phwin 23 Privacy Policy – How We Protect Your Personal Data

phwin 23 is the data controller responsible for your personal information under this Privacy Policy. As data controller, phwin 23 determines the purposes and means of processing personal data collected through the phwin 23 platform. Our designated Data Protection Officer (DPO) oversees all privacy-related matters and can be reached at support@phwin23.xyz with the subject line "Data Privacy Inquiry."

phwin 23 processes personal data only for the purposes described in this policy, using only the minimum data necessary for each purpose (data minimisation), and retaining it only for as long as legally or operationally required (storage limitation). These aren't just compliance buzzwords — they represent a genuine approach to handling your information with respect.

phwin 23 collects personal data in three ways: information you provide directly, information we collect automatically as you use the platform, and information we receive from third parties like payment processors.

Information You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile phone number, and chosen username.
• Identity verification (KYC): Government-issued ID (e.g., PhilSys ID, passport, driver's licence), selfie for biometric verification, and proof of address where required.
• Payment information: GCash or Maya account number, bank account details (BDO, BPI, UnionBank), or card details — all processed through certified payment processors and not stored in full on phwin 23 servers.
• Communications: Messages you send to phwin 23 support via live chat, email, or any other channel.
• Preferences and settings: Responsible gaming tool configurations, marketing preferences, and communication opt-in or opt-out choices.

Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited on phwin 23, games played, betting patterns, session duration, click behaviour, and platform navigation paths.
• Transaction data: Deposit history, withdrawal requests, bet placement and settlement records, bonus claims, and account balance history.
• Location data: General geographic location derived from your IP address (country and region level — not precise GPS location).

Information From Third Parties

• Identity verification results from KYC processing partners.
• Payment confirmation and fraud risk signals from GCash, Maya, and other payment processors.
• Age and identity verification data from licensed identity verification services.

phwin 23 uses your personal data only for the purposes listed below. We do not use your data for purposes unrelated to operating the phwin 23 platform and providing services to you as a Filipino player.

• Account management: Creating and maintaining your phwin 23 account, verifying your identity, and ensuring you meet our eligibility requirements including the 18+ age requirement.
• Service delivery: Processing bets, settling winnings, managing bonuses, and providing access to all phwin 23 games and betting markets.
• Payment processing: Facilitating deposits via GCash, Maya, and other Philippine payment channels, and processing withdrawal requests to your registered payment accounts.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, match fixing, bonus abuse, and other security threats — including cooperation with law enforcement where required by Philippine law.
• Regulatory compliance: Meeting our obligations under Philippine gaming regulations, anti-money laundering (AML) laws, and the Data Privacy Act of 2012.
• Responsible gaming: Monitoring gaming patterns to identify players who may be experiencing gaming-related harm and providing appropriate responsible gaming interventions.
• Customer support: Responding to your questions, complaints, and requests via live chat, email, and other support channels.
• Platform improvement: Analysing aggregated usage data to improve phwin 23's product, user experience, and game selection — always using anonymised or aggregated data for this purpose.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — but only if you have opted in to receive these communications. You can opt out at any time.

Under the Data Privacy Act of 2012 (RA 10173), phwin 23 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our agreement with you — including account management, bet settlement, and payment processing — is necessary to provide the phwin 23 service you've signed up for.
• Legal obligation: Processing required for compliance with Philippine law — including AML obligations, KYC requirements, and regulatory reporting — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, security, platform improvement, and responsible gaming monitoring is carried out on the basis of phwin 23's legitimate interests, provided these interests do not override your rights.
• Consent: Processing for marketing communications is carried out only with your explicit consent. You can withdraw this consent at any time by updating your communication preferences in your phwin 23 account settings or by contacting our support team.

phwin 23 does not sell your personal data to third parties. Full stop. We share your data only in the limited circumstances described below, and only with organisations that are bound by appropriate data protection obligations.

• Payment processors: GCash, Maya, BDO, BPI, UnionBank, and other Philippine payment providers receive only the data necessary to process your transactions — typically your name, account number, and transaction amount.
• Identity verification providers: Licensed KYC and identity verification services receive your ID document images and verification data to confirm your identity and age. These providers are contractually bound to use your data only for verification purposes.
• Game software providers: Third-party game providers (such as Pragmatic Play, Evolution Gaming, and others) receive anonymised session data required to operate their games within the phwin 23 platform. No unnecessary personal data is shared.
• Regulatory and law enforcement authorities: phwin 23 may disclose your data to the relevant Philippine regulatory bodies (including PAGCOR) or law enforcement agencies where required by law, court order, or to cooperate with a lawful investigation.
• Technology service providers: Cloud hosting, cybersecurity, analytics, and customer support technology providers who process data on our behalf under strict data processing agreements.

phwin 23 retains your personal data only for as long as necessary for the purposes it was collected, or as required by law. The following retention periods apply:

• Active account data: Retained for the duration of your active phwin 23 account plus a post-closure period for legal and regulatory compliance.
• Transaction and betting records: Retained for a minimum of 5 years after the transaction date, in accordance with Philippine AML and financial record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of 5 years after account closure, as required by Philippine AML regulations.
• Customer support communications: Retained for 2 years after the relevant support interaction is closed.
• Marketing consent records: Retained for the duration of consent plus 1 year after opt-out to demonstrate compliance with consent obligations.
• Technical log data: Typically retained for 90 days for security monitoring and fraud detection purposes.

When data reaches the end of its retention period and is no longer required by law, phwin 23 securely deletes or anonymises it. Anonymised data — from which you cannot be identified — may be retained indefinitely for statistical and analytical purposes.

phwin 23 implements technical and organisational security measures designed to protect your personal data from unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS/SSL encryption: All data transmitted between your device and phwin 23 servers is encrypted using industry-standard TLS protocols.
• Encryption at rest: Sensitive personal data stored in phwin 23 databases is encrypted at rest.
• Access controls: Strict role-based access controls ensure that only authorised phwin 23 employees and systems can access personal data, and only to the extent required for their job function.
• Two-factor authentication (2FA): phwin 23 provides 2FA options to strengthen account security. We recommend all players enable 2FA on their accounts.
• Regular security audits: phwin 23 conducts regular internal and third-party security assessments of its platform infrastructure.
• Incident response: phwin 23 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights, we will notify the National Privacy Commission (NPC) and affected players within the timeframes required by the Data Privacy Act of 2012.

While phwin 23 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account secure — use a strong, unique password, don't share your credentials, and contact us immediately if you suspect unauthorised access to your phwin 23 account.

phwin 23 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse platform usage, and deliver relevant content. A cookie is a small text file stored on your device when you visit phwin 23. You can control cookies through your browser settings, though disabling certain cookies may affect platform functionality.

phwin 23 does not use third-party advertising cookies or share cookie data with advertising networks. Analytics tools we use operate on anonymised, aggregated data and do not identify you personally in analytical reports.

As a Filipino player on phwin 23, you have the following rights over your personal data under the Data Privacy Act of 2012 (RA 10173). To exercise any of these rights, contact our Data Protection Officer at support@phwin23.xyz with the subject line "Data Rights Request."

phwin 23 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under 18 years of age. Registration is conditional on confirming you are at least 18, and phwin 23 conducts age verification checks as part of the account opening process.

If phwin 23 discovers that personal data has been collected from a person under 18, the account will be immediately suspended and all data related to that account will be deleted, except where retention is required for regulatory compliance in connection with the investigation. If you are a parent or guardian and believe your child may have accessed phwin 23, please contact us at support@phwin23.xyz immediately so we can act swiftly.

phwin 23 sends marketing communications — including promotional offers, bonus notifications, new game announcements, and platform updates — only to players who have explicitly opted in to receive them. You can manage your marketing preferences at any time through your phwin 23 account settings under "Communication Preferences."

• Marketing emails: Opt out by clicking "Unsubscribe" in any marketing email or via account settings.
• SMS promotions: Opt out by replying STOP to any phwin 23 promotional SMS or via account settings.
• In-platform notifications: Managed through your notification settings in the phwin 23 app or website.

Opting out of marketing communications does not affect your ability to receive essential service communications — such as account security alerts, deposit confirmation messages, withdrawal notifications, and support responses. These are sent regardless of your marketing preferences as they are necessary for the operation of your account.

phwin 23 may update this Privacy Policy from time to time to reflect changes in our data practices, Philippine law, or platform operations. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the phwin 23 platform for at least 14 days after the change takes effect.
• Send an email notification to registered players for significant changes that materially affect their rights.

We encourage you to review this Privacy Policy periodically. Continued use of phwin 23 after the effective date of any changes constitutes your acceptance of the updated policy. If you disagree with material changes, you may close your account by contacting our support team.

If you have questions about this Privacy Policy, want to exercise your data rights, or have a privacy-related concern about how phwin 23 handles your personal information, please reach out to our Data Protection Officer directly.

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phwin 23 has not complied with its obligations under the Data Privacy Act of 2012. We'd always prefer you contact us first so we can resolve any concern directly, but we fully respect your right to escalate to the NPC if needed.