personal Data

good8win uses personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile;
• Service delivery: To provide access to games, process bets, credit winnings, and manage your PHP wallet balance;
• Payment processing: To facilitate deposits and withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, and USDT;
• Regulatory compliance: To comply with PAGCOR guidelines, anti-money laundering obligations, and other applicable Philippine laws;
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct;
• Responsible gaming: To monitor gaming patterns, enforce deposit limits set by players, implement cooling-off periods and self-exclusion;
• Customer support: To respond to queries, resolve disputes, and process complaints;
• Marketing communications: To send you promotional offers and platform news where you have consented to receive such communications;
• Platform improvement: To analyse usage patterns and improve the good8win platform for Filipino players.

5. Legal Basis for Processing

good8win processes personal data on the following legal bases under the Philippine Data Privacy Act:

• Contractual necessity: Processing necessary to perform the contract between good8win and the player (account operation, payment processing);
• Legal obligation: Processing required to comply with Philippine law (KYC, anti-money laundering, PAGCOR reporting obligations);
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring;
• Consent: Processing for marketing communications, where you have provided explicit consent. Consent may be withdrawn at any time without affecting other processing.

6. Data Sharing & Third Parties

good8win does not sell, rent, or trade your personal data to third parties for marketing purposes. We share personal data with third parties only in the following circumstances:

6.1 Service Providers

good8win engages third-party service providers to support platform operations, including payment processors (GCash, bank partners), KYC and identity verification providers, cloud infrastructure providers, and fraud prevention services. These providers are contractually bound to process personal data only on good8win's instructions and in accordance with applicable Philippine data protection law.

6.2 Regulatory Authorities

good8win may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other competent Philippine authorities where required by law or court order.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of good8win's business assets, personal data held by good8win may be transferred to the acquiring entity, subject to equivalent data protection obligations being imposed on the acquiring party.

7. Cookies & Tracking Technologies

good8win uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for login session management, security, and core platform functionality. These cannot be disabled without affecting Platform access.
• Functional cookies: Store your preferences such as language settings and game lobby view configuration.
• Analytics cookies: Allow good8win to understand how players interact with the Platform — which pages are visited most, where players encounter difficulties — to improve the product. Analytics data is aggregated and anonymised where possible.
• Marketing cookies: Used only where you have consented, to personalise promotional content displayed on the Platform.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will affect your ability to log in and use the Platform.

8. Data Retention

good8win retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

Personal data that is no longer required for any lawful purpose is securely deleted or anonymised.

9. Data Security

good8win implements technical and organisational security measures appropriate to the risk of processing personal data, including:

• 256-bit SSL/TLS encryption for all data in transit between the player's device and good8win servers;
• Encryption of sensitive data fields (passwords are stored as salted cryptographic hashes and are never stored in recoverable plain text);
• Access controls ensuring that personal data is accessible only to authorised good8win personnel who require it for their specific job function;
• Two-factor authentication required for all good8win administrative system access;
• Regular security assessments and vulnerability testing;
• Incident response procedures including notification obligations to the National Privacy Commission (NPC) for qualifying personal data breaches.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, good8win will notify affected individuals and the NPC in accordance with the timelines prescribed by the DPA Implementing Rules and Regulations.

10. Your Data Rights

Under the Philippine Data Privacy Act (RA 10173), all good8win players have the following rights with respect to their personal data:

• Right to be Informed: The right to know what personal data good8win collects and how it is used — as set out in this Policy;
• Right to Access: The right to request a copy of the personal data good8win holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of personal data, subject to good8win's legal retention obligations;
• Right to Object: The right to object to the processing of personal data for direct marketing purposes;
• Right to Data Portability: The right to receive your personal data in a structured, machine-readable format;
• Right to Complain: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of the above rights, contact good8win's Data Protection Officer at the details provided in Section 14. good8win will respond to verified requests within fifteen (15) calendar days of receipt.

11. Children's Privacy and Age Restriction

good8win's Services are strictly restricted to individuals aged 21 years or older in accordance with Philippine gaming regulations. good8win does not knowingly collect personal data from persons under the age of 21. If good8win becomes aware that personal data has been collected from a person under 21, the account will be immediately suspended, and all personal data associated with the underage account will be deleted in accordance with this Policy and applicable law.

12. Cross-Border Data Transfers

good8win's primary data processing infrastructure is located in the Philippines. Where personal data is transferred to third-party service providers whose servers are located outside the Philippines — for example, cloud infrastructure providers or fraud detection services — good8win ensures that such transfers are conducted in compliance with the DPA's requirements for cross-border data transfers, including ensuring that the receiving party provides an equivalent level of data protection through contractual safeguards or binding corporate rules.

13. Changes to This Privacy Policy

good8win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, good8win will notify registered players via their registered mobile number or email address prior to the changes taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the good8win Platform following notification of changes constitutes acceptance of the revised Policy.

14. Contact & Data Protection Officer

For all data privacy inquiries, requests to exercise your rights under the DPA, or concerns about good8win's handling of your personal data, please contact us at:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe good8win has not handled your personal data in accordance with the DPA. The NPC can be reached through their official website at privacy.gov.ph (external site — not affiliated with good8win).