betwinner Privacy Policy — NPC Philippines

Data controller — operator and processor

The data controller for player data on betwinner is PREVAILER B.V., company registration 149548, Chuchubiweg 17, Willemstad, Curaçao. HARBESINA LTD (HE 405135, Cyprus) acts as billing / payment processor and therefore processes payment data as a processor on behalf of PREVAILER B.V. betwinner is not PAGCOR-licensed; player data is held under the operator's Curaçao licence (OGL/2024/341/0759) and processed for billing in Cyprus.

In standard controller/processor terms, PREVAILER B.V. is the data controller and HARBESINA LTD is a payment processor acting on the controller's instructions. Sub-processors used by the operator typically include identity-verification (KYC) vendors, fraud-screening vendors, and analytics providers; the current list is published in the official privacy policy on betwinner.com. Because PREVAILER B.V. is established in Curaçao and HARBESINA LTD in Cyprus, Philippine-resident personal data is transferred outside the Philippines, and the operator relies on the cross-border transfer mechanisms described in the NPC compliance section below.

What data betwinner collects

betwinner collects the following categories of personal data when you register, deposit, and play:

• Account data: name, email, mobile number, country, currency, password hash, security questions, IP history.
• KYC data: government photo ID (passport, driver's licence, UMID, SSS, GSIS, PRC), proof of address, payment-method proof, selfie with ID.
• Transaction data: deposits, withdrawals, bets, winnings, bonus activity, payment-method identifiers (e.g. masked GCash / card numbers).
• Device and usage data: device ID, browser, OS, app version, geolocation (for geo-attestation), session logs, cookies.
• Communications data: support tickets, chat logs, email and SMS receipts.

If you enable biometric login (fingerprint or face unlock) in the betwinner app, the biometric template itself stays on your device and is not transmitted to betwinner servers; the app only sends a confirmation that you unlocked it. The official privacy policy on betwinner.com is the source of record for the current biometric-login setup.

Legal bases and purposes

betwinner processes personal data for the following purposes, on these lawful bases:

• Performance of the contract: registering your account, processing deposits and bets, paying withdrawals.
• Legal obligation: KYC and AML checks under Curaçao law and international financial standards; tax and regulator reporting where applicable.
• Legitimate interest: fraud prevention, responsible-gaming monitoring, network and account security.
• Consent: marketing emails and SMS, optional cookies, optional biometric login. You can withdraw consent at any time under Settings → Profile.

Under the Philippine Data Privacy Act of 2012 (RA 10173) and NPC issuances, the lawful bases above map to the Act's criteria for lawful processing: contract performance, legal obligation, and legitimate interest, with consent required for marketing and similar optional processing. Government-issued ID numbers and similar identifiers may amount to sensitive personal information under the NPC definition, and are processed only where necessary and on the lawful bases above. The same purposes and bases apply under the EU GDPR (Article 6) for any EU-resident player who uses the site.

Data retention and security

betwinner retains personal data for as long as your account is active, plus a further period to meet legal, tax, AML, and dispute-resolution obligations, typically several years after account closure. Security measures include encryption in transit (TLS), encryption at rest for sensitive fields, access controls, and periodic security audits.

More specifically, account and KYC records are kept longest, typically for the statutory AML and tax period after closure, while marketing-consent data is held only until you withdraw consent. For data-protection enquiries, contact the operator at help@betwinner.ph. If a personal-data breach occurs, the operator follows its breach procedure under Curaçao law and, for data within the scope of the Philippine Data Privacy Act, the NPC's 72-hour notification rule.

Your rights — access, rectification, erasure, portability

Philippine players have rights over their personal data, including under the Data Privacy Act of 2012 and betwinner's own policy. To exercise any right, contact betwinner support via Settings → Support or the privacy contact below.

• Access: request a copy of the personal data betwinner holds about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion where there is no legal obligation to retain the data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest or for direct marketing.
• Withdrawal of consent: for marketing, cookies, and optional biometrics.

Requests are usually answered within 30 days under NPC practice and within one month under the GDPR, extended by a further two months where the request is complex. Some data may be withheld where processing is needed for legal, AML, or fraud reasons. If you are not satisfied with the response, you can complain to the National Privacy Commission at privacy.gov.ph and, on licensing matters, to the Curaçao Gaming Authority.

PH NPC compliance + GDPR cross-reference

betwinner processes personal data of Philippine-resident players and is therefore within the territorial scope of the Philippine Data Privacy Act of 2012 (RA 10173), which the National Privacy Commission (NPC) enforces. betwinner's Curaçao and Cyprus operations may also bring some processing within the EU GDPR. This page summarises both regimes; the official policy lives on betwinner.com.

Under NPC rules, processing is limited to the lawful bases above, and cross-border transfers to Curaçao and Cyprus rely on the safeguards in NPC Circular 2016-02 and the operator's transfer arrangements; a data-protection impact assessment is carried out where processing is likely to be high-risk. For EU-resident players, the GDPR cross-reference is Article 6 (lawful bases), Articles 13 and 14 (transparency information), and Article 44 onwards (transfers out of the EEA). The operator's data-protection contact is help@betwinner.ph, and this summary was last reviewed in July 2026; the official privacy policy on betwinner.com is the source of record.

betwinner privacy

This betwinner privacy policy summary explains how PREVAILER B.V. (Curaçao, reg 149548), with billing processor HARBESINA LTD (Cyprus, HE 405135), handles the personal data of Philippine players under Curaçao licence OGL/2024/341/0759. betwinner collects account data, KYC documents (passport, driver's licence, UMID, SSS, GSIS, PRC), transaction data, device and usage data, and communications data, for purposes of contract performance, legal/AML obligations, fraud prevention, and (with consent) marketing. Philippine players have rights under the Data Privacy Act of 2012 (RA 10173) enforced by the National Privacy Commission (NPC); some processing may also fall under the EU GDPR. Rights include access, rectification, erasure, portability, objection, and withdrawal of consent. We are an independent affiliate, not the operator; this page is a summary and not legal advice, and the official privacy policy on betwinner.com controls. For broader context see our full review and the terms page.

FAQ