phwin22 Privacy Policy

1.1 phwin22 is committed to protecting the privacy and personal data of all Filipino players and visitors who interact with our platform. This Policy has been prepared in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), as overseen by the National Privacy Commission (NPC) of the Philippines.

1.2 As a PAGCOR-regulated online casino and sports betting operator, phwin22 is also subject to data collection and retention obligations imposed by PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory bodies. This Policy explains how we balance those legal obligations with your privacy rights.

1.3 This Policy applies to all personal data collected through the phwin22 website at phwin22.co, through our customer support channels, and through any other interaction you have with phwin22 in connection with our services. It applies to registered players, prospective registrants, and casual site visitors alike.

1.4 Please read this Policy carefully. If you have any questions or concerns about how phwin22 handles your personal data, you may contact our Data Protection Officer at [email protected] at any time.

2.1 For the purposes of the Data Privacy Act of 2012, phwin22 is the Personal Information Controller (PIC) in respect of the personal data of its players and website visitors. This means phwin22 determines the purposes for which, and the means by which, personal data is processed.

2.2 phwin22 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable Philippine data protection law. The DPO can be reached at [email protected].

2.3 Where phwin22 engages third-party service providers to process personal data on its behalf (such as payment processors, KYC verification providers, or customer support platforms), those third parties act as Personal Information Processors (PIPs) and are contractually bound to process data only in accordance with phwin22's instructions and this Policy.

3.1 phwin22 collects the following categories of personal data from players and site visitors:

3.2 Sensitive Personal Information. Under the Data Privacy Act of 2012, certain categories of data constitute "sensitive personal information" and attract heightened protection obligations. phwin22 processes the following sensitive personal information where necessary: national identification numbers (e.g., SSS, UMID, PhilSys IDs), financial information, and health-related data voluntarily disclosed in the context of responsible gaming requests (e.g., self-exclusion requests citing problem gambling concerns). phwin22 processes such data only to the extent strictly necessary for legal compliance and platform operation.

3.3 phwin22 does not knowingly collect personal data from persons under 21 years of age. If phwin22 discovers that personal data has been collected from a person under 21, it will immediately suspend the associated account and delete the personal data in accordance with applicable law.

4.1 Directly from You. The majority of data phwin22 collects is provided directly by you when you:

• Create or update a phwin22 account;
• Submit KYC identity verification documents;
• Make a deposit or request a withdrawal;
• Contact phwin22 customer support via chat or email;
• Participate in promotions or surveys;
• Configure responsible gaming tools in your account settings.

4.2 Automatically. phwin22 automatically collects certain technical and usage data when you access phwin22.co, using cookies, log files, session tracking technologies, and standard web server logging. See Section 8 (Cookies & Tracking) for full details.

4.3 From Third Parties. phwin22 may receive personal data about you from:

• Payment processors (e.g., GCash, Maya, BPI, BDO) to confirm payment status and detect fraud;
• KYC and identity verification service providers to cross-reference identity documents against Philippine government databases;
• AMLC and law enforcement authorities where phwin22 receives information as part of an investigation or mandatory disclosure;
• PAGCOR as part of regulatory compliance activities.

5.1 phwin22 uses your personal data for the following purposes:

5.2 phwin22 will not use your personal data for any purpose incompatible with the purposes described in this Section without obtaining your prior consent, unless required to do so by Philippine law.

6.1 Under the Data Privacy Act of 2012, phwin22 processes your personal data on one or more of the following legal bases:

• Consent (Section 12(a), R.A. 10173): Where you have freely given, specific, and informed consent — for example, for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Performance of a Contract (Section 12(b)): Where processing is necessary to fulfill our contractual obligations to you under the phwin22 Terms & Conditions — including account management, game access, and payment processing.
• Compliance with a Legal Obligation (Section 12(c)): Where processing is required to comply with PAGCOR's licensing conditions, AMLC's AML reporting obligations, NPC's data governance requirements, or any other applicable Philippine law.
• Legitimate Interests (Section 12(f)): Where processing is necessary for phwin22's legitimate business interests — such as fraud prevention, platform security, and improving our services — provided those interests are not overridden by your fundamental rights and freedoms.

7.1 phwin22 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. phwin22 shares personal data only in the following circumstances:

7.2 Where phwin22 shares personal data with third-party service providers (Personal Information Processors), phwin22 requires those providers to maintain appropriate technical and organizational security measures and to process data only in accordance with phwin22's written instructions.

7.3 Cross-Border Transfers. Some of phwin22's third-party service providers (including game software providers and certain technical infrastructure providers) may be located outside the Philippines. Where personal data is transferred internationally, phwin22 ensures that adequate data protection safeguards are in place in accordance with NPC guidelines and the Data Privacy Act IRR.

8.1 phwin22 uses cookies and similar tracking technologies (such as pixel tags and session tokens) to operate and improve the platform. Cookies are small text files placed on your device that allow phwin22 to recognize your browser and remember certain information about your session.

