helptowin Privacy Policy

This Policy applies to all personal data collected by helptowin in connection with the operation of the helptowin online gaming platform, including data collected through:

• Account registration, login, and account management processes
• Deposit and withdrawal transactions via GCash, Maya, BPI, BDO, Metrobank, and other payment channels
• KYC identity verification submissions
• Gameplay activity, wagering history, and game session data
• Customer support interactions via live chat, email, and other channels
• Technical data automatically collected through browser and device interactions
• Marketing communications and promotional participation

This Policy does not apply to the data practices of third-party companies whose services helptowin may integrate, including game providers, payment processors, and fraud prevention services. Those third parties maintain their own separate privacy policies, the terms of which helptowin does not control.

For the purposes of the Data Privacy Act of 2012 and this Policy, helptowin acts as the personal information controller (PIC) in respect of all personal data collected through the helptowin platform. As PIC, helptowin determines the purposes for which and the means by which personal data is processed.

helptowin has designated a Data Protection Officer (DPO) responsible for overseeing the platform's compliance with RA 10173 and all applicable data protection obligations. Players may contact the DPO directly for any data privacy related inquiry, request, or complaint. Contact details for the DPO are provided in Section 14 of this Policy.

helptowin collects the following categories of personal data from Players. Collection of each category is tied to specific, legitimate purposes as described in Section 5:

4.1 Directly from You

The majority of personal data held by helptowin is provided directly by Players through: account registration forms; KYC verification document submissions; deposit and withdrawal transaction initiation; customer support communications; responsible gaming tool activation; and promotional or survey participation.

4.2 Automatically Through Platform Use

When you access and use the helptowin platform, certain technical and behavioral data is automatically collected through cookies, server logs, and similar technologies. This includes your IP address, device and browser information, pages visited, time spent on the platform, and general geographic location at the city or regional level. Automatic data collection begins when you first access any page of helptowin.net, including prior to completing registration.

4.3 From Third Parties

helptowin may receive personal data about you from third parties in limited circumstances, including: payment processors confirming the status of deposit or withdrawal transactions; identity verification services used to supplement KYC checks; fraud prevention and AML screening providers; and publicly available registries where relevant to compliance obligations.

helptowin processes personal data only for specific, legitimate purposes. The following table sets out each processing purpose and the corresponding legal basis under RA 10173:

helptowin does not use personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required for immediate fraud prevention or AML screening purposes as permitted by law.

helptowin does not sell, rent, or trade personal data to any third party for commercial or marketing purposes. Personal data may be shared with the following categories of third parties only to the extent strictly necessary for the purposes described:

6.1 Regulatory Authorities

helptowin is required by PAGCOR regulations and Philippine law to provide player data and gaming activity records to regulatory authorities upon lawful request. This includes PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and law enforcement agencies acting under valid legal process.

6.2 Payment Processors

To process GCash, Maya, BPI, BDO, Metrobank, and other payment transactions, helptowin shares limited financial data with the relevant payment service providers. These providers process data solely for the purpose of executing the requested financial transaction and are bound by applicable financial services privacy regulations.

6.3 Game Providers

Game providers whose titles appear in the helptowin catalogue may receive session-level technical data necessary to deliver gameplay (such as session tokens and bet amounts). Personal identity data is not shared with game providers beyond what is technically necessary for session delivery.

6.4 KYC and Fraud Prevention Services

helptowin engages third-party identity verification and fraud prevention providers to assist with KYC processing and AML screening. These providers receive only the data necessary to perform their specific service and are contractually prohibited from using it for any other purpose.

6.5 IT and Infrastructure Providers

helptowin uses third-party cloud hosting, database management, and cybersecurity services to operate the platform. These service providers may process personal data as data processors acting on helptowin's instructions and under data processing agreements that impose equivalent privacy obligations.

helptowin retains personal data for the minimum period necessary to fulfill the purposes for which it was collected, subject to applicable legal and regulatory minimum retention requirements. The following general retention schedule applies:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years after account closure, as required by PAGCOR regulations and AMLA record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of account closure or the date of the most recent transaction associated with the account, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years in compliance with AMLA and PAGCOR record-keeping requirements.
• Gaming activity records: Retained for a minimum of three (3) years from the date of the relevant game session.
• Support communication records: Retained for two (2) years from the date of the communication, or for the duration of any related ongoing dispute, whichever is longer.
• Marketing consent records: Retained for the duration of the account relationship and for two (2) years following withdrawal of consent, for compliance audit purposes.

