crazywin Privacy Policy

crazywin ("crazywin," "we," "us," or "our") is the operator of the online gaming platform accessible at crazywin.one ("Platform"). For the purposes of this Privacy Policy, crazywin acts as the data controller in respect of the personal data of registered players and visitors to the Platform.

This Privacy Policy applies to all personal data collected through the crazywin Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and general browsing of crazywin.one. It applies to all users of the Platform, with particular relevance to players based in the Republic of the Philippines.

crazywin collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

crazywin does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect biometric data, health data, or political opinions.

crazywin collects personal data through the following means:

• Direct Collection: Data you provide when registering a crazywin account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the crazywin Platform, including through cookies, web beacons, log files, and similar tracking technologies.
• Third-Party Sources: Data received from payment processors (such as GCash and Maya), identity verification service providers, fraud prevention services, and regulatory databases, where permitted by applicable law.
• Gameplay Activity: Data generated through your use of games on the Platform, including bet history, game preferences, and session data, which is recorded automatically by our gaming systems.

crazywin uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your crazywin account, including verifying your identity and age (21+) in compliance with PAGCOR requirements.
• Service Delivery: To provide access to games, process deposits and withdrawals, and deliver the full range of crazywin Platform services.
• Regulatory Compliance: To comply with our obligations under Philippine law, including Anti-Money Laundering (AML) regulations, PAGCOR licensing requirements, and the Data Privacy Act of 2012.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats to the Platform and its players.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits, loss limits, and self-exclusion.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 support channels.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided your consent to receive such communications. You may withdraw consent at any time.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the crazywin Platform's performance, features, and user experience.

crazywin processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable Philippine regulations:

• Contractual Necessity: Processing required to perform our contract with you — including account registration, game access, and payment processing.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing conditions, AML regulations, and the Data Privacy Act of 2012.
• Legitimate Interests: Processing necessary for crazywin's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

crazywin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, Maya, and Philippine banking partners require certain financial and identity data to process your deposits and withdrawals securely.
• Identity Verification Providers: Third-party KYC service providers who assist crazywin in verifying your identity and age in compliance with regulatory requirements.
• Game Software Providers: Licensed game developers and providers whose games are hosted on the crazywin Platform may receive anonymized or pseudonymized gameplay data for technical and audit purposes.
• Regulatory Authorities: The Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or regulatory obligation.
• Fraud Prevention Services: Third-party fraud detection and cybersecurity providers who help crazywin protect the Platform and its players from unauthorized activity.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, subject to strict confidentiality obligations.

crazywin retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. Our general retention periods are as follows:

• Account Data: Retained for the duration of your active crazywin account, plus a minimum of five (5) years following account closure, in compliance with PAGCOR and AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of 2001 (as amended) and PAGCOR regulations.
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Consent Records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.
• Technical and Log Data: Retained for up to twelve (12) months for security and fraud prevention purposes, unless a longer period is required for an ongoing investigation.

Upon expiry of the applicable retention period, crazywin will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

crazywin implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and the crazywin Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized crazywin personnel and service providers on a strict need-to-know basis. All access is logged and regularly audited.
• Two-Factor Authentication: crazywin supports and encourages the use of two-factor authentication (2FA) on all player accounts to prevent unauthorized access.
• Regular Security Audits: The crazywin Platform undergoes regular independent security assessments, penetration testing, and vulnerability scans.
• Incident Response: crazywin maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, we will notify the National Privacy Commission (NPC) and affected players in accordance with the Data Privacy Act of 2012.

While crazywin takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your crazywin account credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

crazywin uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and gather analytical data. The types of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming limits you have set on your account.
• Analytical Cookies: Help crazywin understand how players use the Platform — which pages are visited most, where players encounter errors, and how navigation flows are used. This data is aggregated and anonymized.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of crazywin's marketing campaigns. These are only placed with your consent.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the crazywin Platform. For marketing cookies, you may withdraw consent by contacting our support team.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in respect of your personal data held by crazywin:

• Right to Be Informed: The right to be informed of how your personal data is collected, used, and processed — which this Privacy Policy fulfils.
• Right of Access: The right to request a copy of the personal data crazywin holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

The crazywin Platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR's minimum gambling age requirements. crazywin does not knowingly collect personal data from persons under the age of 21.

If crazywin becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data, and return any deposited funds in accordance with applicable PAGCOR guidelines.

If you are a parent or guardian and believe that a minor has registered on the crazywin Platform, please contact us immediately at [email protected] so that we can take prompt action.

crazywin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect, where practicable.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how crazywin protects your personal data. Your continued use of the crazywin Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or crazywin's data processing practices, please contact our Data Protection Officer:

You also have the right to escalate any unresolved privacy concern to the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for administering and implementing the Data Privacy Act of 2012.