phwin22 Privacy Policy

1. Introduction

phwin22 ("phwin22," "we," "us," or "our") is committed to protecting the privacy and personal data of all users ("you," "Player," or "User") who access and use the phwin22 online casino platform, website, and related services (collectively, the "Platform").

This Privacy Policy is issued in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). It applies to all personal information collected by phwin22 in connection with your use of the Platform, whether you are a registered player, a visitor, or a prospective user.

By registering an account or continuing to use the phwin22 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to close your account.

2. Personal Data We Collect

phwin22 collects the following categories of personal data from players and Platform visitors:

2.1 Identity & Contact Information

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Nationality and country of residence
• Philippine mobile number and email address
• Residential address (barangay, city/municipality, province)

2.2 Identity Verification Documents

• Copies of government-issued photo ID (e.g., Philippine passport, PhilSys National ID, SSS ID, UMID, driver's license, PRC ID, voter's ID)
• Proof of address documents (e.g., utility bill, bank statement, barangay certificate)
• Selfie or liveness verification images where required for KYC

2.3 Financial Information

• GCash or PayMaya / Maya account reference numbers (we do not store full wallet credentials)
• Bank account details for withdrawal processing (bank name, account name, account number)
• Transaction history including deposits, withdrawals, and bonus credits
• Source of funds declarations where required by AML regulations

2.4 Gaming & Behavioral Data

• Game play history, bet amounts, win/loss records, and session durations
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, self-exclusion status)
• Customer support interaction records and chat transcripts

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Cookies and session identifiers (see Section 9)
• Login timestamps and access logs

3. How We Collect Your Data

phwin22 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically: Through cookies, web beacons, and server logs when you access or interact with the phwin22 Platform.
• From third parties: From identity verification service providers, payment processors (e.g., GCash, Maya), fraud detection services, and regulatory bodies such as PAGCOR where required by law.

4. Purpose of Processing

phwin22 processes your personal data for the following specific, legitimate purposes:

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, phwin22 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the phwin22 Terms and Conditions, including account management and payment processing.
• Legal Obligation: Processing required to comply with Philippine laws and regulations, including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, and NPC directives.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights.
• Consent: Processing for direct marketing communications, where you have provided explicit, informed consent. You may withdraw this consent at any time.

6. Data Sharing & Disclosure

phwin22 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data only in the following circumstances:

• Service Providers: With trusted third-party vendors who assist in operating the phwin22 Platform, including KYC verification providers, payment processors, cloud hosting providers, and customer support platforms. These parties are bound by data processing agreements and may only use your data as instructed by phwin22.
• Game Providers: With licensed game software providers whose games are available on phwin22, to the extent necessary for game operation and dispute resolution. Only non-sensitive gameplay data is shared.
• Regulatory Authorities: With PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where required by law or court order.
• Fraud Prevention Networks: With industry fraud prevention databases to identify and prevent fraudulent activity across the online gaming sector.
• Business Transfers: In the event of a merger, acquisition, or sale of phwin22 assets, your data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

7. Data Retention

phwin22 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active phwin22 account relationship.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years following the date of the transaction, as required by PAGCOR and AMLA regulations.
• Customer Support Records: Retained for three (3) years following the resolution of the relevant inquiry or complaint.
• Marketing Consent Records: Retained until you withdraw consent, plus one (1) year for compliance documentation purposes.

Upon expiry of the applicable retention period, phwin22 will securely delete or anonymize your personal data in accordance with NPC-approved disposal procedures.

8. Data Security

phwin22 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the phwin22 Platform is encrypted using industry-standard SSL/TLS protocols — the same level of encryption used by Philippine banks.
• Encrypted Data Storage: Personal data stored on phwin22 servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized phwin22 personnel on a strict need-to-know basis. All staff with access to personal data undergo regular data privacy training.
• Two-Factor Authentication: phwin22 supports and encourages the use of two-factor authentication (2FA) on all player accounts to prevent unauthorized access.
• Regular Security Audits: phwin22 conducts periodic vulnerability assessments and penetration testing to identify and remediate security risks.
• Incident Response: In the event of a personal data breach, phwin22 will notify affected players and the National Privacy Commission within 72 hours of discovery, in accordance with NPC Circular 16-03.

9. Cookies & Tracking Technologies

phwin22 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that prevent fraudulent use. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming limit configurations.
• Analytics Cookies: Help us understand how players use the phwin22 Platform so we can improve performance and user experience. Data collected is aggregated and anonymized.
• Marketing Cookies: Used to deliver relevant promotional content to you based on your interests and gaming activity, where you have provided consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phwin22 Platform. For strictly necessary cookies, no opt-out is available as they are required for the Platform to operate securely.

10. Protection of Minors

phwin22 does not knowingly collect personal data from individuals under the age of 21. The phwin22 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations.

If phwin22 discovers or has reason to believe that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data, and report the matter to the appropriate regulatory authorities.

If you are a parent or guardian and believe that a minor in your care has registered on phwin22, please contact us immediately at [email protected] so we can take prompt action.

11. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phwin22:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy.
• Right to Access: You may request a copy of the personal data phwin22 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. You can update basic account information directly through your phwin22 account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under AMLA and PAGCOR regulations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe phwin22 has violated your data privacy rights. The NPC can be reached through its official channels.

To exercise any of the above rights, please submit a written request to our Data Protection Officer (DPO) using the contact details in Section 14. phwin22 will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

12. International Data Transfers

phwin22 primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game software vendors operating in other jurisdictions.

Where such transfers occur, phwin22 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under the Data Privacy Act of 2012.
• Transfers only to countries or organizations recognized by the NPC as providing adequate levels of data protection.
• Binding corporate rules where transfers occur within a corporate group.

13. Changes to This Privacy Policy

phwin22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, phwin22 will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect. Your continued use of the phwin22 Platform after the effective date of any revised Policy constitutes your acceptance of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how phwin22 protects your personal data.

14. Contact Us & Data Protection Officer

phwin22 has appointed a Data Protection Officer (DPO) in accordance with the Data Privacy Act of 2012 and NPC requirements. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our DPO:

For complaints that cannot be resolved directly with phwin22, you may contact the National Privacy Commission (NPC) of the Philippines through its official website and complaint channels.