Following the applicable retention period, personal data is securely deleted or anonymized in accordance with helptowin's data disposal procedures.

helptowin uses cookies and similar tracking technologies on the helptowin.net platform. Cookies are small data files placed on your device by the helptowin platform when you access it. The following categories of cookies are used:

8.1 Strictly Necessary Cookies

These cookies are essential for the helptowin platform to function correctly. They enable core features including account login sessions, game state maintenance, and security functions. These cookies cannot be disabled without disrupting normal platform functionality.

8.2 Functional Cookies

These cookies allow helptowin to remember your preferences and settings, such as your preferred language, lobby view configuration, and responsible gaming tool settings. Disabling these cookies may reduce your platform experience but will not prevent access to core features.

8.3 Analytics Cookies

helptowin uses analytics tools to understand how Players use the platform — which pages are visited most frequently, how long sessions last, and where technical errors occur. This data is used in aggregate and anonymized form to improve platform performance. Players may opt out of analytics cookies from their browser settings.

8.4 Managing Cookies

You may configure your browser to refuse or delete cookies at any time. Note that disabling strictly necessary cookies will prevent you from logging in to your helptowin account. For guidance on managing cookies in your specific browser, refer to the browser's official documentation or help resources.

helptowin implements technical, organizational, and physical security measures designed to protect personal data against unauthorized access, loss, alteration, or disclosure. The following security measures are in place:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and helptowin's servers is encrypted using 256-bit SSL/TLS — the same standard used by Philippine online banking platforms.
• Data Encryption at Rest: Personal data stored in helptowin's databases, including KYC documents and financial data, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are required to complete data privacy training and are bound by confidentiality obligations.
• Two-Factor Authentication: helptowin supports OTP-based two-factor authentication for all Player accounts. Players are strongly encouraged to enable 2FA from their account security settings.
• Security Monitoring: helptowin's infrastructure is subject to continuous automated security monitoring and periodic penetration testing by qualified cybersecurity professionals.
• Breach Response: In the event of a personal data breach that is likely to result in harm to affected individuals, helptowin will notify the National Privacy Commission within seventy-two (72) hours of discovery, as required by RA 10173 and NPC Circular 16-03.

Under Republic Act No. 10173, registered Players who are Philippine residents have the following rights in relation to their personal data held by helptowin. These rights may be exercised by submitting a request to the helptowin Data Protection Officer using the contact details in Section 14.

helptowin will respond to all data subject rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, the response period may be extended by a further thirty (30) days with notice provided to the requesting Player.

helptowin is strictly an adult platform. In compliance with PAGCOR regulations governing online casino gaming in the Philippines, the minimum age for registration and participation is twenty-one (21) years. helptowin does not knowingly collect personal data from individuals under the age of 21.

Age is verified through the KYC identity verification process required prior to the processing of any withdrawal. Where helptowin discovers that personal data has been collected from an individual who is under 21 years of age, the relevant account will be immediately closed, the personal data will be securely deleted except where retention is required by law, and any funds held will be returned to the original deposit source.

The helptowin platform may contain integrations with, or references to, third-party services including game providers, payment processors, and identity verification services. Each of these third parties operates under its own privacy policy, and helptowin is not responsible for the data practices of any third-party service provider.

Players are encouraged to review the privacy policies of third-party services that they interact with through the helptowin platform, including GCash, Maya, and any bank used for deposit or withdrawal transactions. helptowin's Privacy Policy governs only the personal data processing activities of helptowin itself.

helptowin reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or helptowin's data processing practices. Material changes — meaning changes that substantively affect the rights of Players or the manner in which personal data is processed — will be communicated to registered Players via email notification and/or a prominent notice on the helptowin platform at least fourteen (14) days prior to taking effect.

Non-material changes, such as typographical corrections or clarifications that do not alter the substance of the Policy, may take effect immediately upon publication. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. The current version of this Policy is always accessible at helptowin.net/privacy-policy.

Continued use of the helptowin platform following notification of material changes constitutes acceptance of the revised Privacy Policy. If you do not agree to an updated version of this Policy, you should discontinue use of the platform and close your account by contacting helptowin support.

For all data privacy inquiries, requests to exercise your rights under RA 10173, or to report a data privacy concern, please contact helptowin's Data Protection Officer through the following channels:

This Privacy Policy constitutes helptowin's complete disclosure of its personal data processing practices as required under the Data Privacy Act of 2012 and the implementing rules and regulations of the National Privacy Commission of the Philippines.