phiwin Privacy Policy

1. Introduction

1.1 phiwin is committed to protecting the privacy and personal data of all users of the phiwin platform. This Policy has been prepared in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations, as well as applicable regulations issued by the National Privacy Commission (NPC).

1.2 This Policy applies to all personal data collected through the phiwin website, mobile platform, customer support channels, and any other phiwin services. It should be read together with the phiwin Terms & Conditions.

1.3 phiwin acts as the Personal Information Controller (PIC) with respect to the personal data of its registered players and website visitors.

2. Personal Data We Collect

2.1 phiwin collects personal data that you provide directly, data generated through your use of the platform, and data obtained from third parties where permitted by law. The categories of personal data we collect include:

2.2 phiwin does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data is collected (e.g., government ID), it is handled with heightened security measures.

3. How We Use Your Personal Data

phiwin uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your phiwin account, including identity verification and age confirmation (21+ requirement).
• Service Delivery: To provide access to phiwin games, process deposits and withdrawals, and deliver customer support.
• Regulatory Compliance: To comply with PAGCOR regulations, Philippine AML laws, and NPC requirements, including Know Your Customer (KYC) procedures.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized access, and other illegal conduct.
• Responsible Gaming: To monitor gaming behavior and apply responsible gaming tools, including deposit limits and self-exclusion, where appropriate.
• Platform Improvement: To analyze usage patterns and improve the phiwin platform, user experience, and game offerings.
• Communications: To send you account-related notifications, security alerts, and, where you have consented, promotional communications about phiwin offers.

4. Legal Basis for Processing

4.1 phiwin processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and phiwin (i.e., to provide the gaming services you have registered for).
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions and AML obligations.
• Legitimate Interests: Processing is necessary for phiwin's legitimate interests, including fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights.
• Consent: Where phiwin relies on your consent (e.g., for marketing communications), you may withdraw consent at any time by contacting phiwin support or updating your account preferences.

5. Data Sharing and Disclosure

5.1 phiwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. phiwin may share your personal data in the following circumstances:

• Service Providers: With trusted third-party vendors who assist phiwin in operating the platform (e.g., payment processors, KYC verification providers, cloud hosting providers). These parties are bound by confidentiality obligations and may only use your data as directed by phiwin.
• Regulatory Authorities: With PAGCOR, the Anti-Money Laundering Council (AMLC), the NPC, or other Philippine government authorities where required by law or regulation.
• Law Enforcement: Where phiwin is required by court order, subpoena, or other legal process to disclose personal data.
• Business Transfers: In the event of a merger, acquisition, or sale of phiwin's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

5.2 phiwin does not transfer personal data outside the Philippines except where necessary for service delivery and subject to appropriate safeguards in accordance with the Data Privacy Act.

6. Cookies and Tracking Technologies

6.1 phiwin uses cookies, web beacons, and similar tracking technologies to enhance your experience on the phiwin platform. Cookies are small text files stored on your device that help phiwin recognize you, remember your preferences, and analyze platform usage.

6.2 phiwin uses the following types of cookies:

• Essential Cookies: Required for the phiwin platform to function correctly. These cannot be disabled.
• Analytics Cookies: Used to understand how players interact with phiwin, helping us improve the platform. Data collected is aggregated and anonymized.
• Preference Cookies: Used to remember your settings and preferences (e.g., language, display options).

6.3 You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the phiwin platform.

7. Data Retention

7.1 phiwin retains your personal data for as long as your phiwin account is active and for a period thereafter as required by applicable law and regulation. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, as required by Philippine AML regulations.
• Transaction records are retained for a minimum of five (5) years.
• Customer support communications are retained for three (3) years.
• Technical and usage data may be retained in anonymized or aggregated form for longer periods for analytics purposes.

7.2 When personal data is no longer required, phiwin will securely delete or anonymize it in accordance with its data retention procedures.

8. Data Security

8.1 phiwin implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include SSL/TLS encryption for data in transit, encryption of sensitive data at rest, access controls limiting data access to authorized personnel only, regular security assessments and vulnerability testing, and incident response procedures.

8.2 In the event of a personal data breach that is likely to result in harm to affected individuals, phiwin will notify the NPC and affected players in accordance with the Data Privacy Act and NPC Circular No. 16-03.

8.3 While phiwin takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for keeping your phiwin login credentials confidential.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phiwin:

• Right to be Informed: You have the right to know how your personal data is being collected and processed.
• Right of Access: You may request a copy of the personal data phiwin holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phiwin's legal retention obligations.
• Right to Object: You may object to the processing of your personal data on grounds of legitimate interest or for direct marketing purposes.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact phiwin's Data Protection Officer using the contact details in Section 13. phiwin will respond to verified requests within thirty (30) days.

10. Children's and Minors' Privacy

10.1 The phiwin platform is strictly for persons aged 21 years and above. phiwin does not knowingly collect personal data from individuals under 21 years of age. If phiwin becomes aware that personal data has been collected from a person under 21, it will take immediate steps to delete such data and close the associated account.

10.2 If you believe that a minor has registered on the phiwin platform, please contact phiwin support immediately so that appropriate action can be taken.

11. Third-Party Links

11.1 The phiwin platform may contain links to third-party websites or services for informational purposes. phiwin is not responsible for the privacy practices or content of any third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

12.1 phiwin reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via email or a prominent notice on the phiwin platform. The "Last updated" date at the top of this Policy will be revised accordingly.

12.2 Your continued use of the phiwin platform following notification of changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised Policy, you must cease using phiwin and may request account closure.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact phiwin's Data Protection Officer: