w500 Privacy Policy

This Privacy Policy ("Policy") is issued by w500 ("w500," "we," "us," or "our") and applies to all personal information collected through the w500 online gaming platform at w500.xyz, including all associated websites, mobile applications, customer support channels, and related services (collectively, the "Platform").

w500 is committed to protecting the privacy and personal data of all users, including players from Manila 🇵🇭, Cebu 🇵🇭, Davao 🇵🇭, Quezon City 🇵🇭, Makati 🇵🇭, and across the Philippines. We process personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

By registering an account or using the w500 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

w500 collects the following categories of personal data from users of the Platform:

w500 does not collect sensitive personal information beyond what is strictly necessary for identity verification, regulatory compliance, and responsible gaming obligations. We do not collect biometric data, health records, or political affiliations.

w500 collects personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the Platform, including IP addresses, device identifiers, browser fingerprints, and session activity logs.
• Cookies and Tracking Technologies: First-party cookies and similar technologies used to maintain session state, remember preferences, and analyze Platform usage. See Section 9 for full details.
• Third-Party Verification Services: Identity and document verification data received from KYC service providers engaged by w500 to fulfill PAGCOR regulatory requirements.
• Payment Processors: Transaction confirmation data received from GCash, PayMaya/Maya, and Philippine banking partners when you make deposits or request withdrawals.
• Regulatory Sources: Information received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine regulatory bodies as required by law.

w500 processes your personal data for the following specific, legitimate purposes:

• Account Management: Creating, maintaining, and securing your w500 player account, including authentication and access control.
• KYC & Identity Verification: Verifying your identity and age (21+) as required by PAGCOR regulations and Philippine law before processing withdrawals or granting full account access.
• Payment Processing: Facilitating deposits and withdrawals via GCash, PayMaya/Maya, and Philippine bank transfers in Philippine Peso (PHP / ₱).
• Regulatory Compliance: Meeting obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws, including mandatory reporting to the AMLC.
• Responsible Gaming: Monitoring gaming behavior to identify potential problem gambling indicators, enforcing self-exclusion requests, and applying deposit or session limits set by you.
• Customer Support: Responding to your inquiries, resolving disputes, and providing technical assistance through live chat and email.
• Platform Improvement: Analyzing aggregated usage data to improve game performance, user experience, and Platform security.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time through your account settings.
• Fraud Prevention & Security: Detecting and preventing unauthorized access, fraudulent transactions, collusion, and other prohibited conduct as defined in the w500 Terms & Conditions.

Under the Philippine Data Privacy Act of 2012, w500 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the w500 Terms & Conditions, including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws.
• Legitimate Interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

w500 does not share your personal data with third parties except in the following circumstances:

• Payment Service Providers: GCash, PayMaya/Maya, and Philippine banking partners receive the minimum data necessary to process your financial transactions. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• KYC & Verification Partners: Identity verification service providers engaged by w500 to fulfill PAGCOR KYC requirements. These providers process data solely on w500's instructions and under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law, court order, or regulatory directive.
• Technology Service Providers: Cloud hosting, cybersecurity, and analytics providers who process data on w500's behalf under contractual data processing agreements that require them to maintain confidentiality and security standards equivalent to those in this Policy.
• Business Transfers: In the event of a merger, acquisition, or sale of w500's business assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

w500 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law:

• Active Account Data: Retained for the duration of your active w500 account relationship.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Financial Transaction Records: Retained for a minimum of five (5) years in compliance with AMLA reporting obligations.
• Gaming History: Retained for three (3) years following account closure for dispute resolution and regulatory audit purposes.
• Customer Support Records: Retained for two (2) years following resolution of the relevant inquiry or dispute.
• Marketing Consent Records: Retained until you withdraw consent, plus one (1) year thereafter as evidence of prior consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with w500's data disposal procedures. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes.

w500 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the w500 Platform is encrypted using Transport Layer Security (TLS 1.2 or higher).
• Password Security: Account passwords are stored using one-way cryptographic hashing. w500 staff cannot view your password in plain text.
• Two-Factor Authentication (2FA): w500 offers 2FA for all player accounts. We strongly recommend enabling this feature in your account security settings.
• Access Controls: Personal data is accessible only to w500 staff and contractors who require it to perform their job functions, under strict role-based access controls and confidentiality obligations.
• Infrastructure Security: w500's servers are hosted in secure data centers with physical access controls, intrusion detection systems, and regular security audits.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, w500 will notify the National Privacy Commission (NPC) within 72 hours of discovery and will notify affected players without undue delay, as required by the Data Privacy Act.

w500 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming limit configurations to provide a personalized experience.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the Platform — which games are most popular, how long sessions last, and where users encounter difficulties — to help w500 improve the service.
• Marketing Cookies: Used only with your explicit consent to deliver relevant promotional content within the w500 Platform. w500 does not use third-party advertising networks.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your w500 account. For analytics and marketing cookies, you may withdraw consent at any time through your w500 account privacy settings.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by w500:

To exercise any of these rights, contact our Data Protection Officer (DPO) as described in Section 14. w500 will respond to all verified privacy rights requests within thirty (30) days of receipt, as required by the Data Privacy Act.

The w500 Platform is strictly intended for individuals aged 21 years and above. w500 does not knowingly collect personal data from individuals under 21 years of age.

If w500 discovers or is notified that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the personal data in question, and return any deposited funds in accordance with applicable regulations.

Some of w500's technology service providers, including cloud infrastructure and KYC verification partners, may process personal data outside the Philippines. Where such cross-border transfers occur, w500 ensures that:

• The recipient country provides an adequate level of data protection as assessed by the National Privacy Commission, or
• Appropriate safeguards are in place, such as contractual clauses approved by the NPC, binding corporate rules, or other mechanisms recognized under the Data Privacy Act and its Implementing Rules.

w500 will not transfer your personal data to jurisdictions that do not provide adequate protection without your explicit consent or a lawful basis under the Data Privacy Act.

w500 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform features. When material changes are made, we will notify registered players via email or an in-platform notification at least 7 days before the changes take effect.

The "Last updated" date at the top of this page will always reflect the most recent revision. Your continued use of the w500 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you may request account closure in accordance with the w500 Terms & Conditions.

We encourage you to review this Policy periodically to stay informed about how w500 protects your personal data.

w500 has appointed a Data Protection Officer (DPO) as required by the Philippine Data Privacy Act. For all privacy-related inquiries, data subject rights requests, or complaints, please contact:

• Data Protection Officer: w500 DPO Office
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 through your w500 account dashboard — fastest response channel.
• Response Time: Privacy rights requests are acknowledged within 3 business days and resolved within 30 days as required by the Data Privacy Act.

Our support and privacy teams serve players across the Philippines, including Manila 🇵🇭, Cebu 🇵🇭, Davao 🇵🇭, and Quezon City 🇵🇭, with agents fluent in both English and Filipino.