bullwin processes all personal data in compliance with Republic Act No. 10173 — the Data Privacy Act of 2012 — and its implementing rules and regulations issued by the National Privacy Commission.
All data transmitted between your device and the bullwin platform is protected by industry-standard SSL 256-bit encryption. This includes login sessions, transactions, and any personal information you submit.
As a registered bullwin player, you have the right to access, correct, object to processing, and in applicable circumstances delete the personal data bullwin holds about you. These rights can be exercised at any time.
bullwin does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Data sharing with third parties is limited to what is necessary to operate the bullwin platform and comply with legal obligations.
bullwin retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, and PAGCOR compliance obligations. Data that is no longer required is securely deleted or anonymised.
bullwin has designated a Data Protection Officer responsible for overseeing data privacy compliance. Players may contact the DPO directly to exercise their rights or raise data privacy concerns at any time.
Summary: This Privacy Policy ("Policy") describes how bullwin ("bullwin," "we," "us," "our") collects, uses, discloses, and safeguards personal information provided by or obtained about individuals ("you," "Player," "User") who access or use the bullwin platform at bullwin.one. This Policy forms part of the bullwin Terms and Conditions and should be read alongside them. By using the bullwin platform, you consent to the data practices described in this Policy.
bullwin is committed to protecting the privacy and security of personal information belonging to the players who use our platform. We understand that Filipino players entrust us with sensitive personal and financial information when they register, deposit, play, and withdraw — and we take that responsibility seriously.
This Policy has been prepared in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines. It also reflects our obligations under PAGCOR's data handling requirements applicable to licensed online gaming operators.
This Policy applies to all personal data processed in connection with:
For the purposes of this Policy, the data controller responsible for the personal data you provide to or that is collected by bullwin is the bullwin operating entity ("bullwin," "we"). bullwin operates the online gaming platform accessible at bullwin.one and associated subdomains, and is registered and operates under applicable Philippine gaming and business regulations.
If you have any questions about who controls your personal data or how it is processed, you may contact bullwin's designated Data Protection Officer (DPO) using the contact details set out in Section 15 of this Policy.
Data Controller: bullwin (bullwin.one) is the data controller in respect of personal data processed in connection with your use of the bullwin platform. Where bullwin engages third-party service providers who process data on our behalf, those providers act as data processors and are contractually bound to process your data only in accordance with bullwin's instructions and this Policy.
bullwin collects the following categories of personal data in connection with the operation of the platform:
Sensitive Personal Information: Under the Data Privacy Act, certain categories of data are classified as "sensitive personal information" and attract heightened protection requirements. Where bullwin processes sensitive personal information (such as government ID details required for KYC), we do so only where required by law or regulation, and we apply additional security controls to such data.
bullwin collects personal data through the following means:
The majority of personal data we hold is provided directly by you when you: register a bullwin Account; complete KYC identity verification; make a deposit or withdrawal; contact bullwin customer support; or participate in promotions, surveys, or other platform activities.
When you access and use the bullwin platform, we automatically collect technical and behavioural data through server logs, session tracking, and cookie technologies. This includes IP addresses, device identifiers, session timestamps, and game interaction data. See Section 8 for details on cookies and tracking technologies.
In some circumstances, bullwin receives personal data from authorised third-party service providers, including:
bullwin uses personal data for the following purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and identity verification | Identity, contact, government ID data | Contract performance; Legal obligation |
| Processing deposits and withdrawals | Financial, transaction, identity data | Contract performance; Legal obligation |
| Providing access to platform games and services | Identity, account, behavioural data | Contract performance |
| Customer support and dispute resolution | Identity, contact, transaction, communication data | Contract performance; Legitimate interest |
| Anti-fraud and security monitoring | Technical, financial, behavioural data | Legal obligation; Legitimate interest |
| Anti-money laundering compliance | Identity, financial, transaction data | Legal obligation |
| Responsible gaming monitoring | Behavioural, gaming, account data | Legal obligation; Legitimate interest |
| Marketing communications (where consented) | Contact, preference, behavioural data | Consent |
| Platform improvement and analytics | Technical, behavioural data (aggregated/anonymised) | Legitimate interest |
| Compliance with PAGCOR regulatory reporting | Identity, transaction, gaming data | Legal obligation |
Under the Data Privacy Act of 2012 and its Implementing Rules, bullwin processes personal data on one or more of the following legal bases:
bullwin does not sell personal data. We share personal data only in the circumstances described below and only to the minimum extent necessary for the stated purpose:
To process your deposits and withdrawals, bullwin shares the necessary transaction and identity data with authorised payment processors including GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, and cryptocurrency processing partners. These providers process data in accordance with their own privacy policies and applicable Philippine financial regulations.
bullwin engages third-party KYC service providers to assist with identity document verification. These providers receive identity data solely for the purpose of performing verification checks on bullwin's behalf and are contractually prohibited from using that data for any other purpose.
bullwin may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities in connection with regulatory inspections, investigations, or mandatory reporting obligations.
