Your privacy matters to epicwin. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a player based in the Philippines. Please read it carefully before using the epicwin platform.
Privacy at a Glance
These cards highlight the most important aspects of the epicwin Privacy Policy. They are a summary only — please read the full policy below for complete details.
Every connection to the epicwin platform is secured with 256-bit SSL encryption — the same standard used by major Philippine banks like BPI and BDO. Your personal data and financial transactions are protected at all times.
epicwin only collects the personal data that is strictly necessary to operate the platform, verify your identity, process payments, and comply with regulatory requirements. We do not collect data for its own sake.
epicwin does not sell, rent, or trade your personal data to third parties for marketing purposes. Your information is used solely to operate and improve the epicwin platform and to meet our legal obligations.
epicwin processes personal data in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. Your rights as a data subject under Philippine law are fully respected.
You have the right to access, correct, and request deletion of your personal data held by epicwin. You can also object to certain types of processing and withdraw consent where processing is consent-based.
epicwin retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Retention periods are clearly defined and consistently applied.
Data Subject Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by epicwin. To exercise any of these rights, contact the epicwin support team via live chat.
You have the right to request a copy of the personal data epicwin holds about you, along with information about how it is being processed.
If any personal data epicwin holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
You have the right to object to certain types of processing of your personal data, including processing for direct marketing purposes.
You may request that epicwin provide your personal data in a structured, commonly used, machine-readable format so you can transfer it to another service provider.
If you believe epicwin has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.
epicwin is committed to protecting the privacy and personal data of all players who use the epicwin platform. This Policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission of the Philippines.
This Policy applies to all personal data collected through the epicwin website at epicwin.one, the epicwin mobile platform, and any other epicwin-branded digital touchpoints. It covers data collected during registration, account use, customer support interactions, and any other engagement with the epicwin platform.
This Policy should be read alongside the epicwin Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement between you and epicwin.
For the purposes of the Philippine Data Privacy Act of 2012, epicwin is the data controller responsible for the personal data collected through the epicwin platform. As data controller, epicwin determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.
epicwin has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection law. You may contact the DPO through the epicwin support team via live chat or by writing to the email address set out in Section 15 of this Policy.
epicwin collects the following categories of personal data from players. We only collect data that is necessary and proportionate to the purposes described in this Policy.
epicwin collects personal data through the following means:
epicwin processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract (Terms & Conditions) |
| Identity verification (KYC) | Legal obligation (AML regulations, PAGCOR requirements) |
| Processing deposits and withdrawals | Performance of a contract |
| Fraud prevention and security monitoring | Legitimate interests / Legal obligation |
| Responsible gaming monitoring | Legal obligation / Legitimate interests |
| Customer support communications | Performance of a contract / Legitimate interests |
| Platform analytics and improvement | Legitimate interests |
| Marketing communications (where opted in) | Consent |
| Regulatory reporting and compliance | Legal obligation |
epicwin uses the personal data it collects for the following purposes:
epicwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. epicwin may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
epicwin engages third-party service providers to assist with the operation of the platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, fraud prevention services, cloud hosting providers, and customer support technology providers. These providers are contractually bound to process your data only on epicwin's instructions and in accordance with applicable data protection law.
epicwin may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, or other competent authorities where required to do so by applicable law, court order, or regulatory requirement.
In the event of a merger, acquisition, restructuring, or sale of all or part of epicwin's business, your personal data may be transferred to the acquiring entity as part of that transaction. epicwin will notify you of any such transfer and ensure that appropriate data protection safeguards are in place.
epicwin may share your personal data with other third parties where you have given your explicit consent to such sharing. You may withdraw your consent at any time by contacting the epicwin support team.
The epicwin platform uses cookies and similar tracking technologies to enhance your user experience, maintain your session, and analyze platform usage. A cookie is a small text file placed on your device when you visit a website.
You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the epicwin platform. Strictly necessary and security cookies cannot be disabled without impacting your ability to use the platform.
epicwin implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
While epicwin takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. epicwin cannot guarantee the absolute security of data transmitted to or from the platform.
epicwin retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulation. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of account plus 5 years after closure |
| KYC verification documents | Duration of account plus 5 years after closure |
| Financial transaction records | 10 years (AMLC regulatory requirement) |
| Gaming activity logs | Duration of account plus 3 years after closure |
| Customer support communications | 3 years from date of communication |
| Marketing consent records | Until consent is withdrawn plus 1 year |
| Security and fraud logs | 3 years from date of log entry |
Upon expiry of the applicable retention period, epicwin will securely delete or anonymize your personal data in accordance with its data disposal procedures. Where data is anonymized rather than deleted, the anonymized data may be retained indefinitely for analytical purposes as it can no longer be linked to you as an individual.
The epicwin platform is operated primarily for players based in the Philippines. However, some of the third-party service providers engaged by epicwin — including cloud hosting providers and identity verification services — may process personal data outside of the Philippines.
Where personal data is transferred outside the Philippines, epicwin ensures that appropriate safeguards are in place to protect your data in accordance with the requirements of the Philippine Data Privacy Act of 2012. These safeguards may include contractual clauses approved by the National Privacy Commission, adequacy decisions, or other recognized transfer mechanisms.
By using the epicwin platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where epicwin's service providers are located, subject to the safeguards described above.
The epicwin platform is strictly intended for adults aged 21 years and above, in compliance with PAGCOR regulations governing online gaming in the Philippines. epicwin does not knowingly collect personal data from individuals under the age of 21.
If epicwin becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will immediately suspend the associated account, delete the personal data in question, and take all necessary steps to prevent further access by that individual.
If you are a parent or guardian and believe that your child has registered on the epicwin platform, please contact the epicwin support team immediately via live chat so that the account can be closed and the data deleted without delay.
As a data subject under the Philippine Data Privacy Act of 2012, you have the rights described in the "Your Rights" section above. To exercise any of these rights, please contact the epicwin support team via live chat or by writing to the email address in Section 15.
epicwin will respond to all data subject requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case epicwin will notify you of the extension and the reasons for it.
epicwin will not charge a fee for processing data subject requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied. epicwin may request additional information to verify your identity before processing a data subject request.
epicwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or epicwin's data processing practices. When material changes are made, epicwin will notify registered players via the email address associated with their account or through a prominent notice on the epicwin platform.
The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the epicwin platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy.
If you do not agree to any updated Privacy Policy, you must cease using the epicwin platform and may request account closure in accordance with the epicwin Terms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or epicwin's handling of your personal data, please contact the epicwin Data Protection Officer through the following channels:
epicwin aims to acknowledge all privacy-related inquiries within two (2) business days and to provide a substantive response within thirty (30) calendar days.
epicwin is strictly for players aged 21 and above, in compliance with PAGCOR regulations. Your personal data is collected and processed to ensure a safe, secure, and responsible gaming environment for all players across the Philippines. For more information on how epicwin supports responsible gaming, visit our Responsible Gaming page.
Play With Confidence
Now that you understand how epicwin protects your personal data, explore everything the platform has to offer — live casino, slots, bingo, and sports betting, all secured with industry-leading encryption. For players 21 and above only.
Must be 21 or older to access epicwin. Please play responsibly.