Privacy Policy

1. Introduction

phwin8 is committed to protecting the privacy and personal data of all players and visitors who use our online gaming platform. This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as the guidelines issued by the National Privacy Commission (NPC) of the Philippines.

This policy applies to all personal information collected through phwin8.app, our mobile applications, customer support channels, and any other services we provide. It covers how we collect your data, what we do with it, who we share it with, how long we keep it, and what rights you have over your own information.

phwin8 acts as the Personal Information Controller (PIC) for all personal data collected through our platform. We take this responsibility seriously and have implemented appropriate technical and organizational measures to ensure your data is handled with care, integrity, and confidentiality.

If you have questions about this policy or how phwin8 handles your personal data, please refer to the contact details in Section 14 of this document.

2. Personal Data We Collect

phwin8 collects personal data that is necessary to provide our gaming services, comply with legal obligations, and improve the player experience. The categories of data we collect include:

We collect this data through the following means:

• Direct interactions: Information you provide when registering, completing KYC verification, making deposits or withdrawals, or contacting customer support.
• Automated technologies: Technical and usage data collected automatically when you access and use the phwin8 platform, including through cookies and similar tracking technologies.
• Third parties: Identity verification data from KYC service providers, fraud prevention data from security partners, and payment data from payment processors.

3. How We Use Your Personal Data

phwin8 uses your personal data only for legitimate purposes that are necessary to operate our platform and comply with applicable law. The specific purposes for which we use your data are as follows:

• Account Registration and Management: To create and maintain your phwin8 player account, verify your identity and age (21+ requirement), and manage your account settings and preferences.
• Service Delivery: To provide access to our games, process your bets, credit winnings to your account, and deliver the full range of phwin8 gaming services.
• Financial Transactions: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to maintain accurate financial records.
• Identity Verification and KYC: To verify your identity, age, and payment method ownership as required by our licensing obligations and anti-money laundering (AML) regulations.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our live chat and support channels.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, and other prohibited conduct on the phwin8 platform.
• Legal and Regulatory Compliance: To comply with applicable Philippine laws, PAGCOR-aligned regulatory requirements, AML obligations, and any lawful requests from government authorities.
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the performance, features, and user experience of the phwin8 platform.
• Responsible Gaming: To monitor gaming behavior, identify signs of problem gambling, and administer self-exclusion or deposit limit requests in accordance with our responsible gaming commitments.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your consent to receive such communications. You may opt out at any time.

phwin8 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phwin8 must have a lawful basis for processing your personal data. We rely on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to provide the phwin8 gaming services you have registered for, including account management, game access, and financial transactions.
• Legal Obligation: Processing that is required to comply with applicable Philippine laws and regulations, including AML obligations, KYC requirements, and any lawful orders from regulatory or law enforcement authorities.
• Legitimate Interests: Processing that is necessary for our legitimate business interests, such as fraud prevention, platform security, and improving our services — provided these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Disclosure

phwin8 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and identity verification service providers who assist us in verifying your identity and age as required by our compliance obligations.
• Game Providers: Licensed third-party game software providers whose games are available on the phwin8 platform. These providers may receive limited technical data necessary to deliver their games.
• Fraud Prevention and Security Partners: Third-party security and fraud detection services that help us protect the phwin8 platform and our players from fraudulent activity.
• IT and Infrastructure Providers: Cloud hosting, data storage, and technical infrastructure providers who process data on our behalf under strict data processing agreements.
• Regulatory and Law Enforcement Authorities: Government agencies, regulators, law enforcement bodies, and courts where we are required by law to disclose your information, or where disclosure is necessary to protect the rights, property, or safety of phwin8, our players, or the public.
• Professional Advisors: Legal counsel, auditors, and other professional advisors who require access to your data in the course of providing services to phwin8, subject to professional confidentiality obligations.

All third parties with whom we share personal data are required to handle it in accordance with applicable data protection laws and our data processing agreements. We do not permit our third-party service providers to use your personal data for their own purposes.

6. Cookies and Tracking Technologies

phwin8 uses cookies and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and support security functions. The types of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the phwin8 platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled.
• Performance and Analytics Cookies: These cookies collect anonymized information about how players use the phwin8 platform, such as which pages are visited most frequently and whether error messages are received. This data helps us improve platform performance.
• Functional Cookies: These cookies allow the phwin8 platform to remember your preferences, such as your preferred language or display settings, to provide a more personalized experience.
• Marketing and Targeting Cookies: These cookies may be used to deliver relevant promotional content and offers. They are only placed with your consent and can be disabled at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phwin8 platform. For more information on how to manage cookies, refer to your browser's help documentation.

