InstaWin Privacy Policy – How We Protect Your Data

1 Who We Are

InstaWin is an online gaming platform operating at instawin.best, serving players in the Philippines. For the purposes of this Privacy Policy, InstaWin is the data controller — meaning we determine how and why your personal information is processed.

If you have any questions or concerns about how InstaWin handles your personal data, you can reach our Data Protection Officer directly at support@instawin.best. We take privacy concerns seriously and will respond within a reasonable timeframe.

2 Data We Collect

InstaWin collects different types of personal information depending on how you interact with the Platform. Here's a clear breakdown:

We do not collect sensitive personal data such as race, religion, health information, or political views. The data we collect is limited to what is necessary for account management, regulatory compliance, and service improvement.

3 How We Collect Your Data

InstaWin collects personal information through several channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your profile settings.
• Automatically — through cookies, web beacons, and session tracking tools that operate when you browse or use the Platform. This includes IP addresses, device fingerprints, and usage patterns.
• From payment processors — GCash, Maya, banks, and card networks may share transaction confirmation data with InstaWin to reconcile payments. This data is limited to what's necessary to verify and process your transactions.
• From identity verification services — when you submit government-issued ID documents, our KYC process may use third-party verification tools to confirm authenticity. These services are bound by strict data handling agreements.

4 Why We Use Your Data

InstaWin uses your personal data for specific, legitimate purposes. We don't collect information for the sake of it — every data point has a function:

• Account management: Creating and maintaining your InstaWin account, verifying your identity, and managing your preferences and settings.
• Transaction processing: Handling deposits, withdrawals, and bonus credits accurately and securely through Philippine payment channels.
• Regulatory compliance: Meeting our obligations under Philippine gaming laws and anti-money laundering (AML) requirements, which include maintaining transaction records and conducting due diligence on player accounts.
• Fraud prevention and security: Detecting and preventing unauthorised account access, fraudulent transactions, and abuse of promotions or bonuses.
• Customer support: Resolving your queries, complaints, and disputes efficiently. Support interactions are logged to maintain continuity and quality.
• Responsible gaming: Monitoring play patterns to identify potential problem gambling behaviour and offer appropriate tools or interventions.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the InstaWin interface, game selection, and overall experience.
• Marketing communications: Sending you relevant promotions, bonus notifications, and platform updates — but only if you have opted in to receive them.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 (RA 10173), InstaWin relies on the following legal bases to process your personal data:

• Contractual necessity: Processing required to fulfil our agreement with you as a registered player — including account management, payment processing, and support.
• Legal obligation: Processing required to comply with Philippine laws, including gaming regulations and AML obligations administered by relevant regulatory bodies.
• Legitimate interest: Processing for fraud prevention, platform security, and responsible gaming monitoring, balanced against your privacy rights.
• Consent: Processing for direct marketing communications, non-essential cookies, and any other purpose where we have explicitly asked for and received your consent. You may withdraw consent at any time without affecting the lawfulness of processing already carried out.

6 Sharing Your Data

InstaWin does not sell your personal data. We share information only in the following circumstances, and only to the extent necessary:

• Payment processors: GCash, Maya, GrabPay, Coins.ph, InstaPay/PESONet partner banks, Visa and Mastercard networks — to process your transactions securely.
• KYC and identity verification providers: Third-party services engaged to verify government-issued IDs as part of our compliance obligations.
• Game software providers: Certain game providers may receive anonymised session data to ensure the integrity and smooth operation of their games on InstaWin.
• Regulatory and law enforcement authorities: The National Privacy Commission, PAGCOR, the Anti-Money Laundering Council (AMLC), or law enforcement agencies — where required by law, a court order, or where we have a legitimate obligation to report suspected illegal activity.
• IT and security service providers: Third-party vendors who support InstaWin's technical infrastructure, cloud hosting, and cybersecurity operations. These providers are bound by data processing agreements that restrict their use of your data.

All third parties who receive InstaWin player data are required to handle it in accordance with applicable Philippine data protection laws and to implement appropriate security measures.

