Privacy Policy

This Privacy Policy ("Policy") describes how phlwin.pro ("the Platform," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "your," or "Player") who access or use the phlwin.pro website, mobile interface, games, and all related services (collectively, the "Services").

phlwin.pro is committed to protecting the privacy and personal data of all its players in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). We take our obligations as a personal information controller seriously and have implemented appropriate technical and organizational measures to safeguard your data.

By registering an account on phlwin.pro, accessing the Platform, or otherwise using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform and contact support to close your account.

For the purposes of the Philippine Data Privacy Act of 2012, phlwin.pro acts as the personal information controller in respect of the personal data collected through the Platform. This means we determine the purposes and means of processing your personal information.

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact our DPO at any time using the contact details provided in Section 15 of this Policy.

phlwin.pro collects the following categories of personal data from players:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — you must be 21 or older)
• Nationality and country of residence
• Residential address (barangay, city/municipality, province, ZIP code)
• Email address and mobile phone number

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys national ID)
• Proof of residential address (e.g., utility bill, bank statement dated within 90 days)
• Selfie or liveness check image for biometric verification where required
• Source of funds documentation where required by anti-money laundering regulations

3.3 Financial Data

• Deposit and withdrawal transaction records
• Payment method identifiers (e.g., GCash mobile number, bank account name — we do not store full card numbers)
• Account balance history

3.4 Gaming & Activity Data

• Game history, bet amounts, win/loss records, and session durations
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Login timestamps and access logs

3.6 Communications Data

• Records of your communications with phlwin.pro customer support (live chat transcripts, email correspondence)
• Survey responses and feedback you voluntarily provide

phlwin.pro collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically — through cookies, web beacons, and similar tracking technologies when you browse or use the Platform (see Section 8 for details).
• From third parties — including identity verification providers, payment processors (such as GCash and Maya), and fraud prevention services, where necessary to verify your identity or process transactions.
• From regulatory authorities — where we are required by PAGCOR or other Philippine regulatory bodies to obtain or verify information about you.

phlwin.pro uses your personal data for the following purposes:

phlwin.pro will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable Philippine law.

Under the Philippine Data Privacy Act of 2012, phlwin.pro processes your personal data on the following legal bases:

• Contractual necessity — processing is necessary to perform the contract between you and phlwin.pro (i.e., to provide the gaming services you have registered for).
• Legal obligation — processing is required to comply with applicable Philippine laws, including the Anti-Money Laundering Act (AMLA), PAGCOR regulations, and the Data Privacy Act itself.
• Legitimate interests — processing is necessary for phlwin.pro's legitimate interests, such as fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and freedoms.
• Consent — for certain processing activities, such as sending you marketing communications or processing sensitive personal information, we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

phlwin.pro does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors — GCash, Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your deposits and withdrawals.
• Identity verification providers — third-party KYC and AML service providers who assist us in verifying your identity and complying with anti-money laundering regulations.
• Game software providers — licensed game developers and live dealer studios whose games are available on the phlwin.pro platform, to the extent necessary to deliver the gaming experience.
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where required by law or regulatory mandate.
• Law enforcement — Philippine law enforcement agencies, where we are legally required or permitted to disclose information in connection with the investigation or prosecution of criminal offences.
• Professional advisers — lawyers, auditors, and accountants who provide professional services to phlwin.pro, subject to binding confidentiality obligations.

All third parties with whom we share personal data are required to process that data in accordance with applicable Philippine data protection law and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

phlwin.pro uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the Platform, remember your preferences, analyze usage patterns, and detect fraudulent activity. The following types of cookies are used:

• Strictly necessary cookies — essential for the Platform to function. These cannot be disabled as they are required for login sessions, security, and core functionality.
• Functional cookies — remember your preferences (such as language settings and responsible gaming limits) to provide a personalized experience.
• Analytics cookies — collect anonymized data about how players use the Platform to help us improve performance and user experience.
• Security cookies — used to detect and prevent fraudulent activity, unauthorized access, and bot traffic.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phlwin.pro platform. Strictly necessary and security cookies cannot be disabled without impairing your ability to use the Services.

phlwin.pro implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phlwin.pro platform
• Encryption of sensitive data at rest, including KYC documents and financial records
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Multi-factor authentication for administrative access to systems containing personal data
• Regular security audits, vulnerability assessments, and penetration testing
• Incident response procedures for detecting, reporting, and managing personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phlwin.pro will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.

phlwin.pro retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures. Anonymized data (which can no longer be linked to an identifiable individual) may be retained indefinitely for statistical and analytical purposes.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phlwin.pro. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 15.

phlwin.pro will respond to all valid data subject requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it.

phlwin.pro's Services are strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from persons under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and take appropriate steps to prevent recurrence. If you believe that a minor has registered on phlwin.pro, please contact our support team immediately.

In certain circumstances, phlwin.pro may transfer your personal data to recipients located outside the Republic of the Philippines — for example, to game software providers or identity verification services that operate internationally. Any such cross-border transfer of personal data will only be carried out where:

• The recipient country has been recognized by the National Privacy Commission as providing an adequate level of data protection; or
• Appropriate safeguards are in place, such as contractual clauses approved by the NPC or binding corporate rules; or
• The transfer is necessary for the performance of your contract with phlwin.pro (e.g., processing a payment through an international payment network).

phlwin.pro will not transfer your personal data to a foreign jurisdiction unless the transfer complies with the requirements of the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations.

phlwin.pro reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory guidance from the National Privacy Commission. When material changes are made, we will notify registered players by posting a prominent notice on the Platform or by sending an in-platform notification.

The revised Policy will take effect on the date specified in the notice. Your continued use of the phlwin.pro platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy. We encourage you to review this page periodically. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phlwin.pro, please contact our Data Protection Officer (DPO). We are committed to resolving all privacy-related inquiries promptly and transparently.

You may reach our DPO and support team via live chat on the Platform (available 24/7) or by email. Our support and privacy contact email address is: [email protected]

If you are not satisfied with our response to your privacy inquiry, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) through its official channels.

For questions about your account, responsible gaming tools, or self-exclusion, please visit our Responsible Gaming page or our FAQ section for more information.