7. Data Retention

phwin8 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general data retention practices are as follows:

• Account Data: Retained for the duration of your active account and for a period of at least five (5) years following account closure, as required by AML regulations and our licensing obligations.
• Transaction Records: Financial transaction records, including deposit and withdrawal history and bet records, are retained for a minimum of five (5) years in accordance with Philippine financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for the duration of your account and for five (5) years after account closure.
• Customer Support Records: Communications with our customer support team are retained for up to three (3) years from the date of the interaction.
• Technical and Usage Data: Log files and technical data are typically retained for up to twelve (12) months, unless a longer retention period is required for security or legal purposes.
• Marketing Data: Data used for marketing communications is retained until you withdraw your consent or opt out of marketing, after which it is deleted or anonymized.

When personal data is no longer required, phwin8 will securely delete or anonymize it in accordance with our data disposal procedures.

8. Data Security

phwin8 takes the security of your personal data seriously. We have implemented a range of technical and organizational security measures to protect your information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the phwin8 platform is encrypted using industry-standard SSL/TLS protocols.
• Secure Data Storage: Personal data is stored on secure servers with restricted access controls, firewalls, and intrusion detection systems.
• Access Controls: Access to personal data within phwin8 is restricted to authorized personnel who require it to perform their job functions, and is subject to strict confidentiality obligations.
• Payment Security: Financial transactions are processed through certified payment processors. phwin8 does not store full bank account numbers, card numbers, or GCash/PayMaya PINs on our servers.
• Regular Security Audits: We conduct regular security assessments and vulnerability testing to identify and address potential security risks.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, phwin8 will notify the National Privacy Commission (NPC) and affected individuals in accordance with the requirements of the Data Privacy Act of 2012.

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. You are also responsible for keeping your phwin8 login credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

9. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phwin8:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, stored, and shared by phwin8, as described in this Privacy Policy.
• Right to Access: You have the right to request a copy of the personal data that phwin8 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that phwin8 holds about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that phwin8 has violated your data privacy rights.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 14. We will respond to all verified requests within thirty (30) days, as required by the Data Privacy Act of 2012.

10. Children's Privacy and Age Restriction

The phwin8 platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law governing casino-style gambling activities. phwin8 does not knowingly collect personal data from individuals under the age of 21.

During registration, we require all players to confirm that they are at least 21 years of age and to provide a date of birth. We may request government-issued identification to verify age at any time. If we discover that a player has provided false age information and is under 21, we will immediately suspend the account, void any associated transactions, and delete the personal data of the underage individual in accordance with applicable law.

If you are a parent or guardian and believe that your child has registered on the phwin8 platform, please contact us immediately at the details provided in Section 14 so that we can take appropriate action.

11. Third-Party Services and Links

The phwin8 platform integrates with third-party services, including game providers, payment processors, and analytics tools, to deliver our services. These third parties operate under their own privacy policies and data protection practices.

phwin8 is not responsible for the privacy practices of third-party service providers. However, we carefully select our partners and require them to maintain appropriate data protection standards through contractual data processing agreements.

The phwin8 platform does not contain links to external third-party websites for general browsing purposes. All navigation within the phwin8 platform remains within our own domain and services.

12. International Data Transfers

phwin8 primarily processes and stores personal data within the Philippines. In some cases, personal data may be transferred to and processed in countries outside the Philippines — for example, where our game providers or technical infrastructure partners operate servers in other jurisdictions.

Where such international transfers occur, phwin8 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to maintain data protection standards equivalent to those required under Philippine law.

By using the phwin8 platform, you consent to the transfer of your personal data to other countries where necessary for the provision of our services, subject to the safeguards described above.

13. Changes to This Privacy Policy

phwin8 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform features. When we make material changes, we will update the "Last Updated" date at the top of this page and may notify registered players via email or through a notice on the phwin8 platform.

We encourage you to review this Privacy Policy periodically to stay informed about how phwin8 protects your personal data. Your continued use of the phwin8 platform following the posting of any changes constitutes your acknowledgment of the updated policy.

If any changes to this Privacy Policy materially affect how we use your personal data in a way that requires your consent, we will seek your consent before implementing those changes.

14. Contact Us and Data Protection Officer

phwin8 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact us through the following channels:

• Data Protection Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 on the phwin8 platform
• Response Time: We aim to respond to all data privacy requests within 30 days of receipt.

If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines.