Your privacy matters to us. This policy explains exactly what personal data ayalawin collects, how we use it, who we share it with, and the rights you hold under Philippine law.
Summary: ayalawin ("we," "us," or "our") operates the online casino platform at ayalawin.app. This Privacy Policy describes how we collect, use, store, and protect your personal information in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. By registering an account or using the ayalawin Platform, you consent to the practices described in this Policy.
ayalawin is committed to protecting the privacy and personal data of every player who uses our platform. We understand that when you share your personal information with us — whether during registration, during gameplay, or when contacting our support team — you are placing your trust in us. We take that responsibility seriously.
This Privacy Policy applies to all personal data collected by ayalawin through the ayalawin.app website, mobile-optimized browser experience, and any related services, promotions, or communications. It covers data collected from registered players, visitors who browse the Platform without registering, and individuals who contact us through any channel.
This Policy should be read together with the ayalawin Terms & Conditions, which govern your use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Privacy Policy shall prevail.
For Filipino Players: The Philippine Data Privacy Act of 2012 (RA 10173) grants you specific rights over your personal data. ayalawin is committed to upholding these rights in full. If you have questions about how your data is handled, our Data Protection Officer (DPO) is available to assist you.
ayalawin collects personal data that is necessary to provide you with a safe, compliant, and enjoyable online casino experience. The categories of personal data we collect include the following:
Sensitive Personal Information: Under RA 10173, certain categories of data are classified as sensitive personal information and require a higher standard of protection. ayalawin treats government ID numbers, financial account details, and biometric data (where collected for KYC purposes) as sensitive personal information and applies enhanced security measures to their storage and processing.
ayalawin collects your personal data through the following means:
ayalawin uses your personal data only for legitimate, specified purposes. The table below summarizes the primary purposes for which we process your data:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact data | Contract performance |
| Age and identity verification (KYC) | KYC documents, date of birth | Legal obligation (PAGCOR / AML) |
| Processing deposits and withdrawals | Financial and transaction data | Contract performance |
| Providing gaming services | Gaming and activity data | Contract performance |
| Fraud prevention and security | Technical, device, transaction data | Legitimate interest / legal obligation |
| Anti-money laundering compliance | Financial data, source of funds | Legal obligation (RA 9160 AMLA) |
| Responsible gaming monitoring | Gaming activity, session data | Legal obligation / legitimate interest |
| Customer support | Communications data, account data | Contract performance |
| Marketing and promotions | Contact data, gaming preferences | Consent |
| Platform improvement and analytics | Technical and activity data | Legitimate interest |
| Regulatory reporting to PAGCOR | Identity, financial, gaming data | Legal obligation |
ayalawin will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new lawful basis for processing.
Under the Philippine Data Privacy Act of 2012, ayalawin processes your personal data on one or more of the following lawful bases:
Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
ayalawin does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
ayalawin is required by Philippine law to share certain data with regulatory and law enforcement bodies, including:
ayalawin engages trusted third-party service providers who process personal data on our behalf, under strict contractual data processing agreements. These include:
In the event of a merger, acquisition, or sale of all or substantially all of ayalawin's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to the transfer taking effect.
No Data Sales: ayalawin will never sell, rent, or trade your personal data to third-party marketers or data brokers. Any sharing of data is strictly limited to the purposes described in this Policy and is subject to appropriate legal safeguards.
ayalawin uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and gather analytics data that helps us improve our services. A cookie is a small text file placed on your device when you visit the Platform.
You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is placed. Please note that disabling strictly necessary cookies may impair the functionality of the Platform and prevent you from accessing certain features.
ayalawin does not use cookies to collect sensitive personal information such as financial account details or government ID numbers. All sensitive data is transmitted via encrypted channels and stored in secured, access-controlled environments.
ayalawin retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | PAGCOR / AML regulatory requirement |
| KYC verification documents | Duration of account + 5 years after closure | RA 9160 Anti-Money Laundering Act |
| Financial transaction records | 5 years from transaction date | RA 9160 / PAGCOR requirement |
| Gaming activity records | 3 years from account closure | Legitimate interest / regulatory |
| Customer support communications | 3 years from last interaction | Legitimate interest |
| Marketing consent records | Until consent is withdrawn + 1 year | RA 10173 accountability requirement |
| Technical / device logs | 12 months from collection | Security and fraud prevention |
Upon expiry of the applicable retention period, ayalawin will securely delete or anonymize your personal data in accordance with our internal data disposal procedures. Anonymized data that can no longer be linked to an identifiable individual may be retained indefinitely for statistical and analytical purposes.
ayalawin implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:
While ayalawin takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for notifying ayalawin immediately if you suspect unauthorized access to your account.
The Philippine Data Privacy Act of 2012 grants you the following rights with respect to your personal data held by ayalawin. You may exercise any of these rights by contacting our Data Protection Officer using the contact details in Section 14.
Request a copy of the personal data ayalawin holds about you and information about how it is processed.
Request correction of inaccurate or incomplete personal data held about you.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention requirements.
Object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest.
Request that processing of your personal data be suspended while a correction or objection request is being evaluated.
Receive a copy of your personal data in a structured, commonly used, machine-readable format.
Claim compensation for damages sustained due to inaccurate, incomplete, outdated, or unlawfully obtained personal data.
Lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.
ayalawin will respond to all data rights requests within thirty (30) days of receipt. In complex cases, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.
NPC Contact: The National Privacy Commission of the Philippines can be reached at its official website for complaints and inquiries regarding data privacy rights under RA 10173. ayalawin cooperates fully with NPC investigations and inquiries.
ayalawin is an online casino platform intended exclusively for adults. In the Philippines, the minimum legal age for participation in casino-style gambling is 21 years old. ayalawin strictly enforces this age restriction and does not knowingly collect personal data from individuals under the age of 21.
During the registration process, all applicants are required to declare their date of birth and submit valid government-issued identification confirming they are 21 years of age or older. Accounts found to belong to individuals under 21 will be immediately suspended and all funds returned in accordance with our responsible gaming procedures.
21+ Only: If you are a parent or guardian and believe that a minor under your care has registered an account with ayalawin, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay. ayalawin takes underage gambling extremely seriously and cooperates fully with PAGCOR's responsible gaming framework.
If ayalawin discovers that personal data has been collected from an individual under the age of 21 without verifiable parental or guardian consent, we will delete that data promptly and close the associated account. We encourage parents and guardians in Manila, Cebu, Davao, Quezon City, Makati, and across the Philippines to make use of parental control tools to prevent minors from accessing online gambling platforms.
ayalawin primarily stores and processes your personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers, KYC verification partners, and game software providers — may process data in jurisdictions outside the Philippines.
Where personal data is transferred outside the Philippines, ayalawin ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under RA 10173. These safeguards may include:
You may request information about the specific safeguards in place for any international transfer of your personal data by contacting our Data Protection Officer.
ayalawin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When we make material changes to this Policy, we will:
Your continued use of the ayalawin Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of the Platform and may request closure of your account.
We encourage you to review this Privacy Policy periodically to stay informed about how ayalawin protects your personal data. The current version of this Policy is always available at ayalawin.app/privacy-policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way ayalawin handles your personal data, please contact our Data Protection Officer (DPO) using the details below. All data privacy inquiries are handled with strict confidentiality.
ayalawin Data Protection Officer
Email: [email protected]
Subject line: Data Privacy Request – [Your Full Name]
Response time: Within 30 days of receipt
If you are not satisfied with our response to your data privacy inquiry or believe that ayalawin has violated your rights under RA 10173, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC is the independent regulatory body responsible for administering and enforcing the Data Privacy Act of 2012 in the Philippines.
ayalawin is committed to resolving all data privacy concerns promptly and fairly. We view every inquiry as an opportunity to improve our data protection practices and strengthen the trust of our players across the Philippines.
Six pillars of data protection that every ayalawin player benefits from
Every data process at ayalawin is designed around the Philippine Data Privacy Act of 2012. Your rights as a Filipino data subject are built into our systems from the ground up — not added as an afterthought.
All personal and financial data — including your GCash details, BDO or BPI account information, and KYC documents — is protected with AES-256 encryption at rest and TLS encryption in transit.
ayalawin's KYC process verifies every player's identity and age before any real-money play is permitted. This protects the integrity of the platform and ensures compliance with PAGCOR requirements.
ayalawin will never sell, rent, or trade your personal information to third-party marketers or data brokers. Your data is used solely to provide and improve our services to you — full stop.
ayalawin has appointed a dedicated Data Protection Officer (DPO) responsible for overseeing all data privacy matters. Our DPO is your direct point of contact for any data rights requests or concerns.
In the unlikely event of a data breach, ayalawin commits to notifying the National Privacy Commission within 72 hours and informing affected players promptly — in full compliance with RA 10173 requirements.
Now that you know how ayalawin protects your personal data, join thousands of Filipino players enjoying slots, bingo, and live casino games — safely and securely. Must be 21 or older to register.
Join ayalawin Now Explore the Casino