8.2 phwin22 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the phwin22 platform. These include session authentication cookies that keep you logged in to your account, CSRF protection tokens, and load balancing cookies. These cannot be disabled without preventing the platform from functioning.
• Functional Cookies: Used to remember your preferences (e.g., language settings, game display preferences, responsible gaming settings) between sessions. Disabling these cookies will mean your preferences are not retained between visits.
• Performance and Analytics Cookies: Used to collect anonymized or pseudonymized data about how players use phwin22 — including which game categories are most popular, page load times, and navigation patterns. This data helps phwin22 improve the platform.
• Session Security Cookies: Used to enforce security policies, detect unauthorized access attempts, and prevent session hijacking.

8.3 phwin22 does not use third-party advertising cookies or behavioral tracking cookies that would share your browsing behavior with external advertising networks. phwin22 does not engage in cross-site tracking for advertising purposes.

8.4 You may control cookie settings through your browser's privacy settings. Note that disabling strictly necessary cookies will prevent you from logging in to your phwin22 account. For detailed browser-specific cookie management instructions, refer to your browser's help documentation.

9.1 phwin22 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Encryption: All data transmitted between your browser and phwin22 servers is encrypted using industry-standard TLS (Transport Layer Security) protocols, visible as the padlock icon in your browser's address bar.
• Data Encryption at Rest: Sensitive data fields — including government ID numbers, bank account details, and password hashes — are encrypted at rest using strong encryption algorithms.
• Access Controls: Personal data is accessible only to authorized phwin22 personnel and vetted third-party processors on a strict need-to-know basis. All access is logged and auditable.
• Two-Factor Authentication (2FA): phwin22 offers optional 2FA via SMS OTP for player accounts and enforces mandatory 2FA for all phwin22 administrative staff accessing player data.
• Intrusion Detection and Monitoring: phwin22 monitors its systems 24/7 for suspicious activity, unauthorized access attempts, and anomalous data access patterns.
• Penetration Testing: phwin22 engages independent security specialists to conduct regular penetration testing of its platform infrastructure.

9.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phwin22 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03. Affected players will be notified without undue delay where the breach is likely to result in a high risk to their privacy rights.

9.3 While phwin22 implements robust security measures, no online platform can guarantee absolute security. You also have a responsibility to protect your own account by using a strong, unique password, enabling 2FA, and keeping your login credentials confidential.

10.1 phwin22 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:

10.2 Upon expiry of the applicable retention period, phwin22 will securely delete or irreversibly anonymize the personal data, subject to any overriding legal obligation to retain it further.

11.1 Under the Data Privacy Act of 2012, you have the following rights as a Data Subject. phwin22 will respond to all valid rights requests within 15 business days of receipt, in accordance with NPC guidelines.

11.2 To exercise any of the above rights, please submit a written request to phwin22's Data Protection Officer at [email protected], including your registered account details and sufficient information to identify the specific request. phwin22 may require identity verification before processing your request.

11.3 If you are dissatisfied with phwin22's response to a data subject rights request, or if you believe phwin22 has processed your personal data in violation of the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

12.1 phwin22 is strictly an adult platform. The minimum age requirement to register and play on phwin22 is 21 years of age, as mandated by PAGCOR for online gambling services in the Philippines. phwin22 does not knowingly collect, process, or retain personal data from any person under the age of 21.

12.2 phwin22 verifies the age of all registrants through its mandatory KYC process, which requires submission of a valid Philippine government-issued ID confirming the player's date of birth. An account will not be fully activated, and no withdrawal will be processed, without satisfactory age verification.

12.3 If phwin22 discovers or is notified that personal data has been collected from a person under 21 years of age — whether through a registration error, a fraudulent ID submission, or any other cause — phwin22 will: (a) immediately suspend the account; (b) freeze any associated balance pending investigation; (c) delete all personal data associated with the minor as soon as is lawfully possible; and (d) refer the matter to PAGCOR where required by its licensing obligations.

12.4 Parents and guardians who believe their child may have accessed or registered on phwin22 are encouraged to contact phwin22 immediately at [email protected] so that the account can be investigated and closed as a priority.

13.1 The phwin22 platform may contain references to third-party services (such as GCash, Maya, and banking providers) in the context of payment processing. phwin22 is not responsible for the privacy practices or data security measures of any third-party service provider.

13.2 When you are redirected to or interact with a third-party payment gateway or service (e.g., completing a GCash transaction on GCash's own interface), you are subject to that third party's own privacy policy and terms of use. phwin22 encourages you to review the privacy policies of any third-party services you interact with in connection with your phwin22 account.

14.1 phwin22 reserves the right to update or revise this Privacy Policy at any time to reflect changes in: applicable Philippine law (including NPC regulations and PAGCOR directives); phwin22's data processing practices; or the technical and organizational security measures phwin22 employs.

14.2 Where changes are material, phwin22 will notify registered players via email to their registered address and/or by a prominent notice on the phwin22 platform before the revised Policy takes effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

14.3 Your continued use of the phwin22 platform after the revised Policy takes effect constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using phwin22 and request account closure by contacting [email protected].

15.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or phwin22's handling of your personal data, please contact our Data Protection Officer:

15.2 phwin22 takes all privacy complaints seriously and will investigate all reports of alleged non-compliance with this Policy or the Data Privacy Act of 2012 promptly and thoroughly.