phwincom Privacy Policy

1. Introduction and Scope

This Policy applies to all personal data collected by phwincom through the phwincom.club website, mobile-optimised platform, customer support channels, and any other services operated by phwincom. It applies to all registered players, prospective players, and visitors to the platform, regardless of whether they are located in Manila, Cebu, Davao, Quezon City, Makati, or any other part of the Philippines.

phwincom acts as the data controller for the personal information collected through the platform. Where phwincom engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by contractual obligations to handle your data securely and in accordance with this Policy.

This Policy should be read together with phwincom's Terms and Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between phwincom and its players.

2. Personal Data We Collect

phwincom collects personal data through several channels. The categories of data we collect include:

phwincom does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required by law or where you voluntarily provide such information in the context of responsible gaming support.

3. How We Use Your Personal Data

phwincom uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your phwincom player account, including verifying your identity and age (21+ requirement) during registration and KYC processes.
• Service Delivery: To provide access to phwincom's games, process deposits and withdrawals, and deliver the core gaming experience to Filipino players.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, and other illegal or prohibited activities on the platform.
• Regulatory Compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and gaming regulatory requirements.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through phwincom's 24/7 support team.
• Responsible Gaming: To monitor gaming behaviour, identify potential problem gambling patterns, and administer responsible gaming tools such as deposit limits, session reminders, and self-exclusion.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the phwincom platform, games, and user experience for Filipino players.
• Communications: To send you important account notifications, security alerts, and – where you have opted in – promotional communications about phwincom offers and new games.

4. Legal Basis for Processing

phwincom processes your personal data on the following legal grounds under the Data Privacy Act of 2012 and applicable regulations:

• Contractual Necessity: Processing is necessary to perform the contract between you and phwincom – specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including AML regulations, KYC requirements, and gaming regulatory obligations.
• Legitimate Interests: Processing is necessary for phwincom's legitimate interests, including fraud prevention, platform security, and improving our services, provided these interests are not overridden by your rights and interests.
• Consent: Where phwincom relies on your consent as the legal basis for processing – for example, for marketing communications – you have the right to withdraw that consent at any time by contacting us or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Data Sharing and Disclosure

phwincom does not sell, rent, or trade your personal data to third-party marketers under any circumstances. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard payment networks, to facilitate deposits and withdrawals. These providers are bound by their own privacy and security standards.
• Identity Verification Providers: Third-party KYC and AML screening services used to verify your identity and comply with regulatory obligations.
• Technology Partners: Cloud hosting providers, cybersecurity firms, and platform infrastructure partners who process data on phwincom's behalf under strict data processing agreements.
• Game Providers: Where games are supplied by third-party software providers, limited technical data (such as player session tokens) may be shared to facilitate gameplay. No personally identifiable information is shared beyond what is strictly necessary.
• Regulatory and Law Enforcement Authorities: Where required by applicable Philippine law, court order, or regulatory directive, phwincom may disclose personal data to government agencies, law enforcement bodies, or gaming regulators.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, where necessary and subject to professional confidentiality obligations.

Any third party that receives personal data from phwincom is contractually required to maintain appropriate technical and organisational security measures and to use the data only for the specified purpose.

6. Cookies and Tracking Technologies

phwincom uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and analyse platform usage. The types of cookies we use include:

• Essential Cookies: Required for the platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the phwincom platform, helping us identify areas for improvement. No personally identifiable information is included in analytics reports.
• Preference Cookies: Store your platform preferences, such as language settings and display options, so you do not need to re-enter them on each visit.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the phwincom platform. phwincom does not use cookies to serve third-party advertising.

7. Data Security

phwincom implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the phwincom platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls ensuring that phwincom staff can only access personal data necessary for their specific job functions.
• Regular security audits, vulnerability assessments, and penetration testing of the phwincom platform.
• Multi-factor authentication options for player accounts to prevent unauthorised access.
• Continuous monitoring of platform activity for suspicious behaviour and potential security incidents.
• Secure data centres with physical access controls and environmental safeguards.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phwincom will notify affected players and the relevant Philippine regulatory authority in accordance with applicable legal requirements. You will be informed of the nature of the breach, the data affected, and the steps phwincom is taking to address it.

8. Data Retention

phwincom retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable Philippine law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with phwincom, plus a minimum of five (5) years following account closure, as required by AML and gaming regulatory obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with Philippine financial record-keeping requirements.
• KYC Documents: Retained for the duration of your account plus five (5) years following closure, or longer if required by law.
• Customer Support Records: Retained for three (3) years from the date of the interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Preferences: Retained until you withdraw consent or request deletion, whichever is earlier.

When personal data is no longer required, phwincom will securely delete or anonymise it in accordance with industry best practices. Anonymised data that can no longer be linked to an individual may be retained indefinitely for statistical and analytical purposes.

9. Your Data Rights

Under the Data Privacy Act of 2012 and applicable regulations, you have the following rights with respect to your personal data held by phwincom:

• Right to Be Informed: You have the right to be informed about how phwincom collects and uses your personal data, as set out in this Policy.
• Right of Access: You may request a copy of the personal data phwincom holds about you at any time. phwincom will respond to access requests within 30 days.
• Right to Rectification: If any personal data phwincom holds about you is inaccurate or incomplete, you have the right to request correction. You may update most account details directly through your phwincom account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phwincom's legal obligations to retain certain data.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to phwincom's overriding legitimate grounds.
• Right to Data Portability: Where technically feasible, you may request that phwincom provide your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: If you believe phwincom has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, please contact phwincom's data protection team at [email protected]. phwincom may need to verify your identity before processing your request. We will respond to all valid requests within 30 calendar days.

10. Children's Privacy and Age Restriction

The phwincom platform is strictly intended for adults aged 21 years and older, in accordance with applicable Philippine gaming regulations. phwincom does not knowingly collect personal data from individuals under the age of 21.

During registration, phwincom requires players to confirm that they are at least 21 years of age. phwincom may request documentary proof of age at any time as part of its KYC process. If phwincom discovers that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated data will be deleted, and any balance will be handled in accordance with applicable regulations.

If you are a parent or guardian and believe that a minor has registered on the phwincom platform, please contact us immediately at [email protected].

11. Third-Party Links

The phwincom platform may contain links to third-party websites or services for informational purposes. phwincom is not responsible for the privacy practices or content of any third-party websites. This Privacy Policy applies solely to data collected by phwincom through the phwincom.club platform. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

phwincom reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, phwincom will notify registered players via email or a prominent notice on the platform. The "Last updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the phwincom platform following the posting of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated Policy, you must cease using the platform and may request account closure in accordance with our Terms and Conditions.

13. Contact and Data Protection Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way phwincom handles your personal data, please contact our data protection team:

• Email: [email protected]
• Subject Line: Privacy Enquiry – [Your Registered Username]
• Response Time: Within 30 calendar days for data rights requests; within 24 hours for general privacy enquiries
• Support Hours: 24 hours a day, 7 days a week

For complaints that cannot be resolved directly with phwincom, you may contact the National Privacy Commission of the Philippines through their official channels.