Where required by a valid court order, search warrant, or other legally binding directive issued by a competent Philippine authority, bullwin will disclose personal data to law enforcement agencies. bullwin will, where legally permissible, notify you of such a disclosure.
bullwin's platform integrates games from third-party game studios. Limited technical session data (such as session tokens and game interaction logs) may be shared with content providers for the purpose of delivering game functionality and resolving technical disputes. This data does not include your full identity or financial information.
No Cross-Border Marketing Transfers: bullwin does not transfer your personal data to third parties outside the Philippines for commercial marketing purposes. Where any cross-border transfer occurs in connection with technical infrastructure or service providers, bullwin ensures appropriate safeguards are in place as described in Section 13.
The bullwin platform uses cookies and similar tracking technologies to operate core platform functions, maintain your session, and collect technical analytics data. The categories of cookies used by bullwin are as follows:
You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to use the bullwin platform, including logging in to your Account.
bullwin retains personal data for the following periods, after which data is securely deleted or anonymised:
bullwin implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
While bullwin takes these measures seriously, no platform is entirely immune to security risks. You can strengthen the protection of your own Account by using a strong, unique password, enabling two-factor authentication, and not sharing your credentials with others.
Under the Data Privacy Act of 2012, you have the following rights in respect of personal data that bullwin holds about you. These rights are exercisable by contacting bullwin's Data Protection Officer as described in Section 15:
You have the right to request confirmation of whether bullwin holds personal data about you and to receive a copy of that data, along with information about how it is processed.
You have the right to request correction of inaccurate or incomplete personal data that bullwin holds about you. Identity data corrections may require documentary verification.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bullwin's legal retention obligations.
You have the right to object to processing of your personal data carried out on the basis of legitimate interest, including for direct marketing purposes. Objection to marketing will be actioned immediately.
Where technically feasible, you may request a copy of personal data you have provided to bullwin in a structured, machine-readable format for transfer to another controller.
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
How to Exercise Your Rights: Submit a written request to bullwin's Data Protection Officer at [email protected] with the subject line "Data Rights Request." Include your full name, registered mobile number, and a description of your request. bullwin will acknowledge your request within 5 business days and aim to respond substantively within 30 calendar days. Identity verification may be required before processing certain requests.
The bullwin platform is strictly restricted to individuals who are 21 years of age or older, as required by PAGCOR regulation and Philippine law. bullwin does not knowingly collect personal data from persons under 21 years of age.
If bullwin becomes aware that personal data has been collected from a person under the minimum age, we will take immediate steps to delete that data and close the associated Account. Where the collection involved a registration made in breach of our age verification controls, bullwin may report the matter to relevant authorities in accordance with our regulatory obligations.
If you are a parent or guardian and believe that a minor in your care has registered on the bullwin platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.
Where bullwin engages service providers whose infrastructure is located outside the Philippines — for example, cloud hosting providers or game content delivery networks — your personal data may be transferred to and processed in a jurisdiction other than the Philippines.
In all such cases, bullwin ensures that appropriate safeguards are in place in accordance with the Data Privacy Act and NPC guidelines, including:
Cross-border data transfers by bullwin are limited to what is operationally necessary and do not extend to sharing data with foreign entities for their own commercial purposes.
bullwin reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or platform operations. When we make material changes to this Policy, we will:
We encourage you to review this Policy periodically. Your continued use of the bullwin platform after a revised Policy becomes effective constitutes your acceptance of the revised terms, to the extent permitted by applicable law.
bullwin has designated a Data Protection Officer (DPO) in compliance with the Data Privacy Act of 2012. The DPO is responsible for overseeing bullwin's data privacy compliance programme, handling data rights requests from players, and liaising with the National Privacy Commission on data privacy matters.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how bullwin has handled your personal data, please contact the DPO as follows:
Email: [email protected] (subject: "Data Privacy Request" or "DPO Inquiry")
Response time: Acknowledgement within 5 business days; substantive response within 30 calendar days
Live chat: Available 24/7 through your bullwin Account dashboard for general inquiries
You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that bullwin has processed your personal data in breach of the Data Privacy Act. Information about NPC complaint procedures is available through official Philippine government channels.
Your personal data is handled responsibly, securely, and in full compliance with Philippine law. Log in to your bullwin Account and enjoy 500+ games, GCash deposits, and live casino — all in a PAGCOR-regulated environment. 21+ only.