Legal
Your privacy matters to us. This Privacy Policy explains what personal data Bullwin collects from Filipino players, how we use it, who we share it with, and what rights you have over your own information. Please read this carefully before registering or using the Bullwin platform.
Last updated: January 1, 2026Our Commitment
These cards highlight the core principles behind Bullwin's approach to data privacy. They are a summary only — the full legal text follows below.
Bullwin uses industry-standard SSL encryption and secure server infrastructure to protect your personal data at rest and in transit. Your financial details, identity documents, and account credentials are stored with strict access controls and are never transmitted in plain text.
Under the Philippine Data Privacy Act of 2012 (Republic Act 10173), you have the right to access, correct, and request deletion of your personal data held by Bullwin. You can exercise these rights at any time by contacting our Data Protection Officer.
Bullwin does not sell, rent, or trade your personal data to third-party marketers. Your information is used solely to operate the Bullwin platform, comply with legal obligations, and improve your gaming experience — nothing else.
Bullwin's data practices are fully aligned with the Philippine Data Privacy Act of 2012 and the implementing rules and regulations issued by the National Privacy Commission (NPC). We maintain a registered Data Protection Officer and conduct regular privacy impact assessments.
Bullwin retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Once the retention period expires, your data is securely deleted or anonymized in accordance with our data retention schedule.
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, Bullwin will notify affected players and the National Privacy Commission within the timeframes required by Philippine law. Transparency is a core part of how we handle data incidents.
Important: This Privacy Policy ("Policy") describes how Bullwin ("Bullwin," "we," "us," "our") collects, uses, stores, and protects the personal data of users ("Player," "you," "your") of the Bullwin platform at bullwin.app. By registering for or using the Bullwin platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
Bullwin is committed to protecting the privacy and personal data of all players who use the Bullwin online gaming platform. This Policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC).
This Policy applies to all personal data collected by Bullwin through the bullwin.app website, the Bullwin mobile application, and any other digital touchpoints operated by Bullwin. It covers data collected from registered players, prospective players who visit the platform without registering, and any other individuals whose personal data Bullwin processes in connection with the operation of the platform.
Bullwin acts as the personal information controller in respect of the data described in this Policy. Where Bullwin engages third-party service providers to process data on its behalf, those providers act as personal information processors and are bound by contractual obligations consistent with this Policy and applicable law.
Bullwin collects the following categories of personal data from players and platform users:
Sensitive Personal Information: Certain data Bullwin collects — such as government-issued ID numbers and facial images — may constitute sensitive personal information under the Data Privacy Act of 2012. Bullwin processes such data solely for identity verification and regulatory compliance purposes, with appropriate safeguards in place.
Bullwin collects personal data through the following means:
Bullwin processes your personal data on the following legal bases under the Data Privacy Act of 2012:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract with you |
| Identity verification (KYC) | Legal obligation; legitimate interest |
| Processing deposits and withdrawals | Performance of a contract with you |
| Anti-money laundering compliance | Legal obligation (RA 9160, as amended) |
| Fraud prevention and platform security | Legitimate interest |
| Responsible gaming monitoring | Legal obligation; legitimate interest |
| Marketing communications (opt-in) | Consent |
| Platform analytics and improvement | Legitimate interest |
| Regulatory reporting to PAGCOR / AMLC | Legal obligation |
Bullwin uses the personal data it collects for the following purposes:
Marketing Opt-Out: If you have consented to receive marketing communications from Bullwin and wish to withdraw that consent, you may do so at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
Bullwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Bullwin may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
Bullwin engages third-party service providers to assist in the operation of the platform, including KYC and identity verification providers, payment processors, fraud detection services, cloud hosting providers, and customer support platforms. These providers process your data solely on Bullwin's instructions and are contractually prohibited from using your data for their own purposes.
Bullwin is required by law to share certain player data with regulatory and law enforcement authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government agencies, where required by applicable law or a valid legal order.
In the event of a merger, acquisition, restructuring, or sale of all or part of Bullwin's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to your data being transferred.
Cross-Border Transfers: Where Bullwin transfers your personal data outside the Philippines — for example, to cloud service providers with servers in other countries — Bullwin ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012 and NPC guidelines.
Bullwin uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit the Bullwin website. They help us recognize your browser, remember your preferences, and analyze how the platform is used.
You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Bullwin platform. Strictly necessary cookies cannot be disabled as they are essential to the operation of the platform.
Bullwin retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years after closure |
| KYC and identity verification documents | Duration of account plus 5 years after closure |
| Transaction and financial records | 10 years (AMLC regulatory requirement) |
| Customer support communications | 3 years from date of communication |
| Marketing consent records | Until consent is withdrawn, plus 3 years |
| Technical and usage logs | 12 months on a rolling basis |
Upon expiry of the applicable retention period, Bullwin will securely delete or anonymize your personal data in accordance with its data disposal procedures. Where data is anonymized, it may be retained indefinitely for analytical purposes as it can no longer be linked to you as an individual.
Bullwin implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
While Bullwin takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are also responsible for maintaining the security of your own Bullwin account credentials. Never share your password with anyone, and contact Bullwin support immediately if you suspect unauthorized access to your account.
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by Bullwin:
To exercise any of these rights, please contact Bullwin's Data Protection Officer using the contact details provided in Section 14 of this Policy. Bullwin will respond to all verified requests within 15 business days.
The Bullwin platform is strictly intended for adults aged 21 years and above. Bullwin does not knowingly collect personal data from individuals under the age of 21. If Bullwin becomes aware that personal data has been collected from a person under 21, it will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that your child has provided personal data to Bullwin, please contact our Data Protection Officer immediately using the contact details in Section 14.
The Bullwin platform may integrate with third-party services such as payment gateways (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, and analytics tools. These third-party services operate under their own privacy policies, which Bullwin does not control. Bullwin is not responsible for the privacy practices of third-party service providers beyond the contractual obligations imposed on them as data processors.
Bullwin carefully selects third-party service providers and requires them to implement data protection standards consistent with the Data Privacy Act of 2012 and this Policy. Data shared with third-party processors is limited to what is strictly necessary for the performance of their services.
Bullwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material, Bullwin will notify registered players via email or a prominent notice on the platform prior to the changes taking effect.
The date of the most recent revision is displayed at the top of this Policy. Your continued use of the Bullwin platform following the publication of any changes constitutes your acknowledgment of the revised Policy. If you do not agree with any changes, you should cease using the platform and may request account closure in accordance with the Bullwin Terms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Bullwin, please contact our Data Protection Officer:
Data Protection Officer
Bullwin Online Gaming Platform
Email: [email protected]
Website: bullwin.app
You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through their official government website. Bullwin encourages players to contact us first so we can address any concerns directly and promptly.
Your Data, Your Trust
Bullwin is built for Filipino players who value both great gaming and genuine data privacy. Register today, deposit via GCash or PayMaya, and enjoy a secure, PAGCOR-regulated experience. Must be 21 or older to play.
21+ only · DPA 2012 compliant · SSL secured · GCash & PayMaya accepted