phwin32 Privacy Policy

1 Who We Are

phwin32 (referred to in this Privacy Policy as "we," "us," "our," or "the Company") is a Philippines-focused online casino and sports betting platform operating at phwin32.net. phwin32 serves Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and throughout the Philippine archipelago, offering slots, live dealer games, bingo, sabong, and sports wagering.

phwin32 acts as the data controller for all personal data collected through the Platform. As data controller, we are responsible for determining the purposes and means of processing your personal data and for ensuring that such processing complies with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and all applicable PAGCOR regulatory requirements.

2 Scope of This Policy

This Privacy Policy applies to all personal data collected by phwin32 through the following channels:

• The phwin32 website at phwin32.net and all associated subdomains;
• The phwin32 mobile application, where available;
• Customer support interactions, including live chat, email, and telephone communications;
• Know Your Customer (KYC) and identity verification processes;
• Payment and financial transaction processing;
• Promotional campaigns, surveys, and competitions run by phwin32.

This Policy does not apply to third-party websites or services that may be linked from the phwin32 Platform. We are not responsible for the privacy practices of any third-party operators, payment processors, or game content providers beyond the scope described in Section 7 of this Policy.

3 Data We Collect

3.1 Identity and Registration Data

When you register a phwin32 account, we collect:

• Full legal name as it appears on your government-issued Philippine ID;
• Date of birth (to verify that you are 21 years of age or older);
• Residential address, including barangay, city or municipality, and province;
• Email address and mobile number;
• Username and encrypted account password.

3.2 KYC Verification Data

To comply with PAGCOR anti-money laundering requirements and to protect the integrity of the Platform, we collect:

• Copies of government-issued Philippine identification documents (e.g., PhilSys national ID, passport, driver's license, SSS/GSIS card, Voter's ID);
• Proof of residential address (e.g., utility bill, bank statement, barangay certificate);
• Selfie photographs for liveness verification where required;
• Source of funds documentation where triggered by transaction thresholds.

3.3 Financial and Transaction Data

We collect records of all financial transactions processed through your phwin32 account, including:

• Deposit and withdrawal amounts, dates, and methods (GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, PESONet, 7-Eleven);
• GCash and PayMaya registered mobile numbers (used for transaction reference matching only — full wallet credentials are not stored);
• Bank account names and numbers for bank transfer withdrawals;
• Transaction reference numbers and payment gateway confirmation codes.

3.4 Gaming and Behavioral Data

phwin32 collects data about how you use the Platform, including game history, wager amounts, session durations, login timestamps, device identifiers, and IP addresses. This data is used to detect fraud, comply with responsible gaming obligations, and improve the player experience.

3.5 Communications Data

When you contact phwin32 customer support — whether via live chat, email at [email protected], or any other channel — we retain records of that correspondence, including the content of your messages and any attachments, for quality assurance, training, and dispute resolution purposes.

4 How We Collect Your Data

phwin32 collects personal data through the following methods:

Collection Method	Examples
Direct submission	Registration forms, KYC document uploads, support messages, payment forms
Automated collection	Cookies, session tokens, IP address logging, device fingerprinting
Payment processors	Transaction confirmations from GCash, PayMaya, BPI, BDO, and other providers
KYC verification partners	Identity verification service providers used to validate Philippine government IDs
Fraud prevention systems	Device risk scoring, geolocation data, behavioral analytics

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phwin32 processes your personal data on the following legal grounds:

• Performance of a contract: Processing necessary to operate your phwin32 account, process deposits and withdrawals, and provide gaming services;
• Legal obligation: Processing required to comply with PAGCOR regulations, anti-money laundering laws, tax reporting obligations, and other applicable Philippine statutes;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming enforcement, and service improvement, where such interests are not overridden by your rights;
• Consent: Processing for optional marketing communications, where we have obtained your explicit consent at the point of collection. You may withdraw this consent at any time.

6 How We Use Your Data

phwin32 uses your personal data for the following specific purposes:

• Creating, verifying, and maintaining your phwin32 account;
• Processing deposits, withdrawals, and gaming transactions in Philippine Peso (PHP / ₱);
• Verifying your identity and age (21+) in compliance with PAGCOR requirements;
• Detecting and preventing fraud, money laundering, collusion, and bonus abuse;
• Providing 24/7 bilingual (English and Tagalog) customer support;
• Sending account-related transactional notifications (deposit confirmations, withdrawal status, security alerts);
• Sending promotional offers and bonus communications where you have consented to receive them;
• Enforcing responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion;
• Compiling anonymized statistical data to improve Platform performance and game offerings;
• Meeting reporting obligations to PAGCOR and other competent Philippine authorities.

7 Sharing Your Data

phwin32 does not sell your personal data. We share your data only in the following limited circumstances:

7.1 Service Providers

We engage carefully selected third-party service providers who process data on our behalf and under our instruction, including KYC verification providers, payment gateway operators (GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, PESONet), fraud detection services, cloud infrastructure providers, and customer support platform operators. All such providers are bound by data processing agreements that restrict their use of your data to the services they provide to phwin32.

