phwins Privacy
Policy

Section 01

Introduction

This Privacy Policy ("Policy") describes how phwins ("phwins," "we," "us," or "our") collects, uses, stores, protects, and discloses your personal information when you access and use the phwins platform, including the website, mobile interface, account registration system, games, and all related services (collectively, the "Services").

phwins is committed to protecting your privacy and handling your personal data in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its implementing rules and regulations, and all applicable guidance issued by the National Privacy Commission (NPC) of the Philippines.

By registering for a phwins account, making a deposit, or otherwise using the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any part of this Policy, you must immediately cease using the phwins platform and contact us to close your account.

Section 02

Information We Collect

phwins collects several categories of personal information necessary to provide the Services, comply with legal and regulatory obligations, and protect the security and integrity of the platform. The information we collect includes:

Registration & Account Information: When you register for a phwins account, we collect your full legal name, date of birth, residential address, Philippine mobile number, email address, username, and password. We may also request a copy of a government-issued ID (such as a Philippine passport, driver's license, or UMID card) and proof of address (such as a utility bill or bank statement) as part of our Know Your Customer (KYC) verification process.

Financial & Transaction Information: We collect information about deposits, withdrawals, wagers, winnings, and other financial transactions processed through your phwins account. This includes payment method details (GCash mobile number, PayMaya account name, bank account numbers for BPI, BDO, and Metrobank), transaction amounts, transaction dates, and transaction status.

Gameplay Data: We collect data about your interactions with phwins games, including game selections, bet amounts, game outcomes, session duration, and other gameplay metrics. This data is used to operate the games, detect fraud, and comply with PAGCOR reporting requirements.

Technical & Device Information: We automatically collect certain technical information when you access phwins, including your IP address, device type (mobile or desktop), operating system, browser type and version, screen resolution, and general geographic location derived from your IP address. We also collect session data such as login timestamps, pages visited, and actions taken on the platform.

Communications: If you contact phwins support via live chat, email, or other communication channels, we collect and store the content of those communications, along with associated metadata such as timestamps and your account details at the time of contact.

Cookies & Tracking Technologies: phwins uses cookies, web beacons, and similar tracking technologies to enhance your experience on the platform. For more information, see Section 04 (Cookies & Tracking) below.

Section 03

How We Use Your Data

phwins uses your personal information for the following lawful purposes:

• Account Operation: To create, maintain, and secure your phwins account; to verify your identity; and to enable you to deposit, play, and withdraw funds.
• Transaction Processing: To process deposits, withdrawals, and wagers; to manage your account balance; and to generate transaction history records accessible from your account dashboard.
• Legal & Regulatory Compliance: To comply with PAGCOR licensing requirements, anti-money laundering obligations under Republic Act No. 9160 (as amended), age verification mandates, responsible gaming regulations, and tax reporting requirements under Philippine law.
• Fraud Prevention & Security: To detect and prevent fraud, collusion, money laundering, bonus abuse, and other prohibited conduct; to protect the security and integrity of the phwins platform; and to investigate disputes and violations of the Terms & Conditions.
• Customer Support: To respond to your inquiries, resolve account issues, and provide assistance with deposits, withdrawals, and gameplay questions.
• Marketing & Promotions (With Consent): To send you promotional emails, SMS messages, and platform notifications about bonuses, tournaments, and special offers — but only if you have explicitly opted in to receive marketing communications. You may opt out at any time.
• Platform Improvement: To analyze how players use the phwins platform, to identify technical issues, and to improve the user experience, game offerings, and platform features over time.
• Responsible Gaming: To monitor gameplay patterns, detect signs of problem gambling, and implement responsible gaming interventions such as deposit limits, session time limits, and self-exclusion when appropriate.

