phwin23 Privacy Policy – How We Handle Your Personal Data

1. Who We Are and Who This Policy Applies To

phwin23 ("phwin23", "we", "us", "our") operates the online gaming platform accessible at phwin23.best. We are the data controller responsible for the personal information you provide when you register, deposit, play, or otherwise interact with the phwin23 platform.

This Privacy Policy applies to all registered members and visitors of the phwin23 platform, with a primary focus on players based in the Philippines. It covers all personal data processed in connection with your phwin23 account and use of the platform's services — including sports betting, esports betting, sabong, Tongits, fishing games, and all other features.

phwin23 operates in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations issued by the National Privacy Commission (NPC). Where applicable, we also align with international data protection standards.

2. Personal Data We Collect

phwin23 collects personal data through your registration process, your activity on the platform, and the devices and connections you use to access our services. Here is a breakdown of the categories of data we collect and why each is necessary:

2.1 Data We Do Not Collect

phwin23 does not collect sensitive personal data such as your racial or ethnic origin, political opinions, religious beliefs, health records (except where voluntarily disclosed in relation to a responsible gaming request), or biometric data beyond what is necessary for identity verification.

phwin23 does not store complete payment card numbers. When you provide card details for a deposit, that transaction is processed by a certified payment processor and phwin23 retains only a truncated reference — never the full card number or CVV.

3. How phwin23 Uses Your Personal Data

Every use of your personal data by phwin23 is tied to a specific, legitimate purpose. We do not use your data for anything beyond what is described below:

3.1 Account Management and Platform Access

Your identity and contact data are used to create and maintain your phwin23 account, verify your login, send OTP codes, and communicate important account updates. Without this data, we cannot provide you with a personalised, secure account.

3.2 Transaction Processing

Your financial data is used to process deposits, execute withdrawals to your GCash, Maya, or bank account, and maintain a transaction history that you can review at any time. phwin23 is required by anti-money laundering regulations to maintain records of all financial transactions on the platform.

3.3 Identity Verification and Fraud Prevention

phwin23 uses your identity documents and technical data to verify that you are who you say you are, that you meet the minimum age requirement, and that your account is not being used for fraudulent purposes. This processing is required by law and is a condition of maintaining an account on the platform.

3.4 Responsible Gaming Monitoring

Your usage data — including gaming frequency, session duration, and deposit patterns — is monitored by phwin23's responsible gaming system. This monitoring exists to protect you: it allows us to identify patterns that may indicate problematic gambling behaviour and to intervene proactively with support tools or resources.

3.5 Platform Improvement and Analytics

Aggregated and anonymised usage data helps phwin23 understand how the platform is used, which features are popular, and where improvements can be made. This data does not identify you personally after aggregation and is used solely to improve the phwin23 experience for all Filipino players.

3.6 Marketing Communications

With your consent, phwin23 may send you information about promotions, new games, and platform updates via SMS, email, or in-app notification. You can withdraw this consent at any time through your account settings or by contacting support. See Section 11 for full details on marketing preferences.

4. Legal Basis for Processing Your Data

Under the Philippine Data Privacy Act, phwin23 must have a valid legal basis for each type of personal data processing we undertake. Here are the bases we rely on:

• Contractual Necessity: Processing required to fulfil our obligations under your phwin23 account agreement — account creation, payment processing, bet settlement, and support.
• Legal Obligation: Processing required to comply with applicable Philippine law, including anti-money laundering regulations (AMLA), KYC requirements, and data retention mandates.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring — where our interests in maintaining a safe, fair platform are balanced against your privacy rights.
• Consent: Processing for optional purposes such as marketing communications, where you have actively opted in. Consent can be withdrawn at any time without affecting your account.

5. How We Share Your Data

phwin23 shares personal data only where necessary and only with parties who are contractually bound to protect it. We do not sell, rent, or trade your personal information.

5.1 Service Providers

We share data with carefully selected third-party service providers who help us operate the platform. These include:

• Payment processors (GCash, Maya, BDO, BPI partner networks) — for transaction processing
• KYC and identity verification providers — for age and identity checks
• Fraud detection and cybersecurity services — for platform security
• Cloud hosting and infrastructure providers — for data storage and platform operation
• Customer support software providers — for live chat and ticketing

All service providers are required to process your data only as instructed by phwin23 and to maintain appropriate security measures. They are not permitted to use your data for their own purposes.

5.2 Legal and Regulatory Authorities

phwin23 will disclose personal data to Philippine law enforcement agencies, regulatory bodies, or courts where required by law — for example, in response to a valid court order, a subpoena, or a regulatory investigation. We will notify you of any such disclosure where permitted to do so by law.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets involving phwin23, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

6. How Long We Keep Your Data

phwin23 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to legal minimum retention requirements. Here is a general guide to our retention periods:

• Account data (active accounts): Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by applicable financial and anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act (RA 9160 as amended).
• KYC verification documents: Retained for the same period as transaction records, or as directed by the relevant regulatory authority.
• Support and communications records: Retained for three (3) years from the date of the last communication, to support dispute resolution and quality assurance.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year for compliance record-keeping.

