phlwin Privacy Policy

1. Introduction

1.1 phlwin respects the privacy of every Filipino player and visitor who interacts with our platform. This Policy is prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission (NPC) of the Philippines.

1.2 phlwin is a PAGCOR-regulated online gaming platform. As part of our regulatory obligations, we are required to collect and retain certain personal data relating to player identity, financial transactions, and gaming activity. This Policy explains those requirements transparently so that you understand exactly why your data is needed and how it is protected.

1.3 The phlwin platform serves Filipino players across the Philippines — from Metro Manila and Cebu City to Davao, Cagayan de Oro, Quezon City, and beyond. Regardless of where in the Philippines you access phlwin, this Policy applies in full to your personal data.

2. Data Controller

2.1 phlwin is the data controller responsible for your personal data collected through phlwin.vu and associated mobile applications. The phlwin data protection officer may be contacted at [email protected] for all data privacy matters.

2.2 For queries specifically relating to your rights under the Philippine Data Privacy Act, or to lodge a complaint, you may also contact the National Privacy Commission of the Philippines directly. phlwin cooperates fully with NPC investigations and audits.

3. Personal Data We Collect

3.1 phlwin collects personal data from you in the following categories:

Category	Examples	Collection Method
Identity Data	Full legal name, date of birth, nationality, government ID type and number	Account registration, KYC verification
Contact Data	Email address, Philippine mobile number, residential address	Account registration, profile updates
Financial Data	GCash number, PayMaya account, bank account details (BPI, BDO, Metrobank), transaction amounts	Cashier deposits and withdrawals
Gaming Activity Data	Game sessions, bet amounts, win/loss records, bonus usage, session duration	Automated platform recording
Technical Data	IP address, device type, browser, operating system, geolocation	Automatic collection on platform access
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Player support interactions

3.2 phlwin does not collect sensitive personal information (as defined under the Philippine Data Privacy Act) beyond what is strictly required for identity verification and age confirmation. We do not collect biometric data beyond facial matching for KYC purposes where applicable.

4. How We Use Your Personal Data

4.1 phlwin uses your personal data for the following purposes:

• Account Management: To register, verify, maintain, and close your phlwin account, including enforcing the one-account-per-player policy.
• Identity & Age Verification: To confirm that you are at least 21 years of age and are who you claim to be, as required under PAGCOR regulations and the Philippine Anti-Money Laundering Act.
• Payment Processing: To process your deposits via GCash, PayMaya, BPI, BDO, or Metrobank, and to return winnings and withdrawals to your registered payment method.
• Regulatory Compliance: To fulfil obligations under PAGCOR licensing, the Anti-Money Laundering Council (AMLC), and Philippine tax law, including player transaction reporting where required.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and prohibited conduct under our Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, and improve our support service quality.
• Responsible Gaming: To monitor gaming patterns and proactively identify players who may be exhibiting signs of problem gambling, enabling support outreach.
• Marketing Communications: To send you information about phlwin promotions, bonuses, and new game launches — subject to your communication preferences. You may opt out at any time by contacting [email protected].
• Platform Improvement: To analyse aggregated usage data and improve the phlwin platform, game lobby, and user experience for Filipino players.

5. Legal Basis for Processing

5.1 phlwin processes your personal data on the following legal bases under the Philippine Data Privacy Act:

• Contractual necessity: Processing required to perform our contract with you (providing gaming services, processing payments, managing your account).
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLC reporting obligations, and Philippine tax regulations.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

6.1 phlwin does not sell, rent, or trade your personal data to any third party for independent commercial use.

6.2 phlwin may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• PAGCOR and Philippine regulatory authorities: As required by our gaming licence and applicable law.
• Anti-Money Laundering Council (AMLC): For mandatory transaction reporting under Philippine AML legislation.
• Payment processors: GCash (Mynt), PayMaya (Maya Bank), BPI, BDO, Metrobank — solely for the purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC service providers who assist with document and identity verification under strict data processing agreements.
• IT infrastructure and security providers: Cloud hosting, cybersecurity, and fraud detection vendors who process data on phlwin's behalf under binding confidentiality and data protection obligations.
• Law enforcement: Where required by lawful order, court order, or to protect the rights, property, or safety of phlwin, its players, or the public.

7. International Data Transfers

7.1 To the extent that phlwin engages third-party service providers whose infrastructure is located outside the Philippines, any transfer of your personal data will be conducted under appropriate safeguards, including data transfer agreements that impose equivalent data protection standards to those required under Philippine law.

7.2 phlwin will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without first obtaining your consent or implementing appropriate contractual protections.

8. Data Retention

8.1 phlwin retains your personal data for as long as your account is active and for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and Philippine AML regulations.

8.2 Gaming activity records and financial transaction logs are retained for a minimum period as mandated by the AMLC and relevant PAGCOR issuances. After the applicable retention period expires, data is securely deleted or anonymised.

8.3 Where you request deletion of your personal data under Section 10, phlwin will comply to the extent permitted by law — legal retention obligations take precedence over deletion requests for the mandatory minimum retention period.

9. Cookies and Tracking Technologies

9.1 phlwin uses cookies and similar technologies on phlwin.vu for the following purposes: (a) Essential cookies — required for the platform to function, including session authentication and phlwin login state management; (b) Analytics cookies — to understand how Filipino players navigate the phlwin platform so we can improve usability; (c) Preference cookies — to remember your language, game category preferences, and display settings.

9.2 phlwin does not deploy third-party advertising cookies or retargeting pixels that track your behaviour on websites outside of phlwin.vu.

9.3 You may manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to access phlwin login and gaming services.

10. Your Data Subject Rights

10.1 Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by phlwin:

• Right to be informed: To know what personal data phlwin holds about you and how it is used — addressed by this Policy.
• Right of access: To request a copy of the personal data phlwin holds about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of your personal data, subject to legal retention obligations.
• Right to data portability: To receive your personal data in a structured, commonly used format for transfer to another service provider.
• Right to object: To object to processing of your personal data for direct marketing purposes.
• Right to lodge a complaint: To lodge a complaint with the National Privacy Commission if you believe phlwin has handled your data unlawfully.

10.2 To exercise any of the above rights, contact phlwin's data protection officer at [email protected]. phlwin will respond to verified data subject requests within thirty (30) days of receipt.

11. Children's Privacy

11.1 phlwin is strictly for individuals aged 21 years and above. phlwin does not knowingly collect personal data from persons under 21. If phlwin discovers that personal data has been collected from an underage individual, the account will be immediately suspended, all funds will be frozen pending investigation, and the data will be deleted in accordance with applicable law.

11.2 If you believe that a person under 21 has registered a phlwin account, please notify us immediately at [email protected] so that we may take prompt action.

12. Security Measures

12.1 phlwin implements the following technical and organisational measures to protect your personal data: AES-256 encryption at rest; TLS 1.3 encryption in transit; multi-factor authentication for internal admin access; role-based access controls limiting staff access to personal data on a need-to-know basis; regular penetration testing and vulnerability assessments; and an incident response plan meeting NPC notification requirements.

12.2 In the event of a personal data breach that poses a real risk to Filipino player rights, phlwin will notify affected players without undue delay and report to the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required under NPC regulations.

13. Amendments to This Policy

13.1 phlwin may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform functionality. Amendments will be published at phlwin.vu/privacy-policy with the updated effective date.

13.2 Where amendments are material, phlwin will notify registered players via email or in-app notification prior to the changes taking effect. Your continued use of phlwin following publication of an amended Policy constitutes your acceptance of the revised terms.

14. Contact the phlwin Data Protection Officer

For all privacy-related enquiries, data subject requests, or concerns about how phlwin handles your personal data, please contact us at: [email protected]. Include your registered phlwin username and a clear description of your request. We aim to respond to all data privacy correspondence within five (5) business days.