Section 04

Cookies & Tracking Technologies

phwins uses cookies — small text files stored on your device — and similar tracking technologies such as web beacons and local storage to improve your experience and enable core platform functionality. The types of cookies we use include:

• Strictly Necessary Cookies: These cookies are essential for the phwins platform to function correctly. They enable core features such as account login session management, game loading, and secure transaction processing. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and previously visited game categories — to provide a more personalized experience during your sessions on phwins.
• Analytics Cookies: phwins uses analytics cookies to collect aggregated, anonymized data about how players navigate and interact with the platform. This information helps us identify technical issues, measure feature performance, and make informed decisions about platform improvements. Analytics data is not used to identify individual players.
• Security Cookies: These cookies support fraud detection and security monitoring. They help phwins identify unusual login patterns, suspicious transaction behavior, and potential account compromise attempts.

Most web browsers allow you to manage cookie preferences through your browser settings. You may configure your browser to refuse all cookies or to alert you when cookies are being sent. However, disabling strictly necessary cookies will impair or completely prevent your ability to use the phwins platform.

Section 05

Data Sharing & Disclosure

phwins does not sell, rent, or trade your personal information to third parties for commercial purposes. Your data may be shared in the following limited and lawful circumstances:

• Payment Processors: When you deposit or withdraw funds, we share the minimum necessary financial information with your selected payment provider — GCash, PayMaya, BPI, BDO, or Metrobank — to process the transaction. These providers are independently bound by their own privacy policies and applicable Philippine financial regulations.
• Regulatory Authorities: phwins is legally required to share certain player data with PAGCOR as part of its licensing obligations, with the Anti-Money Laundering Council (AMLC) where suspicious transactions are identified, and with other Philippine government authorities where required by law or valid legal process including court orders and subpoenas.
• Game Providers: Some phwins games are operated by certified third-party game providers. These providers may receive anonymized gameplay data necessary to operate and audit their games. Identifying personal information such as your name and contact details is not shared with game providers unless required for a specific dispute resolution process.
• Service Providers: phwins engages third-party service providers for functions such as customer support software, email delivery, and security monitoring. These providers are contractually obligated to use your data only for the specific services they provide to phwins and are prohibited from using it for any other purpose.
• Business Transfers: In the event of a merger, acquisition, or sale of phwins' business assets, player data may be transferred to the acquiring entity. Any such transfer will be conducted in compliance with the Data Privacy Act of 2012 and you will be notified of any material change in data controller through the contact details registered to your account.

In all cases where phwins shares your data with third parties, we require that those parties maintain appropriate technical and organizational security measures and use your data only for the purposes for which it was shared.

Section 06

Data Security

phwins implements a comprehensive set of technical and organizational security measures designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL Encryption: All data transmitted between your device and the phwins platform is encrypted using industry-standard Transport Layer Security (TLS) protocols, ensuring that your personal and financial data cannot be intercepted in transit.
• Secure Data Storage: Personal data is stored on dedicated, hardened servers with restricted physical and logical access. Data at rest is encrypted, and database access is controlled through role-based access management with detailed audit logging.
• Two-Factor Authentication: phwins offers two-factor authentication (2FA) for all accounts. Enabling 2FA significantly reduces the risk of unauthorized account access even if your password is compromised.
• Continuous Security Monitoring: phwins employs real-time security monitoring tools that detect and respond to suspicious access patterns, unusual transaction behavior, and potential intrusion attempts around the clock.
• Staff Access Controls: Access to player personal data is strictly limited to phwins personnel who require it to perform their specific role. All staff with data access are trained on data protection obligations and are bound by confidentiality agreements.

While phwins takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, phwins will notify affected players and the National Privacy Commission of the Philippines in accordance with the DPA's breach notification requirements.

Section 07

Data Retention

phwins retains your personal information for as long as your account remains active and for as long as necessary to fulfill the purposes described in this Privacy Policy. Specific retention periods are determined by the following factors:

Active Accounts: While your phwins account is active, we retain all account information, transaction records, and gameplay data necessary to operate your account and comply with regulatory requirements.

Closed Accounts: Following account closure, phwins retains transaction records, KYC documentation, and correspondence for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR licensing requirements and anti-money laundering regulations under Philippine law.