7 Cookies & Tracking Technologies

InstaWin uses cookies and similar tracking technologies to make the Platform work properly and to improve your experience. Here's a breakdown of the types we use:

• Essential cookies: Required for core Platform functions — login sessions, security tokens, and keeping your preferences intact. You cannot opt out of these without breaking core functionality.
• Performance cookies: Collect anonymised data about how players navigate the site, which pages load slowly, and where errors occur. This helps us fix issues and improve page performance.
• Functional cookies: Remember your settings, such as language preferences and display options, so you don't need to reset them every visit.
• Analytics cookies: Help us understand aggregate user behaviour — which games are most popular, how long sessions last, and which promotions get the most engagement. No individual is identified in analytics reports.
• Marketing cookies: Used only if you have consented to receiving personalised offers. These help InstaWin serve relevant promotions based on your activity.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using InstaWin's core features, but some personalisation functions may not work as expected.

8 Data Retention

InstaWin retains personal data for as long as necessary to fulfil the purposes described in this Policy, and in accordance with our legal obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years after account closure, as required by Philippine AML regulations.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction, in compliance with financial record-keeping requirements.
• Support communications: Retained for up to 3 years after the last interaction, to maintain dispute resolution records.
• Technical and behavioural data: Typically retained for 24 months on a rolling basis, used for security monitoring and platform analytics.
• Marketing data: Retained until you withdraw consent or request removal from marketing lists.

When data is no longer needed and there is no legal requirement to retain it, InstaWin will securely delete or anonymise it so that it can no longer be linked to you as an individual.

9 Data Security

Protecting your data is a core operational priority at InstaWin — not an afterthought. We implement multiple layers of security to safeguard your personal and financial information:

• SSL/TLS encryption on all data in transit between your device and InstaWin servers
• Encrypted storage for sensitive data including KYC documents and financial records
• Multi-factor authentication options for account login
• Automated fraud detection systems that monitor account activity in real time
• Strict access controls — only authorised InstaWin personnel with a legitimate business need can access player data
• Regular security audits and penetration testing of the InstaWin platform and infrastructure

While InstaWin takes all reasonable precautions, no system is 100% immune to security risks. Players are encouraged to use strong, unique passwords and to keep their login credentials confidential. If you suspect your account has been compromised, contact InstaWin support immediately.

In the event of a personal data breach that poses a real risk to affected players, InstaWin will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will inform affected players as soon as practicable thereafter.

10 Your Rights Under the DPA

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data held by InstaWin:

To exercise any of these rights, contact our Data Protection Officer at support@instawin.best. We will respond within 30 days of receiving a verifiable request. We may need to verify your identity before processing requests that involve accessing or deleting your data.

11 Children's Privacy

InstaWin is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21, which is the minimum legal age for online gaming participation in the Philippines.

During registration, players must confirm their age and submit a government-issued ID for verification. If InstaWin discovers that an account has been registered by a minor, the account will be immediately closed and any deposits will be refunded to the payment source. Related data will be deleted except where retention is required by law.

Parents and guardians who believe a minor may have registered on InstaWin are encouraged to contact our support team immediately at support@instawin.best so the matter can be investigated and resolved without delay.

12 Marketing Communications

InstaWin may send you promotional emails, SMS notifications, or in-platform messages about new games, bonus offers, VIP Club updates, and platform news. We only send these if you have opted in during registration or subsequently via your account preferences.

You can unsubscribe from marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any InstaWin marketing email
• Updating your communication preferences in your InstaWin account settings
• Contacting our support team and asking to be removed from marketing lists

Unsubscribing from marketing does not affect transactional communications — you will still receive emails about your deposits, withdrawals, account security, and support responses, as these are essential account notifications rather than promotional content.

13 Changes to This Privacy Policy

InstaWin may update this Privacy Policy from time to time to reflect changes in the law, our data practices, or the services we offer. The "Last Updated" date at the top of this page always shows when the most recent revision was made.

For significant changes — particularly those that affect your rights or how we use your data — InstaWin will notify registered players via email at least 7 days before the changes take effect. For minor administrative updates, the revised Policy will simply be published on this page.

Continuing to use InstaWin after a Privacy Policy update takes effect means you accept the revised terms. If you disagree with a significant change, you have the right to close your account before it comes into force.

14 Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or how InstaWin handles your personal data, you can reach us through the following channel:

• Email: support@instawin.best
• Subject line: "Privacy / Data Request – [Your registered email address]"

Our support team is available 24/7. Privacy-specific requests are handled by our Data Protection Officer and will receive a response within 30 business days. For urgent matters such as suspected data breaches affecting your account, please mark your message as "URGENT" and contact us immediately.

You also have the right to escalate any unresolved privacy complaint to the National Privacy Commission (NPC) of the Philippines, which is the government body responsible for enforcing RA 10173.