phwinn Privacy Policy

1 Introduction

phwinn ("we," "us," or "our") is committed to protecting the privacy and personal data of all users ("you" or "your") who access and use the phwinn platform. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of your personal information in connection with your use of phwinn's online gaming and sports betting services.

This policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. Where applicable, phwinn also observes internationally recognized data protection principles.

phwinn acts as the Personal Information Controller in respect of the personal data you provide to us. This means we determine the purposes and means by which your personal data is processed. In certain circumstances, phwinn may engage third-party service providers who act as Personal Information Processors on our behalf, subject to strict contractual data protection obligations.

2 Personal Data We Collect

2.1 Information You Provide Directly

When you register for a phwinn account, verify your identity, make deposits or withdrawals, or contact our support team, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and government-issued ID details (e.g., PhilSys ID, passport, driver's license, UMID, or voter's ID);
• Contact Data: Email address, mobile number, and residential address (city/province, e.g., Manila, Cebu, Davao, Quezon City, or Makati);
• Financial Data: GCash or PayMaya account references, bank account details (BPI, BDO, Metrobank), and transaction history;
• Account Data: Username, encrypted password, account preferences, and communication settings;
• Support Data: Records of your communications with phwinn customer support, including chat logs and email correspondence.

2.2 Information Collected Automatically

When you access phwinn, we automatically collect certain technical and behavioral data, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Pages visited, time spent on each page, and navigation patterns;
• Game activity, betting history, session duration, and wagering patterns;
• Cookie identifiers and similar tracking technologies (see Section 6).

2.3 Information from Third Parties

phwinn may receive personal data about you from third-party sources, including identity verification service providers, payment processors, fraud prevention agencies, and, where permitted by law, publicly available sources. This information is used to supplement our records and fulfill our legal and regulatory obligations.

3 How We Use Your Personal Data

phwinn uses your personal data only for legitimate, specified purposes. The primary purposes for which we process your data include:

3.1 Account Management and Service Delivery

To create and maintain your phwinn account, process deposits and withdrawals, provide access to games and betting markets, and deliver customer support services.

3.2 Identity Verification and KYC

To verify your identity and age (21+) in compliance with applicable gaming regulations and anti-money laundering (AML) requirements. phwinn is required by law to conduct Know Your Customer (KYC) checks on all registered users.

3.3 Legal and Regulatory Compliance

To comply with applicable Philippine laws and regulations, including the Data Privacy Act of 2012, Anti-Money Laundering Act (AMLA), and gaming regulations. This includes reporting obligations to relevant Philippine authorities where required by law.

3.4 Fraud Prevention and Security

To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal conduct on the phwinn platform.

3.5 Responsible Gaming

To monitor gaming activity and identify patterns that may indicate problem gambling behavior, and to administer responsible gaming tools such as deposit limits, session reminders, and self-exclusion.

3.6 Marketing and Communications

Where you have provided your consent, to send you promotional offers, bonus notifications, and updates about phwinn services. You may withdraw your consent to marketing communications at any time by contacting phwinn support.

3.7 Platform Improvement

To analyze usage patterns, improve the phwinn platform, develop new features, and enhance the overall user experience for Filipino players.

4 Legal Basis for Processing

Under the Data Privacy Act of 2012, phwinn processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to provide phwinn's gaming and betting services;
• Legal Obligation: Processing required to comply with applicable Philippine laws, including AML regulations, gaming regulations, and tax obligations;
• Legitimate Interests: Processing necessary for phwinn's legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing and Disclosure

5.1 Third-Party Service Providers

phwinn may share your personal data with carefully selected third-party service providers who assist us in operating the platform. These include identity verification providers, payment processors (including GCash, PayMaya, and banking partners), IT infrastructure providers, and customer support platforms. All third-party processors are bound by strict contractual data protection obligations and may only process your data on phwinn's instructions.

5.2 Legal and Regulatory Authorities

phwinn may disclose your personal data to Philippine government authorities, law enforcement agencies, or regulatory bodies where required or permitted by law — for example, in response to a court order, subpoena, or regulatory investigation.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of phwinn's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. You will be notified of any such transfer.

5.4 No Sale of Personal Data

6 Cookies & Tracking Technologies

phwinn uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and analyze usage patterns. The types of cookies we use include:

• Essential Cookies: Required for the platform to function correctly, including session management and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences and settings, such as language and display options, to personalize your phwinn experience.
• Analytics Cookies: Collect anonymized data about how users interact with phwinn, helping us identify areas for improvement. This data does not identify you personally.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access, and other security threats.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the phwinn platform.

7 Data Retention

phwinn retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory requirements;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• KYC Documents: Retained for the duration of your account and for five (5) years following account closure;
• Support Communications: Retained for up to three (3) years from the date of the communication;
• Marketing Consent Records: Retained until you withdraw consent, plus a reasonable period thereafter for compliance purposes.

When personal data is no longer required, phwinn will securely delete or anonymize it in accordance with our data disposal procedures.

8 Data Security

phwinn implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and phwinn's servers;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Multi-factor authentication options for user accounts;
• Regular security audits and vulnerability assessments;
• Strict access controls limiting employee access to personal data on a need-to-know basis;
• Secure, access-controlled data centers with physical security measures.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phwinn will notify the National Privacy Commission and affected users in accordance with the requirements of the Data Privacy Act of 2012 and NPC regulations.

9 Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phwinn:

10 Children's Privacy

phwinn's services are strictly intended for individuals who are 21 years of age or older. phwinn does not knowingly collect personal data from persons under the age of 21. If phwinn becomes aware that personal data has been collected from a minor, the relevant account will be suspended immediately and the data will be deleted as soon as practicable.

If you are a parent or guardian and believe that your child has registered with phwinn or provided personal data to us, please contact our support team immediately at [email protected] so that we can take appropriate action.

11 Updates to This Privacy Policy

phwinn reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this policy, we will notify registered users via email or through a prominent notice on the phwinn platform prior to the changes taking effect.

The "Last Updated" date at the top of this policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how phwinn protects your personal data. Your continued use of phwinn following the posting of any changes constitutes your acceptance of the updated policy.

12 Contact & Data Privacy Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or phwinn's data processing practices, please contact our Data Privacy Officer:

If you are not satisfied with phwinn's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012.