Legal Proceedings: Where data is relevant to an ongoing investigation, dispute, or legal proceeding, we may retain it beyond standard retention periods until the matter is fully resolved.

Once retention periods have expired and no legal obligation requires continued storage, phwins will securely delete or anonymize your personal information so that it can no longer be associated with your identity.

Section 08

Your Privacy Rights

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by phwins:

• Right to Be Informed: You have the right to know what personal data phwins collects about you, how it is used, and with whom it is shared — which is the purpose of this Privacy Policy.
• Right to Access: You may request a copy of the personal data phwins holds about you by contacting our support team. We will respond to verified access requests within thirty (30) days.
• Right to Rectification: If you believe that any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You may update many details directly through your account settings.
• Right to Erasure: In certain circumstances — particularly following account closure and expiry of applicable retention periods — you may request deletion of your personal data. Note that this right is subject to our legal and regulatory retention obligations, which may override an erasure request.
• Right to Object: You have the right to object to the processing of your personal data for marketing purposes at any time. You may opt out of marketing communications through your account settings or by emailing our support team.
• Right to Data Portability: You may request a copy of the personal data you have provided to phwins in a structured, commonly used, and machine-readable format, to the extent technically practicable.
• Right to Lodge a Complaint: If you believe phwins has violated your privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through its official complaint channels.

To exercise any of the above rights, please contact the phwins Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." We will verify your identity before processing any request and will respond within the timeframes required by applicable law.

Section 09

Children's Privacy

phwins is strictly an adult platform. The minimum age requirement to register, deposit, and play on phwins is 21 years of age, in compliance with PAGCOR regulations and the laws of the Republic of the Philippines governing online gambling. phwins does not knowingly collect personal information from any individual under the age of 21.

If phwins becomes aware that a registered account belongs to an individual under 21 years of age, the account will be immediately suspended, all balances will be frozen pending investigation, and the matter will be reported to PAGCOR. Any deposits made by an underage account holder will be refunded to the originating payment method following the completion of the investigation, net of any applicable processing fees.

If you are a parent or guardian and believe that a minor has registered on phwins using false age information, please contact our support team immediately at [email protected].

Section 10

International Data Transfers

phwins is a platform built for and primarily serving players in the Philippines. Your personal data is primarily stored and processed on servers located within or serving the Philippine market. In some cases, certain service providers engaged by phwins — such as game studio providers or technical infrastructure partners — may be located outside the Philippines and may process your data in their respective jurisdictions.

Where personal data is transferred outside the Philippines, phwins ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012. These safeguards include data processing agreements with receiving parties that impose data protection obligations equivalent to those applicable in the Philippines, and where applicable, reliance on NPC-approved transfer mechanisms.

phwins will not transfer your personal data to any jurisdiction or third party that does not provide an adequate level of protection for your privacy rights without your explicit consent or a lawful basis under the DPA.

Section 11

Changes to This Privacy Policy

phwins reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The revised Policy will be published on this page with an updated "Last Updated" date.

Where changes to this Policy are material — meaning they significantly affect your rights or the way we use your data — phwins will notify registered players by posting a prominent notice on the platform or by sending a notification to the email address or mobile number registered to your account. We encourage you to review this page periodically to stay informed about how phwins protects your data.

Your continued use of the phwins platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the platform and may request account closure by contacting our support team.

Section 12

Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how phwins has handled your personal information, please contact our Data Protection Officer using the details below. Our support team is available 24 hours a day, 7 days a week and serves players across Metro Manila, Cebu, Davao, and all of the Philippines.

Data Protection Officer — phwins
Email: [email protected]
Subject Line: Privacy Rights Request
Live Chat: Available 24/7 on the phwins platform
Regulated by: PAGCOR (Philippine Amusement and Gaming Corporation)

If you are not satisfied with phwins' response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the independent government body responsible for enforcing the Data Privacy Act of 2012 and protecting the privacy rights of Filipino citizens.