www.phwin Privacy Policy

www.phwin ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of every Filipino player who accesses or uses our online casino platform at wwwphwin.vip. This Privacy Policy ("Policy") has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.

This Policy applies to all personal data collected by www.phwin through our website, mobile interface, customer support channels, and any other touchpoints through which you interact with our platform. It covers players based across the Philippines — including Metro Manila, Cebu, Davao, Quezon City, Makati, and all other regions — as well as any individual whose personal data is processed by www.phwin in connection with the provision of our services.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated herein by reference. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

www.phwin collects only the personal data that is necessary to provide our services, comply with legal obligations, and maintain the security and integrity of our platform. The categories of personal data we collect include:

www.phwin collects personal data through the following means:

• Direct Collection: Information you provide when registering your www.phwin account, completing KYC verification, submitting a withdrawal request, contacting support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the www.phwin platform, including through cookies, web beacons, log files, and similar tracking technologies.
• Third-Party Sources: Identity and fraud-screening data received from licensed KYC verification providers, payment processors (GCash, Maya, Philippine banks), and regulatory databases where permitted by law.
• Publicly Available Sources: Information from public records or government databases used solely for identity verification and AML compliance purposes.

www.phwin processes your personal data for the following specific, legitimate purposes:

• Creating and managing your www.phwin player account, including login authentication and account security.
• Verifying your identity and age (21+) in compliance with PAGCOR guidelines and Philippine gaming regulations.
• Processing deposits and withdrawals via GCash, Maya, bank transfer, and debit card.
• Complying with Anti-Money Laundering (AML) obligations under the Philippine AMLA and its amendments.
• Detecting, investigating, and preventing fraud, cheating, collusion, and other prohibited conduct on the platform.
• Providing customer support and resolving disputes or complaints.
• Administering bonuses, promotions, and loyalty programs.
• Monitoring gaming activity for responsible gaming purposes, including identifying at-risk players and enforcing self-exclusion requests.
• Sending transactional communications (account alerts, withdrawal confirmations, security notifications).
• Sending marketing communications where you have provided explicit consent, and honoring opt-out requests promptly.
• Improving the www.phwin platform through analytics, A/B testing, and user experience research.
• Complying with all applicable Philippine laws, regulations, and lawful orders from competent authorities.

Under the Philippine Data Privacy Act of 2012, www.phwin processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you accepted upon registration — including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including AML regulations, PAGCOR licensing requirements, and NPC directives.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

www.phwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data only in the following limited circumstances:

• Payment Processors: GCash, PayMaya / Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) — solely to process your financial transactions.
• KYC & Identity Verification Providers: Licensed third-party providers engaged to verify your identity, age, and document authenticity in compliance with Philippine regulations.
• Fraud Prevention & Security Partners: Specialist providers engaged to detect and prevent fraud, money laundering, and unauthorized access to the platform.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or lawful order.
• Legal & Professional Advisors: Lawyers, auditors, and compliance consultants engaged by www.phwin, subject to strict confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of www.phwin's business, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

www.phwin retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, www.phwin will securely delete or anonymize your personal data in accordance with NPC-approved disposal procedures.

www.phwin implements a comprehensive set of technical, organizational, and physical security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the www.phwin platform is encrypted using industry-standard TLS protocols.
• Data Encryption at Rest: Sensitive personal data stored in our databases is encrypted using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorized www.phwin personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Regular Security Audits: www.phwin conducts periodic penetration testing, vulnerability assessments, and third-party security audits of our platform infrastructure.
• Incident Response Plan: www.phwin maintains a documented data breach response plan. In the event of a personal data breach that poses a real risk to your rights and freedoms, we will notify the NPC within 72 hours and affected players without undue delay, as required by RA 10173.
• Staff Training: All www.phwin personnel with access to personal data receive regular data privacy and security training.

www.phwin uses cookies and similar tracking technologies to operate and improve our platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use our services.

• Strictly Necessary Cookies: Essential for the platform to function — including session management, login authentication, and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game lobby layout, and responsible gaming limits you have set.
• Analytics Cookies: Help us understand how players navigate the www.phwin platform so we can improve performance and user experience. Used only in aggregated, anonymized form.
• Marketing Cookies: Used to deliver relevant promotional content where you have consented. You may withdraw consent at any time via your account settings.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair the functionality of the www.phwin platform.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by www.phwin. To exercise any of these rights, please contact our Data Protection Officer (DPO) using the details in Section 13.

The www.phwin platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. www.phwin does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data, and return any deposits in accordance with applicable law.

If you are a parent or guardian and believe that a minor has registered on www.phwin, please contact our support team immediately so that we can take appropriate action.

www.phwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, we will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Your continued use of the www.phwin platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

www.phwin has appointed a Data Protection Officer (DPO) in accordance with the requirements of RA 10173. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us through the following channels:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 on the www.phwin platform
• Response Time: We aim to respond to all data privacy requests within 15 business days, as required by NPC regulations.