phwinph Privacy Policy

1. Introduction

phwinph is committed to protecting the privacy and personal data of every Filipino player who uses our platform. We understand that trust is the foundation of any good relationship — and that trust starts with being transparent about how we handle your information.

This Policy has been prepared in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It also reflects applicable international best practices for data protection in the online gaming industry.

phwinph acts as the Personal Information Controller (PIC) in respect of the personal data it collects from players. Where phwinph engages third-party service providers to process data on its behalf, those providers act as Personal Information Processors (PIPs) and are bound by data processing agreements consistent with RA 10173.

2. Personal Data We Collect

phwinph collects the following categories of personal data:

Category	Examples	Purpose
Identity Data	Full name, date of birth, nationality, government ID number	Account registration, KYC/AML verification, age verification (21+)
Contact Data	Email address, mobile number, residential address	Account communications, support, regulatory notices
Financial Data	GCash number, Maya account, bank account details, transaction history	Deposit and withdrawal processing, AML compliance
Technical Data	IP address, device type, browser, operating system, session logs	Platform security, fraud detection, service optimization
Usage Data	Games played, wager amounts, session duration, bonus usage	Responsible gaming monitoring, personalization, analytics
Communications Data	Live chat transcripts, support emails, feedback submissions	Customer support, dispute resolution, quality assurance

phwinph does not collect sensitive personal information (as defined under RA 10173) beyond what is strictly required for identity verification and AML compliance. We do not collect biometric data, health information, or political affiliations.

3. How We Collect Your Data

phwinph collects personal data through the following means:

• Direct collection: Information you provide when registering your phwinph account, completing KYC verification, making deposits or withdrawals, or contacting our support team.
• Automated collection: Technical and usage data collected automatically when you access phwinph.org, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from licensed KYC/AML service providers; payment data from GCash, Maya, and Philippine banking partners; fraud-prevention signals from security service providers.

4. Legal Basis for Processing

phwinph processes your personal data on the following legal bases under RA 10173:

• Contractual necessity: Processing required to perform our obligations under the phwinph Terms & Conditions, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with Philippine law, including the Anti-Money Laundering Act (AMLA), PAGCOR regulations, and NPC requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit, informed consent. You may withdraw consent at any time.

5. How We Use Your Personal Data

phwinph uses your personal data for the following purposes:

• To create, verify, and manage your phwinph account.
• To process deposits and withdrawals in Philippine Peso (PHP) via GCash, Maya, and Philippine bank transfer.
• To verify your identity and age (21+) in compliance with PAGCOR and AMLA requirements.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited conduct.
• To monitor your gaming activity for responsible gaming purposes, including identifying signs of problem gambling.
• To communicate with you about your account, transactions, promotions, and platform updates.
• To improve the phwinph platform, personalize your experience, and conduct internal analytics.
• To comply with legal and regulatory obligations, including responding to lawful requests from Philippine authorities.

phwinph will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate legal basis.

6. Sharing Your Personal Data

phwinph does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, Maya, and Philippine banking partners, to process your deposits and withdrawals.
• KYC/AML providers: Licensed identity verification and anti-money laundering service providers engaged to fulfil our regulatory obligations.
• IT and security providers: Cloud hosting, cybersecurity, and fraud-detection service providers who process data on our behalf as Personal Information Processors under binding agreements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants, where necessary for legal compliance or dispute resolution.

All third-party processors engaged by phwinph are contractually required to process personal data only on phwinph's documented instructions, to implement appropriate security measures, and to comply with RA 10173.

7. Cookies and Tracking Technologies

phwinph uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyze usage patterns. The types of cookies we use include:

• Strictly necessary cookies: Required for the platform to function. These cannot be disabled. They include session authentication tokens and security cookies.
• Functional cookies: Remember your language preference, display settings, and responsible gaming tool configurations.
• Analytics cookies: Collect aggregated, anonymized data about how players use phwinph, helping us improve the platform. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from accessing certain features of phwinph. Disabling analytics cookies will not affect your ability to play.

8. Data Retention

phwinph retains personal data for the following periods, after which data is securely deleted or anonymized:

• Account and identity data: For the duration of your account plus 5 years after closure, as required by AMLA and PAGCOR regulations.
• Financial transaction records: 5 years from the date of the transaction, in compliance with AMLA record-keeping requirements.
• Communications and support records: 2 years from the date of the communication.
• Technical and usage logs: 12 months from collection, unless retained longer for active fraud investigations.

Where phwinph is required by law to retain data for a longer period, the statutory retention period will apply. phwinph will not retain personal data beyond what is necessary for the stated purposes.

9. Data Security

phwinph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS 1.2/1.3 encryption for all data in transit between your device and phwinph servers.
• AES-256 encryption for sensitive data at rest, including financial records and identity documents.
• Multi-factor authentication (MFA) for phwinph staff accessing personal data systems.
• Regular penetration testing and vulnerability assessments by independent security firms.
• Role-based access controls ensuring that only authorized personnel can access personal data, on a strict need-to-know basis.
• A documented data breach response procedure, including NPC notification within 72 hours of discovering a breach that poses a real risk to data subjects.

While phwinph takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your phwinph login credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by phwinph:

To exercise any of these rights, contact the phwinph Data Protection Officer (DPO) at [email protected]. phwinph will respond to verified data subject requests within 15 business days as required by NPC regulations. We may request proof of identity before processing your request.

If you are not satisfied with phwinph's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11. Children and Minors

phwinph is strictly an adult platform. We do not knowingly collect personal data from individuals under 21 years of age. The minimum age to register and use phwinph is 21 years, consistent with Philippine gaming regulations.

If phwinph discovers that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data, and report the matter to the relevant regulatory authority where required. If you believe a minor has registered on phwinph, please contact our support team immediately.

12. Cross-Border Data Transfers

phwinph primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers located outside the Philippines — for example, cloud infrastructure providers or international KYC partners — phwinph ensures that such transfers are subject to appropriate safeguards consistent with RA 10173, including contractual clauses approved by the NPC or equivalent data protection standards.

phwinph will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

13. Changes to This Privacy Policy

phwinph may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify registered players by email or through an in-platform notification at least 7 days before the changes take effect.

The effective date of the current version of this Policy is stated at the top of this page. Your continued use of phwinph after the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically.

14. Contact and Data Protection Officer

phwinph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data, please contact:

• Data Protection Officer, phwinph
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 on the phwinph platform after phwinph Login

For general inquiries unrelated to data privacy, please use the 24/7 live chat on the phwinph platform. Please do not send sensitive account or financial information via email.