Before diving into the full policy, here are the core privacy principles that guide how phwins handles your personal information.
Every piece of data transmitted between your device and phwins is protected by 256-bit SSL encryption — the same standard used by major Philippine banks like BPI and BDO. Your login credentials, payment details, and personal information are never sent in plain text.
phwins does not sell, rent, or trade your personal information to third-party marketers. Your data is used solely to operate your phwins account, process transactions, and comply with Philippine regulatory requirements.
As a phwins player, you have the right to access, correct, and request deletion of your personal data. phwins will respond to all verified data requests within a reasonable timeframe in accordance with applicable Philippine data protection law.
phwins stores player data on secured servers with access controls, firewalls, and regular security audits. Only authorised phwins personnel with a legitimate operational need may access your personal information.
phwins uses cookies and similar technologies to improve your experience on the Platform. You can manage your cookie preferences at any time. phwins does not use cookies to track your activity on third-party websites.
phwins operates in compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and the regulations issued by the National Privacy Commission (NPC) of the Philippines. Your rights as a data subject are fully recognised and respected.
phwins ("phwins," "we," "us," or "our") is committed to protecting the privacy and personal data of all players who use the phwins Platform at phwins.app. This Privacy Policy ("Policy") describes how phwins collects, uses, stores, discloses, and otherwise processes personal data in connection with the operation of the phwins online casino and gaming platform.
This Policy is intended to be read alongside the phwins Terms & Conditions and Responsible Gaming Policy. Together, these documents form the complete framework governing your relationship with phwins. If you have any questions about how phwins handles your personal data, please refer to the contact details in Section 14 of this Policy.
phwins recognises that Filipino players entrust us with sensitive personal and financial information. We take that responsibility seriously — and this Policy is our commitment to being transparent about exactly what we do with your data and why.
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, phwins is the personal information controller responsible for the personal data collected through the phwins Platform.
As the personal information controller, phwins determines the purposes and means of processing your personal data. phwins has implemented appropriate organisational and technical measures to ensure that your personal data is processed lawfully, fairly, and securely in accordance with applicable Philippine data protection law.
For all data privacy-related inquiries, requests, or complaints, you may contact phwins at: [email protected]
When you register for a phwins account or use the Platform, you may provide the following categories of personal data:
| Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (e.g., PhilSys ID, passport, driver's licence) |
| Contact Data | Philippine mobile number, email address, residential address (city/province, e.g., Manila, Cebu, Davao, Makati) |
| Financial Data | GCash number, PayMaya account, BPI/BDO/Metrobank account details, transaction history, deposit and withdrawal records |
| Account Data | Username, encrypted password, account preferences, bonus history, wagering activity |
| Verification Data | Copies of government-issued ID, selfie photographs submitted for KYC, proof of address documents |
When you access the phwins Platform, certain technical data is collected automatically through cookies and similar technologies, including:
phwins may receive personal data about you from third-party sources in limited circumstances, including identity verification providers used for KYC compliance, payment processors such as GCash and PayMaya, and fraud prevention and anti-money laundering screening services. Data received from third parties is handled with the same level of care as data you provide directly.
phwins uses your personal data for the following purposes:
phwins will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.
Under the Philippine Data Privacy Act of 2012, phwins processes your personal data on the following legal bases:
phwins does not sell your personal data to third parties. phwins may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:
phwins engages trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification and KYC providers, cloud hosting and infrastructure providers, customer support platform providers, and fraud detection and cybersecurity services. All service providers are contractually required to process your data only on phwins's instructions and to maintain appropriate security measures.
phwins may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities where required by law, court order, or regulatory directive. phwins will notify you of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, or sale of all or part of phwins's business, your personal data may be transferred to the acquiring entity as part of that transaction. phwins will notify affected players of any such transfer and ensure that the acquiring entity is bound by privacy obligations no less protective than those in this Policy.
phwins retains your personal data for as long as your phwins account remains active and for a period thereafter as required by applicable law and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and identity data | Duration of account plus 5 years after closure |
| Transaction and financial records | 10 years from the date of transaction (AML requirement) |
| KYC verification documents | 5 years after account closure or last transaction |
| Customer support communications | 3 years from the date of the last interaction |
| Technical and usage logs | 12 months on a rolling basis |
| Marketing consent records | Until consent is withdrawn, plus 1 year |
Upon expiry of the applicable retention period, phwins will securely delete or anonymise your personal data in accordance with its data disposal procedures. Where data is anonymised rather than deleted, the resulting anonymised data may be retained indefinitely for analytical purposes.
phwins implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
While phwins takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phwins account credentials. If you suspect that your account has been compromised, please contact phwins support immediately.
phwins uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files stored on your device that help phwins recognise you, remember your preferences, and analyse how the Platform is used.
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Required for the Platform to function. Includes session management, login authentication, and security tokens. Cannot be disabled. |
| Functional | Remember your preferences such as language settings, game lobby layout, and display options. |
| Analytical | Help phwins understand how players use the Platform, which pages are most visited, and where technical issues occur. Data is aggregated and anonymised. |
| Marketing | Used only where you have opted in to receive promotional communications. Help phwins measure the effectiveness of its campaigns. |
You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phwins Platform. Strictly necessary cookies cannot be disabled as they are essential for the Platform to operate securely.
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phwins. To exercise any of these rights, please contact phwins at [email protected] with a clear description of your request. phwins will respond within a reasonable timeframe and may need to verify your identity before processing your request.
If you believe that phwins has not handled your personal data in accordance with the Philippine Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. phwins encourages you to contact us first so that we can attempt to resolve your concern directly.
The phwins Platform is strictly intended for individuals who are at least twenty-one (21) years of age. phwins does not knowingly collect personal data from persons under the age of 21. If phwins becomes aware that personal data has been collected from a person under 21, that data will be deleted promptly and the associated account will be closed.
If you are a parent or guardian and believe that a minor has registered for a phwins account or provided personal data to phwins, please contact phwins support immediately at [email protected] so that appropriate action can be taken.
phwins primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to and processed in countries outside the Philippines — for example, where phwins uses cloud infrastructure or service providers with operations in other jurisdictions.
Where personal data is transferred outside the Philippines, phwins ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act. These safeguards may include contractual clauses, data processing agreements, or transfers to jurisdictions recognised as providing adequate data protection.
phwins reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or phwins's data processing practices. Where changes are material, phwins will notify registered players by email or through a prominent notice on the Platform prior to the changes taking effect.
The date of the most recent revision is displayed at the top of this page. Your continued use of the phwins Platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. phwins encourages you to review this Policy periodically to stay informed of how your personal data is being protected.
If you have any questions, concerns, or requests relating to this Privacy Policy or phwins's handling of your personal data, please contact the phwins Data Privacy team using the details below. phwins is committed to addressing all privacy-related inquiries promptly and transparently.
For complaints that cannot be resolved directly with phwins, you may contact the National Privacy Commission of the Philippines. phwins will cooperate fully with any NPC investigation into its data processing practices.