7.2 Regulatory Authorities

phwin32 is obligated to disclose certain player data to PAGCOR and other competent Philippine government authorities — including the Anti-Money Laundering Council (AMLC) — where required by law or regulatory instruction. We will notify you of such disclosures where we are legally permitted to do so.

7.3 Legal Proceedings

We may disclose your personal data in response to a valid court order, subpoena, or other legal process issued by a Philippine court or competent authority. In such cases, we will disclose only the minimum data required to satisfy the legal obligation.

7.4 Business Transfers

In the event of a merger, acquisition, or transfer of substantially all of the assets of phwin32, your personal data may be transferred to the successor entity. You will be notified of any such transfer and of any resulting change to this Privacy Policy before it takes effect.

8 Cookies and Tracking Technologies

The phwin32 Platform uses cookies and similar tracking technologies to ensure proper platform functionality, remember your session preferences, detect fraudulent activity, and analyze aggregate usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Required for login session management, security token validation, and core platform functionality. These cannot be disabled without affecting your ability to use the Platform;
• Functional cookies: Remember your language preference, display settings, and responsible gaming tool configurations;
• Analytics cookies: Collect anonymized data about how players navigate the Platform to help us improve content and performance;
• Security and fraud prevention cookies: Used to detect and prevent bot activity, account takeover attempts, and fraudulent transactions.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from logging into your phwin32 account or accessing certain platform features.

9 Data Retention

phwin32 retains personal data for as long as your account is active and for a period thereafter as required by law or regulation. The following retention periods apply:

Data Category	Retention Period	Legal Basis
Account registration data	Duration of account + 5 years after closure	PAGCOR regulatory requirement
KYC verification documents	Duration of account + 5 years after closure	Anti-money laundering law (AMLA)
Financial transaction records	10 years from transaction date	AMLC reporting obligations
Customer support communications	3 years from last interaction	Legitimate interest / dispute resolution
Marketing consent records	Until consent is withdrawn + 1 year	Consent / legal compliance
Gaming activity logs	Duration of account + 3 years after closure	PAGCOR compliance / responsible gaming

After the applicable retention period expires, phwin32 will securely delete or irreversibly anonymize your personal data in accordance with its data disposal procedures.

10 Data Security

phwin32 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data stored in our database infrastructure;
• Multi-factor authentication (MFA) options for player accounts;
• Role-based access controls restricting staff access to personal data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• 24/7 automated intrusion detection and anomaly monitoring systems;
• Strict data processing agreements with all third-party service providers.

In the event of a personal data breach that is likely to adversely affect your rights, phwin32 will notify you and the National Privacy Commission (NPC) within the timeframes prescribed by the Philippine Data Privacy Act of 2012.

11 Your Rights Under Philippine Data Privacy Law

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by phwin32:

• Right to be informed: The right to know what personal data we collect, how it is used, and with whom it is shared;
• Right of access: The right to request a copy of the personal data we hold about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations under PAGCOR regulations and anti-money laundering law;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We will acknowledge your request within 3 business days and respond in full within 15 business days, in accordance with NPC guidelines.

12 Children and Minors

The phwin32 Platform is strictly restricted to individuals who are 21 years of age or older, in compliance with PAGCOR regulations. We do not knowingly collect personal data from any person under 21 years of age. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account and delete all related data without further notice.

Parents and guardians who believe that a minor may have registered an account on the phwin32 Platform are encouraged to contact us immediately at [email protected] so that we can investigate and take prompt corrective action.

13 Cross-Border Data Transfers

phwin32 primarily processes and stores personal data on server infrastructure located within or serving the Philippines. Where it is necessary to transfer your personal data to service providers operating outside the Philippines — for example, cloud infrastructure providers or international fraud detection systems — phwin32 ensures that such transfers are subject to appropriate safeguards in accordance with the Philippine Data Privacy Act of 2012 and NPC guidelines on cross-border data flows.

Such safeguards include contractual data protection clauses that require overseas recipients to provide a standard of data protection equivalent to that required under Philippine law. We do not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing such contractual protections.

14 Changes to This Privacy Policy

phwin32 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The effective date of the current version is displayed prominently at the top of this page.

Where changes are material — for example, where we introduce a new category of data collection or a new purpose for processing — we will notify registered players via the Platform notice board and, where applicable, by email to the address registered on your account, at least 14 days before the changes take effect. Continued use of the phwin32 Platform after the effective date of any revised Policy constitutes acceptance of the revised terms.

15 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a concern about how phwin32 handles your personal data, please contact our Data Protection Officer:

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 on the Platform — average response time 3–5 minutes
• Support Languages: English and Tagalog
• Response Time: Acknowledgment within 3 business days; full response within 15 business days

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines through the NPC's official complaint channels. phwin32 will cooperate fully with any NPC investigation.