After the relevant retention period, data is securely deleted or anonymised in a way that makes re-identification impossible.

7. How We Protect Your Personal Data

phwin23 takes data security seriously. We implement a combination of technical, organisational, and administrative safeguards to protect your personal information from unauthorised access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All data transmitted between your browser and phwin23 servers is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser address bar.
• Password Hashing: Your account password is never stored in plain text. phwin23 uses strong cryptographic hashing algorithms to protect password data at rest.
• Access Controls: Access to personal data within phwin23 is restricted on a need-to-know basis. Staff members access only the data necessary to perform their specific role.
• Two-Factor Authentication: phwin23 uses OTP-based verification for account login and sensitive account actions, adding a layer of security beyond your password.
• Regular Security Audits: The phwin23 platform undergoes periodic security assessments to identify and address vulnerabilities before they can be exploited.
• Data Breach Response: In the event of a confirmed data breach that affects your personal information, phwin23 will notify you and the National Privacy Commission within the timeframes required by Philippine law.

8. Cookies and Tracking Technologies

phwin23 uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience on the platform. A cookie is a small text file placed on your device when you visit a website. Here's how we use them:

Essential and security cookies cannot be disabled as they are necessary for the platform to function securely. You can manage your preferences for optional cookies through your account settings or your browser's cookie management tools. Note that disabling certain cookies may affect your experience on the platform.

9. Your Privacy Rights as a Filipino Player

Under the Philippine Data Privacy Act of 2012, you have specific rights regarding your personal data. phwin23 is committed to making these rights easy to exercise. Here is what you are entitled to:

To exercise any of these rights, contact phwin23 support via live chat or email at support@phwin23.best. We will acknowledge your request within 3 business days and respond fully within 30 days. Complex requests may take longer — we will notify you if this is the case.

10. Children's Privacy

phwin23 is strictly for adults aged 18 years and above. We do not knowingly collect personal data from anyone under 18 years old. Our registration process includes age verification steps specifically to prevent minor access.

If phwin23 becomes aware that personal data has been collected from a person under the age of 18, we will immediately close the associated account, delete all collected data to the extent permitted by law, and — where required — report the matter to the appropriate authorities.

If you are a parent or guardian and believe that your child has created a phwin23 account, please contact us immediately at support@phwin23.best so we can investigate and take appropriate action.

11. Marketing Communications and Your Preferences

phwin23 would like to keep you informed about promotions, new games, and platform updates that may be relevant to you as a Filipino player. We send marketing communications only to members who have given explicit consent to receive them.

11.1 Types of Marketing We May Send

• Promotional offers, bonus announcements, and limited-time events
• New game launches and feature updates
• Referral program updates and community news
• Personalised recommendations based on your game preferences

11.2 Managing Your Preferences

You can update your marketing preferences at any time through your phwin23 account settings, or by contacting support and requesting to be removed from marketing lists. Unsubscribing from marketing will not affect transactional communications — we will still send you account-related messages such as deposit confirmations, withdrawal notifications, and security alerts.

phwin23 will not send marketing messages to members who are self-excluded or who have an active cooling-off period. If you receive a promotional message while excluded, please contact support immediately.

12. Updates to This Privacy Policy

phwin23 reviews and updates this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or platform features. When material changes are made to this policy, we will notify registered members via email or a prominent notice on the phwin23 platform at least 7 days before the updated policy takes effect.

The most current version of this Privacy Policy is always available at phwin23.best/privacy-policy. The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of phwin23 after the effective date of any update constitutes acceptance of the revised policy.

If you do not agree with a material change to this Privacy Policy, your options are to exercise your rights under Section 9, or to close your account and request deletion of your data subject to the legal retention requirements described in Section 6.

13. Contact Us and Privacy Complaints

If you have any questions about this Privacy Policy, want to exercise your data rights, or want to raise a privacy-related complaint, please contact phwin23 through any of the following channels:

• Email: support@phwin23.best — mark your subject line "Privacy Request" for faster routing
• Live Chat: Available 24/7 via your phwin23 account dashboard — connect with a Filipino support agent immediately
• FAQ: Visit our FAQ page for answers to common questions about account and data management

phwin23 will acknowledge privacy requests within 3 business days and aims to resolve them within 30 days. For complex requests that require additional investigation or consultation with legal counsel, we will notify you of the extended timeline and expected resolution date.

If your complaint is not resolved to your satisfaction after going through phwin23's internal process, you have the right to escalate to the National Privacy Commission of the Philippines. phwin23 will cooperate fully with any NPC investigation.