phlwin Privacy Policy

1 Who We Are

phlwin is an online gaming and sports betting platform accessible at phlwin.bio. For the purposes of this Privacy Policy, phlwin acts as the data controller in respect of the personal data of registered Players. As data controller, phlwin determines the purposes and means of processing personal data collected through the platform.

phlwin operates within the Philippines and directs its services primarily to Filipino players residing in the Philippines, including those in Metro Manila, Cebu, Davao, Quezon City, and surrounding regions. This Privacy Policy is written in accordance with Philippine data privacy law, specifically Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.

2 Scope of This Policy

This Privacy Policy applies to all personal data collected, processed, stored, and used by phlwin in connection with:

• Account registration and management;
• Deposit, withdrawal, and payment processing;
• Game play, betting activity, and transaction records;
• Customer support communications;
• Promotional and marketing activities (where consent has been given);
• Identity verification and anti-money laundering compliance;
• Responsible gaming program administration;
• Website and platform analytics.

This policy does not cover third-party websites, services, or applications that may be linked to or accessible from the phlwin platform. phlwin is not responsible for the privacy practices of any third party.

3 Personal Data We Collect

phlwin collects the following categories of personal data from its players:

4 How We Collect Your Data

4.1 Directly from You

phlwin collects data directly when you:

• Register a phlwin account by submitting a registration form;
• Complete identity or age verification by uploading documents;
• Make a deposit or request a withdrawal through a linked payment method;
• Contact phlwin's support team via live chat or email;
• Opt in to receive promotional communications;
• Use responsible gaming tools such as deposit limit or self-exclusion settings.

4.2 Automatically

When you access phlwin, our platform automatically collects certain technical data, including your IP address, device identifiers, browser type, and session activity. This data is collected using cookies, log files, and similar tracking technologies to maintain platform security, detect fraud, and optimize user experience.

4.3 From Third Parties

phlwin may receive personal data from the following third-party sources:

• Payment providers (e.g., GCash, PayMaya, BPI, BDO, Metrobank) to confirm deposit and withdrawal transactions;
• Identity verification services to validate government-issued Philippine IDs;
• Fraud detection and anti-money laundering screening services to assess risk associated with new registrations and transactions.

5 Why We Use Your Personal Data

phlwin uses collected personal data for the following purposes:

• Account creation and management: To register, maintain, and secure your phlwin account;
• Identity and age verification: To confirm that you meet the 21+ age requirement and to comply with KYC obligations;
• Payment processing: To facilitate deposits, withdrawals, and refunds in Philippine Peso;
• Platform delivery: To provide access to games, sports betting, promotions, and support services;
• Responsible gaming: To monitor gaming activity for indicators of problem gambling and to administer self-exclusion and deposit limit tools;
• Security and fraud prevention: To detect, investigate, and prevent unauthorized access, cheating, money laundering, and other prohibited activities;
• Regulatory compliance: To meet obligations under PAGCOR regulations, the Data Privacy Act of 2012, and anti-money laundering laws;
• Customer support: To respond to your inquiries and resolve disputes;
• Marketing communications: To send you information about promotions and bonuses where you have provided consent;
• Platform improvement: To analyze platform usage and improve user experience.

6 Legal Basis for Processing

phlwin processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have given explicit consent, for example when opting in to receive marketing communications. You may withdraw consent at any time.
• Contractual necessity: Processing required to fulfil phlwin's obligations to you under the Terms & Conditions, including account management and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including PAGCOR regulations and anti-money laundering legislation.
• Legitimate interests: Processing necessary for phlwin's legitimate business interests, such as fraud prevention, platform security, and responsible gaming administration, where those interests are not overridden by your data privacy rights.

7 Sharing Your Personal Data

phlwin does not sell, rent, or trade your personal data to third parties for commercial purposes. phlwin may share your personal data with the following categories of recipients only to the extent necessary:

• Payment service providers — GCash, PayMaya, and Philippine banking partners (BPI, BDO, Metrobank) for transaction processing;
• Identity verification and KYC providers — to verify your identity and age in compliance with regulatory requirements;
• Fraud prevention and AML screening services — to assess and mitigate financial crime risk;
• Game content providers — limited technical data may be shared with licensed game software providers (e.g., Pragmatic Play, Jili, PG Soft) to operate game services;
• Regulatory and law enforcement authorities — including PAGCOR and the Anti-Money Laundering Council (AMLC) of the Philippines, where required by applicable law or a valid legal order;
• Professional advisors — including lawyers, auditors, and insurers, subject to confidentiality obligations.

