phwin22 Privacy Policy

phwin22 is an online casino and sports betting platform operating in the Philippines, designed specifically for Filipino players. In the course of providing gaming services, processing financial transactions, and maintaining regulatory compliance, phwin22 necessarily collects and processes certain personal information about its registered players and platform visitors.

phwin22 takes its data protection obligations seriously. We are committed to handling personal information responsibly, transparently, and in accordance with applicable Philippine law — particularly the Data Privacy Act of 2012, its IRR, and the issuances of the National Privacy Commission (NPC). This Policy sets out in plain terms what data we collect, why we collect it, how we use it, who we share it with, and what rights you have over it.

This Policy applies to all personal information collected through the phwin22 Platform, including through registration, account use, transactions, customer support interactions, and technical platform access. It does not apply to third-party websites or services linked from or integrated into the Platform, which operate under their own privacy policies.

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for the personal information processed through the phwin22 Platform is:

phwin22 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection law. You may contact the DPO at the email address above for any privacy-related inquiry, data rights request, or complaint.

phwin22 collects personal data through several channels: account registration, identity verification, payment transactions, game activity, customer support interactions, and automated technical collection. The categories of personal data we collect include:

phwin22 uses personal data for the following purposes:

• Account Management: To create, operate, maintain, secure, and close your phwin22 account, including processing login authentication via OTP and password;
• Payment Processing: To process deposits from and withdrawals to your Philippine payment methods (GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, USDT TRC20, Coins.ph) in Philippine Peso;
• Identity Verification (KYC): To verify your identity, age (21+), and eligibility as required by PAGCOR regulations and our anti-money laundering obligations;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, multi-accounting, bonus abuse, and other prohibited conduct;
• Legal and Regulatory Compliance: To fulfill obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws;
• Customer Support: To respond to inquiries, resolve disputes, process complaints, and provide account assistance through live chat and email;
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, apply account limits requested by players, and administer self-exclusion requests;
• Platform Improvement: To analyze aggregated usage data to improve Platform performance, user experience, and game offerings — no individual profiling without consent;
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. Marketing consent may be withdrawn at any time.

Under the Data Privacy Act of 2012, phwin22 relies on the following lawful bases for processing personal information:

• Consent: For marketing communications, optional analytics participation, and any processing not covered by the bases below. You provide consent at registration or via account settings and may withdraw it at any time;
• Contractual Necessity: Processing required to perform the contract between you and phwin22 — including account management, payment processing, and game delivery;
• Legal Obligation: Processing necessary to comply with PAGCOR regulations, AMLA requirements, NPC issuances, and other applicable Philippine legal obligations;
• Legitimate Interests: Processing for fraud prevention, Platform security, and service improvement, where such interests are not overridden by your data protection rights.

phwin22 does not sell, rent, or trade personal information to third parties for commercial or marketing purposes. phwin22 may share your personal data only in the following circumstances:

• Payment Processors: GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, USDT TRC20 processors, and Coins.ph receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks;
• Game Content Providers: Third-party game studios (e.g., Pragmatic Play, PG Soft) may receive anonymized or pseudonymized session data necessary to deliver and troubleshoot their games within the phwin22 Platform, under strict data processing agreements;
• Identity Verification Services: KYC and AML compliance service providers that assist phwin22 in verifying player identity and screening against regulatory watch lists. These providers process data solely for compliance purposes;
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, courts, and law enforcement agencies where phwin22 is legally required or authorized to disclose information;
• Professional Advisors: Lawyers, auditors, and insurers acting in a professional advisory capacity to phwin22, under strict confidentiality obligations;
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets, personal data held by phwin22 may be transferred to the relevant successor entity, subject to the same privacy protections.

phwin22 uses cookies and similar tracking technologies on its Platform to support essential functionality, security, and — where you consent — platform analytics. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function — including session management, login authentication, security token validation, and fraud prevention. These cannot be disabled without breaking core Platform functionality;
• Functional Cookies: Remember your preferences such as language settings, game display options, and notification preferences to provide a more personalized experience;
• Analytics Cookies: Collect aggregated data about how players use the Platform — pages visited, features used, time spent — to help phwin22 improve the Platform. These are only placed where you have consented via the cookie preference tool;
• Security Cookies: Used to detect and prevent fraudulent activity, including identification of unusual login patterns or suspicious session behavior.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent access to the phwin22 Platform. phwin22 does not use cookies for cross-site behavioral advertising or tracking across external websites.

phwin22 retains personal data for the period necessary to fulfill the purposes described in this Policy, subject to the following minimum retention periods:

• Active Account Data: Retained for the full duration of your active phwin22 account;
• Post-Closure Retention: Following account closure, phwin22 retains personal data for a minimum of five (5) years in accordance with PAGCOR record-keeping requirements and Philippine AML regulations;
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of each transaction, as required by AMLA and BIR regulations;
• KYC Documents: Identity verification documents are retained for five (5) years post-account closure or longer where required by regulatory authority;
• Support Communications: Customer support records are retained for three (3) years following resolution of the relevant interaction;
• Marketing Consent Records: Records of consent to and withdrawal from marketing communications are retained for the duration of the relationship plus three (3) years.

Data retained beyond the period necessary for its original purpose is securely deleted or irreversibly anonymized. Anonymized and aggregated data that cannot be linked back to any individual may be retained indefinitely for statistical analysis and Platform improvement purposes.

phwin22 implements technical and organizational security measures appropriate to the risk level associated with the personal data it processes. These include:

• SSL/TLS encryption for all data transmitted between your device and the phwin22 Platform;
• Encryption of sensitive personal data and payment credentials at rest;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning of phwin22 Platform infrastructure;
• Multi-factor authentication for administrative access to systems processing personal data;
• Data breach detection, logging, and incident response procedures aligned with NPC breach notification requirements;
• Staff data protection training and confidentiality obligations for all personnel with access to personal data.

While phwin22 employs robust security measures, no online platform can guarantee absolute security against all threats. In the event of a data breach that poses a real risk to your rights and freedoms, phwin22 will notify affected individuals and the NPC within the timeframes required by Philippine law.

Some of phwin22's third-party service providers — including game content studios and technology infrastructure providers — may process personal data in jurisdictions outside the Philippines. Where such cross-border data transfers occur, phwin22 ensures that appropriate safeguards are in place, including:

• Data processing agreements that impose obligations equivalent to those under Philippine data protection law;
• Transfers to jurisdictions recognized as providing adequate data protection by the NPC;
• Binding contractual clauses approved by the NPC or equivalent international data transfer mechanisms.

phwin22 does not transfer personal data internationally for marketing or commercial data-sharing purposes. International transfers are limited to the operational and compliance purposes described in this Policy. You may request information about the safeguards applicable to a specific international transfer by contacting the phwin22 DPO.

The phwin22 Platform is strictly intended for individuals who are twenty-one (21) years of age or older, as required by PAGCOR regulations governing online gambling in the Philippines. phwin22 does not knowingly collect, process, or retain personal data relating to individuals under 21 years of age.

To exercise any of your rights under the Data Privacy Act of 2012 — including access, correction, erasure, objection, restriction, portability, or withdrawal of consent — please submit a request to the phwin22 Data Protection Officer using the contact details in Section 15.

When submitting a data rights request, please include:

• Your full name and phwin22 registered mobile number;
• A description of the specific right you wish to exercise;
• Any relevant details that will help phwin22 locate and process your request efficiently;
• A copy of a valid Philippine government-issued ID for identity verification purposes.

phwin22 will acknowledge your request within five (5) business days and respond substantively within thirty (30) days. Where a request is complex or phwin22 is handling a high volume of requests, the response period may be extended by a further thirty (30) days with prior notice to you.

Some rights are subject to legal limitations. For example, phwin22 may be unable to delete data that is required for PAGCOR compliance or AML record-keeping obligations. In such cases, phwin22 will explain the limitation and the applicable legal basis clearly.

With your consent, phwin22 may send you promotional communications including bonus offers, game launch announcements, sports betting promotions, and platform updates via SMS to your registered Philippine mobile number or via email.

You may withdraw consent for marketing communications at any time by:

• Updating your notification preferences in your phwin22 Account Settings;
• Replying "STOP" to any phwin22 SMS communication;
• Emailing the phwin22 DPO at [email protected] with the subject line "Unsubscribe — Marketing."

Withdrawal of marketing consent takes effect within 48 hours. Note that withdrawal of marketing consent does not affect transactional communications — phwin22 will continue to send account-related messages (deposit confirmations, withdrawal notifications, security alerts) regardless of marketing preferences, as these are necessary for account management.

phwin22 reserves the right to update or amend this Privacy Policy at any time. Updates may be made in response to changes in Philippine data protection law, NPC issuances, PAGCOR regulatory requirements, operational changes, or technological developments affecting data processing at phwin22.

Material changes to this Policy will be communicated to registered players by SMS to your registered +63 mobile number or by prominent notice on the phwin22 Platform at least seven (7) days before the change takes effect. Non-material clarifications may be published immediately. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Your continued use of the phwin22 Platform following any published update to this Policy constitutes your acknowledgment of the revised Policy. If you do not agree to an updated Policy, you must cease use of the Platform and contact phwin22 to close your account.

For all privacy-related inquiries, data rights requests, complaints, or questions about this Policy, please contact the phwin22 Data Protection Officer:

If you are not satisfied with phwin22's response to a data privacy complaint or believe your rights under the Data Privacy Act of 2012 have been violated, you have the right to lodge a complaint with the Philippine National Privacy Commission (NPC) through the NPC's official channels. phwin22 cooperates fully with NPC investigations and inquiries.