phwinn Privacy Policy

1 Introduction

phwinn ("we," "us," "our," or "the Platform") operates the online gaming platform accessible at phwinn.app. We understand that when you share your personal information with us, you are placing trust in phwinn to handle that information responsibly, securely, and in accordance with the law.

This Privacy Policy ("Policy") describes how phwinn collects, uses, stores, shares, and protects personal data relating to individuals ("you," "your," or "Data Subject") who:

• Register for or hold a phwinn player account;
• Visit or browse the phwinn website at phwinn.app;
• Contact phwinn customer support;
• Participate in phwinn promotions, surveys, or other activities.

This Policy should be read alongside the phwinn Terms & Conditions and Responsible Gaming Policy. By accessing or using the phwinn platform, you acknowledge that you have read and understood this Privacy Policy.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, phwinn is the Personal Information Controller (PIC) in respect of the personal data it collects and processes in connection with the phwinn platform.

phwinn has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. Contact details for the DPO are provided in Section 15 of this Policy.

Where phwinn engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those parties act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to process data only on phwinn's instructions and in accordance with applicable law.

3 Data We Collect

phwinn collects the following categories of personal data, depending on how you interact with the platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Registered mobile number and email address;
• Residential address (province, city, barangay);
• Government-issued ID type and number (e.g., Philippine National ID, passport, driver's license).

3.2 Financial Data

• GCash or Maya account details (registered name and mobile number);
• Bank account details provided for withdrawal purposes (account name, account number, bank name);
• Debit card details (card number masked, expiry date, cardholder name);
• Transaction history including deposits, withdrawals, and wager records.

3.3 Gaming & Activity Data

• Game session logs, bet amounts, game outcomes, and win/loss records;
• Bonus and promotion usage history;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status);
• Customer support interaction records.

3.4 Technical & Device Data

• IP address and approximate geolocation (country and city level);
• Device type, operating system, and browser information;
• Cookie identifiers and session tokens;
• Login timestamps and access logs.

4 How We Collect Your Data

phwinn collects personal data through the following means:

4.1 Directly From You

• Registration: When you create a phwinn account, you provide identity and contact information;
• KYC Verification: When you submit identity documents to complete account verification;
• Deposits & Withdrawals: When you initiate financial transactions on the platform;
• Customer Support: When you contact phwinn via live chat, email, or other support channels;
• Promotions: When you participate in phwinn contests, surveys, or promotional activities.

4.2 Automatically

• Cookies and Tracking Technologies: phwinn uses cookies and similar technologies to collect technical and usage data when you browse the platform (see Section 8);
• Server Logs: Our servers automatically record IP addresses, access times, and pages visited;
• Game Engines: Game session data is automatically recorded by the game platform for fairness, security, and dispute resolution purposes.

4.3 From Third Parties

• Identity Verification Providers: phwinn may receive verification results from third-party KYC service providers;
• Payment Processors: Transaction confirmation data is received from GCash, Maya, and banking partners;
• Fraud Prevention Services: Risk scoring and fraud signals may be received from third-party security providers.

5 Legal Basis for Processing

phwinn processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

6 How We Use Your Data

phwinn uses the personal data it collects for the following specific purposes:

6.1 Platform Operations

• Creating and managing your phwinn player account;
• Verifying your identity and age (21+ requirement) in compliance with Philippine gaming regulations;
• Processing deposits and withdrawals in Philippine Peso (PHP);
• Providing access to phwinn games including slots, bingo, crash games, fishing games, and live casino;
• Administering bonuses, promotions, and loyalty rewards.

6.2 Legal & Regulatory Compliance

• Complying with anti-money laundering obligations under Republic Act No. 9160 and its amendments;
• Reporting to PAGCOR and other relevant Philippine regulatory authorities as required;
• Maintaining records required by law for the prescribed retention periods;
• Responding to lawful requests from law enforcement or government agencies.

6.3 Security & Fraud Prevention

• Detecting and preventing fraudulent activity, money laundering, and bonus abuse;
• Monitoring for unauthorized account access and suspicious login activity;
• Enforcing the phwinn one-account-per-player policy;
• Investigating and resolving disputes and complaints.

6.4 Responsible Gaming

• Monitoring gaming patterns to identify potential problem gambling behavior;
• Enforcing self-exclusion, deposit limits, and other responsible gaming tools set by the player;
• Complying with self-exclusion registers maintained by regulatory bodies.

6.5 Communications & Marketing

• Sending transactional communications (account confirmations, deposit receipts, withdrawal notifications);
• Sending promotional communications about phwinn offers and new games — only where you have provided explicit consent;
• Responding to customer support inquiries via live chat or email.

You may withdraw your consent to marketing communications at any time by updating your notification preferences in the phwinn account dashboard or by contacting support.

7 Data Sharing & Disclosure

phwinn does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

7.1 Service Providers (Personal Information Processors)

phwinn engages trusted third-party service providers who process data on our behalf under strict contractual obligations, including:

• Payment processors: GCash, Maya, and banking partners for transaction processing;
• KYC / identity verification providers: To verify government-issued IDs and confirm player eligibility;
• Game software providers: To deliver and audit game content and RNG outcomes;
• Cloud hosting and IT infrastructure providers: For secure data storage and platform operations;
• Customer support platform providers: To facilitate live chat and ticketing services.

7.2 Regulatory & Law Enforcement Authorities

phwinn may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other competent Philippine authorities where required by law, court order, or regulatory directive.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of phwinn's assets, personal data held by phwinn may be transferred to the acquiring entity. Players will be notified of any such transfer and the privacy practices of the successor entity prior to the transfer taking effect.

8 Cookies & Tracking Technologies

phwinn uses cookies and similar tracking technologies (such as web beacons and local storage) to enhance your experience on the platform, maintain session security, and gather analytics data.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming tool configurations, and display preferences.
• Analytics Cookies: Collect anonymized data about how players use the phwinn platform, which pages are visited most, and where errors occur. This data is used to improve the platform.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized login attempts.

8.2 Managing Cookies

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phwinn platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate securely.

phwinn does not use third-party advertising cookies or share cookie data with advertising networks.

9 Data Retention

phwinn retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, phwinn will securely delete or anonymize personal data in accordance with its data disposal procedures.

10 Data Security

phwinn implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL Encryption: All data in transit between your device and phwinn servers is encrypted using industry-standard Transport Layer Security (TLS) protocols;
• Encryption at Rest: Sensitive personal data stored on phwinn servers is encrypted at rest using AES-256 or equivalent standards;
• Access Controls: Access to personal data is restricted to authorized phwinn personnel on a strict need-to-know basis, enforced through role-based access controls;
• Multi-Factor Authentication: Administrative access to systems containing personal data requires multi-factor authentication;
• Regular Security Audits: phwinn conducts periodic security assessments and penetration testing of its platform infrastructure;
• Incident Response: phwinn maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, phwinn will notify the National Privacy Commission and affected players within the timeframes prescribed by law.

While phwinn takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phwinn account credentials and for notifying phwinn immediately if you suspect unauthorized access to your account.

11 Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phwinn. To exercise any of these rights, please contact the phwinn Data Protection Officer using the details in Section 15.

phwinn will respond to all data rights requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further fifteen (15) business days, with notice provided to you. If you are not satisfied with phwinn's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

12 Children's Privacy

The phwinn platform is strictly intended for individuals who are 21 years of age or older. phwinn does not knowingly collect personal data from individuals under the age of 21. The minimum age for online casino gaming in the Philippines is 21 years, and phwinn enforces this requirement through its registration and KYC verification processes.

If phwinn becomes aware that personal data has been collected from an individual under the age of 21, it will immediately close the associated account, refund any deposits, and securely delete all personal data relating to that individual. If you believe that a minor has registered on the phwinn platform, please contact our support team immediately.

13 Cross-Border Data Transfers

phwinn primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where phwinn uses internationally hosted cloud infrastructure or game software providers based abroad.

Where such cross-border transfers occur, phwinn ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act of 2012 and the relevant NPC issuances. These safeguards may include:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law;
• Transfers to countries or organizations that have been assessed as providing an adequate level of data protection;
• Binding corporate rules where the recipient is part of the same corporate group as phwinn.

phwinn will not transfer your personal data to a foreign country or international organization unless the transfer is authorized under the Data Privacy Act and its implementing rules.

14 Updates to This Privacy Policy

phwinn reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, phwinn will notify registered players via the email address or mobile number on file, or by displaying a prominent notice on the phwinn platform, at least fourteen (14) days before the changes take effect.

Your continued use of the phwinn platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated Policy, you must cease using the platform and may request account closure by contacting phwinn support.

We encourage you to review this Privacy Policy periodically to stay informed about how phwinn is protecting your personal data.

15 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phwinn, please contact our Data Protection Officer (DPO) through the following channels:

• DPO Email: [email protected]
• General Support Email: [email protected]
• Live Chat Support (24/7): Available directly on the phwinn platform

All privacy-related inquiries will be acknowledged within three (3) business days and resolved within fifteen (15) business days where possible.

If you are not satisfied with phwinn's response to your privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website.