Privacy Policy

1 Introduction

phwinn ("we", "us", "our") operates the online gaming platform at https://phwinn.cam (the "Platform"). We are committed to protecting the privacy and personal data of all users who access and use our services.

This Privacy Policy describes how phwinn collects, uses, discloses, stores, and protects the personal information of players registered on the Platform in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), as well as regulations issued by the National Privacy Commission ("NPC"), the Philippine Amusement and Gaming Corporation ("PAGCOR"), and applicable anti-money laundering laws.

This Privacy Policy should be read in conjunction with phwinn's Terms & Conditions. Together, these documents govern your relationship with phwinn and your use of the Platform.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, phwinn acts as the "Personal Information Controller" responsible for the collection, processing, and protection of your personal data.

phwinn has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with data protection laws and handling data subject requests. You may contact our DPO at any time using the contact details provided at the end of this Privacy Policy.

3 Data We Collect

phwinn collects and processes various categories of personal data necessary to provide gaming services, comply with legal obligations, prevent fraud, and improve user experience. The types of data we collect include:

3.1 Registration and Account Information

• Full name (as it appears on your government-issued identification)
• Date of birth (to verify you are at least 21 years old)
• Gender
• Email address
• Mobile phone number
• Residential address
• Username and password (passwords are stored in encrypted form)
• Security questions and answers

3.2 Know Your Customer (KYC) and Verification Data

• Government-issued identification documents (passport, SSS ID, UMID, Voter's ID, PhilSys National ID, driver's license)
• Proof of address documents (utility bills, bank statements)
• Selfie photographs for identity verification
• Proof of payment method ownership (screenshots, bank statements, e-wallet confirmation)
• Source of funds documentation where required under AML regulations

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction history
• Payment method details (last four digits of bank account, e-wallet account name, cryptocurrency wallet addresses)
• Betting history, game selections, wagers placed, and winnings
• Bonus claims, promotional participation, and wagering progress

3.4 Technical and Usage Data

• IP address and geolocation data
• Device information (device type, operating system, browser type and version)
• Session duration, pages visited, and click patterns
• Login timestamps and account activity logs
• Cookies and similar tracking technologies (see Section 11)

3.5 Communications

• Customer support chat transcripts, emails, and phone call recordings
• Marketing preferences and consent records
• Feedback, survey responses, and complaint records

4 How We Collect Your Data

phwinn collects your personal data through the following methods:

• Directly from you: When you register an account, complete KYC verification, make deposits or withdrawals, place bets, contact customer support, or participate in promotions.
• Automatically: Through cookies, web beacons, and server logs that record your interactions with the Platform, including IP address, browser type, and usage patterns.
• From third parties: From payment processors (GCash, Maya, BPI, BDO, etc.) to verify transactions; from identity verification service providers; from fraud prevention and anti-money laundering screening databases; and from marketing partners where you have provided consent.
• From public sources: From publicly available databases and regulatory exclusion lists to comply with responsible gaming and AML obligations.

5 How We Use Your Data

phwinn processes your personal data for the following purposes:

5.1 Account Management and Service Delivery

• To create and maintain your phwinn account
• To verify your identity, age, and eligibility to use the Platform
• To process deposits, withdrawals, and other financial transactions
• To provide customer support and respond to your inquiries
• To manage bonuses, promotions, and loyalty rewards

5.2 Legal and Regulatory Compliance

• To comply with PAGCOR licensing requirements and reporting obligations
• To comply with Philippine Anti-Money Laundering Act (AMLA) requirements, including transaction monitoring and suspicious activity reporting
• To enforce age restrictions (21+ requirement) and prevent underage gambling
• To respond to lawful requests from law enforcement, regulators, and courts
• To maintain records as required by Philippine gaming and tax laws

5.3 Fraud Prevention and Security

• To detect, prevent, and investigate fraud, money laundering, collusion, and other prohibited conduct
• To monitor account activity for signs of bonus abuse, multi-accounting, or other violations of our Terms & Conditions
• To protect the security and integrity of the Platform and prevent unauthorized access

5.4 Marketing and Communication (With Your Consent)

• To send promotional emails, SMS messages, and push notifications about new games, bonuses, and special offers (only if you have opted in)
• To personalize your gaming experience based on your preferences and play history
• To conduct surveys and gather feedback on our services

5.5 Analytics and Improvement

• To analyze usage patterns and improve the functionality, design, and user experience of the Platform
• To develop new features, games, and services
• To monitor platform performance and troubleshoot technical issues

6 Legal Basis for Processing

Under the Philippine Data Privacy Act, phwinn processes your personal data on the following legal bases:

• Consent: Where you have explicitly consented to the processing, such as when you agree to receive marketing communications or consent to data collection during account registration.
• Contractual necessity: To perform our obligations under the Terms & Conditions and provide you with gaming services, process transactions, and manage your account.
• Legal obligation: To comply with laws and regulations including PAGCOR licensing requirements, AML laws, tax reporting obligations, and court orders.
• Legitimate interests: For fraud prevention, security, analytics, and platform improvement, provided these interests are not overridden by your fundamental rights and freedoms.

7 Data Sharing and Disclosure

phwinn does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, we may share your data with the following categories of recipients in limited circumstances:

7.1 Service Providers

We share data with trusted third-party service providers who perform functions on our behalf, including:

• Payment processors (GCash, Maya, BPI, BDO, Metrobank, UnionBank, etc.)
• Identity verification and KYC service providers
• Cloud hosting and data storage providers
• Customer support platforms and live chat providers
• Marketing and email service providers (only if you have opted in to marketing)
• Analytics and platform monitoring tools

All service providers are bound by strict data protection agreements and are permitted to use your data only for the specific services they provide to phwinn.

7.2 Regulatory Authorities

We disclose data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other Philippine regulatory bodies as required by law.

7.3 Law Enforcement and Legal Proceedings

We may disclose your data in response to lawful requests from law enforcement agencies, courts, or other government authorities, or where necessary to protect phwinn's legal rights, property, or safety, or that of our users or the public.

7.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the successor entity, subject to the same privacy protections outlined in this Privacy Policy.

8 Data Retention

phwinn retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations.

• Active accounts: Data is retained for the duration of your account's active status.
• Closed accounts: After account closure, certain data (KYC documents, transaction history, and AML records) is retained for a minimum of five (5) years as required by PAGCOR and AMLA regulations, or longer if required by ongoing legal proceedings or regulatory investigations.
• Marketing data: If you opt out of marketing communications, we will retain a record of your opt-out preference indefinitely to ensure we do not contact you again.

Data that is no longer required for legal, regulatory, or business purposes is securely deleted or anonymized in accordance with phwinn's data retention and disposal policies.

9 Security Measures

phwinn employs industry-standard technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL encryption: All data transmitted between your device and phwinn's servers is encrypted using Secure Sockets Layer (SSL) technology.
• Encrypted data storage: Sensitive data, including passwords and payment information, is stored in encrypted form on secure servers.
• Access controls: Access to personal data is restricted to authorized phwinn personnel only, on a need-to-know basis, and all access is logged and monitored.
• Two-factor authentication (2FA): Players may enable 2FA on their accounts for added security.
• Regular security audits: phwinn conducts regular security assessments, vulnerability scans, and penetration testing to identify and remediate potential security risks.
• Incident response plan: phwinn maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify the National Privacy Commission and affected users within 72 hours as required by the Data Privacy Act.

10 Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phwinn:

• Right to be informed: You have the right to be informed of how your personal data is collected, used, and processed, including the identity of phwinn as the personal information controller.
• Right of access: You have the right to request a copy of the personal data phwinn holds about you, along with information about how it is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure or blocking: You may request the deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, or where processing is unlawful, subject to legal retention obligations.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to object: You have the right to object to the processing of your personal data, including processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing before the withdrawal.
• Right to file a complaint: You have the right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the contact details in Section 15 of this Privacy Policy. We will respond to your request within thirty (30) days.

11 Cookies & Tracking Technologies

phwinn uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver relevant content and advertising.

11.1 Types of Cookies We Use

• Essential cookies: Required for the Platform to function properly. These include session cookies that maintain your logged-in status and security tokens. They cannot be disabled.
• Analytical cookies: Help us understand how users interact with the Platform, including pages visited, time spent, and error messages. We use this data to improve the Platform.
• Functional cookies: Remember your preferences such as language settings, display options, and recent games played.
• Marketing cookies: Used to deliver targeted advertising based on your interests and track the effectiveness of our marketing campaigns. These are only placed with your consent.

11.2 Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Platform. You may also opt out of marketing cookies by adjusting your preferences in your account settings.

12 International Data Transfers

As an online platform, phwinn may transfer your personal data to service providers and partners located outside the Philippines. Where such transfers occur, phwinn ensures that appropriate safeguards are in place to protect your data, including:

• Transferring data only to countries or entities that provide an adequate level of data protection as determined by the National Privacy Commission.
• Implementing contractual clauses requiring overseas recipients to protect your data to the same standards required under Philippine law.
• Obtaining your explicit consent for the transfer where required by applicable law.

By using the Platform, you acknowledge and agree that your personal data may be transferred to and processed in countries outside the Philippines in accordance with this Privacy Policy.

13 Children's Privacy

The phwinn Platform is strictly intended for adults aged 21 years and older. phwinn does not knowingly collect personal data from individuals under the age of 21. By registering an account, you confirm that you are at least 21 years of age.

If phwinn becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the account, delete all associated data, and report the matter to PAGCOR as required by our licensing conditions.

14 Changes to This Privacy Policy

phwinn reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this Privacy Policy, we will:

• Update the "Effective Date" at the top of this Privacy Policy.
• Notify registered players via email or an in-platform notification.
• Where required by law, obtain your renewed consent before the changes take effect.

Your continued use of the Platform after the updated Privacy Policy takes effect constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact phwinn's Data Protection Officer:

• Email: [email protected]
• Platform: https://phwinn.cam
• Response time: We aim to respond to all data privacy inquiries within 30 days.

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC)
• Website: www.privacy.gov.ph
• Email: [email protected]