8 Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. phlwin uses cookies and similar technologies (such as local storage and session identifiers) to operate the platform and improve your experience.

8.2 Types of Cookies Used

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged into your phlwin account. These cannot be disabled without breaking platform functionality.
• Security cookies: Used to detect and prevent fraudulent login attempts, unauthorized access, and suspicious activity.
• Analytics cookies: Used to understand how players navigate and use the phlwin platform, helping us improve performance and usability. Data collected is aggregated and does not identify individual users.
• Preference cookies: Used to remember your language preferences and other account settings.

8.3 Managing Cookies

You can manage or delete cookies through your browser settings. Disabling essential cookies will impair or prevent your ability to log in and use the phlwin platform. For more information on managing cookies on popular Philippine mobile browsers (Chrome for Android, Samsung Internet), refer to your browser's help documentation.

9 Data Retention

phlwin retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and accounting obligations. The following general retention periods apply:

• Account data: Retained for the duration of the active account relationship and for a period of at least five (5) years following account closure, in accordance with PAGCOR and AMLC requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Identity verification documents: Retained for the duration required by applicable KYC and AML regulations, typically five (5) years from the end of the business relationship.
• Support communications: Retained for up to three (3) years from the date of the communication.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year for audit purposes.

Following the expiry of the applicable retention period, phlwin will securely delete or anonymize personal data so that it can no longer be associated with an identifiable individual.

10 Data Security

phlwin implements technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and phlwin's servers;
• Encryption of sensitive data fields (including payment information and ID document data) at rest;
• Role-based access controls limiting access to personal data to authorized personnel only;
• Multi-factor authentication for administrative access to systems storing personal data;
• Regular security audits and penetration testing of the platform;
• Incident response procedures for the detection, reporting, and management of data breaches.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, phlwin will notify the National Privacy Commission of the Philippines and affected Players in accordance with the Data Privacy Act of 2012.

11 Your Data Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phlwin:

To exercise any of the rights listed above, please contact phlwin via live chat or at [email protected]. phlwin will respond to all rights requests within fifteen (15) business days. In some cases, phlwin may require you to verify your identity before processing a rights request.

12 Children's Privacy

phlwin is an adult online gaming platform. Access and registration are strictly limited to persons who are 21 years of age or older, in accordance with PAGCOR regulations and the laws of the Republic of the Philippines governing gambling activities.

phlwin does not knowingly collect personal data from persons under the age of 21. If phlwin becomes aware that personal data has been collected from a person under the required age, that data will be deleted and the associated account closed immediately. If you believe that a minor has registered on phlwin, please contact us at [email protected] without delay.

13 Cross-Border Data Transfers

phlwin's primary operations and data storage are located within or directed at the Philippines. Where the use of technology providers or game content suppliers requires the transfer of personal data outside the Philippines, phlwin will implement appropriate safeguards to ensure that transferred data receives a level of protection consistent with the Data Privacy Act of 2012.

Such safeguards may include data processing agreements with standard contractual clauses, transfers to countries or organizations recognized as providing adequate data protection, or other mechanisms approved by the National Privacy Commission.

14 Amendments to This Privacy Policy

phlwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. When material changes are made, phlwin will post the updated policy on phlwin.bio with a revised effective date. Where required by law, phlwin will notify registered Players of significant changes by email or in-platform notification prior to the changes taking effect.

Your continued use of phlwin following the posting of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you must stop using phlwin and may request account closure.

15 Contact & Data Privacy Inquiries

For any questions, concerns, or requests relating to this Privacy Policy or phlwin's data practices, please contact the phlwin support team through the following channels:

• Live Chat: Available 24/7 on the phlwin website. Fastest response — average under 5 minutes on Philippine Standard Time (PST, UTC+8).
• Email: [email protected] — for formal data privacy requests, please include "Data Privacy Request" in the subject line.

phlwin will acknowledge receipt of formal data privacy requests within five (5) business days and respond in full within fifteen (15) business days. In cases of unresolved complaints, you have the right to escalate your concern to the National Privacy Commission of the Philippines.