phwinner Privacy Policy

1. Introduction

phwinner ("we," "us," "our," or "the Company") operates the online casino and sports betting platform accessible at phwinner.club. We are committed to protecting the personal data of our players in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

This Privacy Policy applies to all personal data collected through the phwinner website, mobile platform, customer support channels, and any other phwinner service. It explains what data we collect, why we collect it, how we use and protect it, and what rights you have regarding your personal information.

Please read this policy carefully. If you have questions about how phwinner handles your data, you can contact our Data Protection Officer at any time using the contact details in Section 12.

2. Data We Collect

2.1 Information You Provide Directly

When you register for a phwinner account or use our services, we collect the following categories of personal data:

• Identity data: Full legal name, date of birth, nationality, and government-issued ID details (e.g., Philippine passport, SSS ID, driver's license, PhilSys ID).
• Contact data: Email address, mobile number, and residential address (including city — e.g., Manila, Cebu, Davao, Makati, Quezon City).
• Financial data: GCash number, PayMaya account, bank account details (BPI, BDO, Metrobank), and transaction history on the phwinner platform.
• Account data: Username, password (stored in hashed form), account preferences, and communication preferences.
• Verification documents: Copies of government-issued ID and proof of address submitted during KYC verification.

2.2 Data Collected Automatically

When you access the phwinner platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location.
• Device type, operating system, and browser information.
• Pages visited, time spent on each page, and navigation patterns.
• Game session data, including games played, bets placed, and session duration.
• Cookie and tracking data (see Section 6).

2.3 Data from Third Parties

phwinner may receive personal data about you from third-party sources, including payment processors (e.g., GCash, PayMaya), identity verification service providers, fraud prevention agencies, and PAGCOR regulatory databases where applicable.

3. How We Use Your Data

phwinner uses your personal data for the following purposes:

• Account management: To create, maintain, and secure your phwinner account.
• Identity verification: To verify your age (21+), identity, and eligibility to use the platform in compliance with PAGCOR requirements.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank.
• Regulatory compliance: To fulfill our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
• Customer support: To respond to your inquiries, resolve disputes, and provide assistance in English and Filipino.
• Fraud prevention: To detect, investigate, and prevent fraudulent activity, cheating, and money laundering.
• Responsible gaming: To monitor gaming behavior and enforce responsible gaming tools such as deposit limits and self-exclusion.
• Platform improvement: To analyze usage patterns and improve the phwinner platform, game selection, and user experience.
• Marketing communications: To send you promotional offers and updates, where you have consented to receive such communications. You may opt out at any time.

4. Legal Basis for Processing

phwinner processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfill our obligations under the phwinner Terms and Conditions, including account management and payment processing.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA requirements, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time.

5. Data Sharing & Disclosure

phwinner does not sell your personal data to third parties. We may share your data with the following categories of recipients only where necessary and lawful:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank, to facilitate deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers who assist in verifying player identity and age.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies, where required by law.
• Game software providers: Licensed third-party game developers who supply games on the phwinner platform, limited to data necessary for game operation.
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection vendors operating under strict data processing agreements.

All third parties who receive your personal data are contractually required to handle it in accordance with the Data Privacy Act of 2012 and to use it only for the specified purpose.

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device when you visit the phwinner platform. They help us recognize your browser, remember your preferences, and analyze how you use our services.

6.2 Types of Cookies We Use

• Essential cookies: Required for the platform to function correctly, including session management and security. These cannot be disabled.
• Functional cookies: Remember your language preferences, login state, and display settings to improve your experience.
• Analytics cookies: Collect anonymized data about how players navigate the platform, helping us identify areas for improvement.
• Marketing cookies: Used to deliver relevant promotional content. These are only set with your explicit consent.

6.3 Managing Cookies

You can control non-essential cookies through your browser settings or our cookie preference center. Disabling certain cookies may affect the functionality of the phwinner platform.

7. Data Retention

phwinner retains your personal data for as long as your account is active and for a period thereafter as required by law. Specifically:

• Account and transaction records are retained for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLA requirements.
• KYC verification documents are retained for five (5) years after the end of the business relationship.
• Marketing consent records are retained until you withdraw consent, plus one (1) year for audit purposes.
• Technical logs and session data are retained for up to twelve (12) months.

When retention periods expire, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

8. Data Security

phwinner implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and phwinner servers.
• AES-256 encryption for sensitive data stored in our databases.
• Multi-factor authentication options for player accounts.
• Regular penetration testing and security audits by independent third parties.
• Strict access controls limiting employee access to personal data on a need-to-know basis.
• 24/7 security monitoring and intrusion detection systems.

While phwinner takes all reasonable precautions, no online platform can guarantee absolute security. You are responsible for keeping your phwinner login credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

9. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phwinner:

• Right to be informed: You have the right to know what personal data phwinner collects and how it is used.
• Right of access: You may request a copy of the personal data phwinner holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to data portability: You may request your personal data in a structured, commonly used format.
• Right to lodge a complaint: You have the right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 12. We will respond to all verified requests within thirty (30) days.

10. Children's Privacy

The phwinner platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law and PAGCOR regulations. phwinner does not knowingly collect personal data from individuals under the age of 21. If we discover that a person under 21 has provided personal data to phwinner, we will immediately suspend the associated account and delete the data in question. If you believe a minor has registered on phwinner, please contact us immediately at the details provided in Section 12.

11. Changes to This Privacy Policy

phwinner reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will notify registered players via email and post a prominent notice on the phwinner platform at least seven (7) days before the changes take effect. The date of the most recent revision is displayed at the top of this page. Your continued use of phwinner following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the phwinner Data Protection Officer:

Email: [email protected]

Our support team is available 24/7 and can assist in both English and Filipino. We aim to acknowledge all privacy-related inquiries within 48 hours and resolve them within 30 days.