phiwn Privacy Policy

1. Information We Collect

phiwn collects various categories of personal information from Filipino players to provide online casino and gaming services, ensure regulatory compliance, prevent fraud, and improve user experience. The information we collect includes:

1.1 Registration and Account Information

When you create a phiwn account, we collect:

• Personal Identifiers: Full legal name, date of birth, gender, nationality, and government-issued identification numbers as required for age verification and compliance with Philippine gaming regulations.
• Contact Information: Email address, mobile phone number registered in the Philippines, and current residential address within the Philippines including barangay, city/municipality, and province.
• Authentication Credentials: Username, password (stored in encrypted format), and security questions/answers for account protection.
• Verification Documents: Copies of government-issued identification cards (Philippine passport, driver's license, UMID, PhilSys ID, or voter's ID), utility bills, bank statements, or other documents required for identity verification and anti-money laundering compliance.

1.2 Financial and Transaction Information

To process deposits, withdrawals, and financial transactions, we collect:

• Payment Method Details: GCash mobile number, PayMaya account information, bank account details for Philippine banks (account number, account name, bank branch), and other payment processor credentials required to facilitate transactions.
• Transaction History: Complete records of all deposits, withdrawals, wagers, wins, losses, bonuses claimed, and bonus usage patterns including transaction amounts, dates, times, and payment method used.
• Financial Documentation: Source of funds verification documents, bank statements, proof of income, or employment verification as required under anti-money laundering regulations.

1.3 Gaming and Behavioral Data

To operate gaming services and provide personalized experiences, we collect:

• Gaming Activity: Complete logs of all games played, wagers placed, betting patterns, game outcomes, session durations, favorite games, playing frequency, and gaming preferences across slots, live casino, sports betting, and other products.
• Account Activity: Login times and frequencies, session durations, features accessed, bonuses activated, promotional campaigns participated in, customer support interactions, and self-exclusion or limit-setting actions.
• Risk and Fraud Indicators: Betting patterns analyzed for suspicious activity, duplicate account checks, IP address correlation, device fingerprinting for fraud prevention, and behavioral analytics to detect problem gambling indicators.

1.4 Technical and Device Information

When you access phiwn services, we automatically collect technical data including:

• Device Information: Device type (mobile, tablet, desktop), operating system and version, browser type and version, screen resolution, device identifiers, and hardware specifications.
• Network and Location Data: IP address, geolocation data (country, region, city level derived from IP address), internet service provider, and mobile network operator to verify location within the Philippines and comply with geographic restrictions.
• Usage Analytics: Pages visited, features used, click patterns, navigation paths, time spent on pages, errors encountered, and application performance metrics.

1.5 Communications and Support Data

When you communicate with phiwn, we collect:

• Customer Support Records: Live chat transcripts, email correspondence, phone call recordings (with notification and consent), support ticket histories, complaint details, and resolutions provided.
• Marketing Preferences: Communication preferences, email subscription status, SMS opt-in/opt-out status, and promotional code usage.
• Feedback and Surveys: Survey responses, product reviews, satisfaction ratings, and any other voluntary feedback provided to phiwn.

2. How We Use Your Information

phiwn processes the personal information collected for the following legitimate business purposes and legal obligations:

2.1 Account Management and Service Provision

• Creating, maintaining, and securing player accounts on the phiwn platform
• Processing account registrations and identity verification procedures
• Authenticating users during login and account access
• Providing access to casino games, sports betting, live dealer games, and other gaming products
• Managing account balances, transaction histories, and gaming records
• Enabling communication between phiwn and players regarding account matters

2.2 Financial Transaction Processing

• Processing deposits from GCash, PayMaya, Philippine banks, and other payment methods
• Executing withdrawal requests and transferring funds to player-designated accounts
• Recording and reconciling all financial transactions
• Preventing fraudulent transactions and payment fraud detection
• Complying with financial reporting and audit requirements

2.3 Regulatory Compliance and Legal Obligations

• Verifying player age to ensure compliance with 21+ age restriction requirements
• Conducting Know Your Customer (KYC) verification as required under Philippine Anti-Money Laundering Act
• Implementing Customer Due Diligence (CDD) procedures for high-value transactions
• Reporting suspicious transactions to the Anti-Money Laundering Council (AMLC)
• Maintaining records as required by gaming regulations and tax authorities
• Responding to lawful requests from law enforcement, courts, and regulatory agencies

2.4 Fraud Prevention and Security

• Detecting and preventing fraudulent activities, multiple account abuse, and bonus exploitation
• Monitoring for collusion, cheating, and unfair gaming practices
• Implementing security measures to protect player accounts from unauthorized access
• Verifying authenticity of identity documents and preventing identity theft
• Conducting investigations into suspicious activities or terms violations

2.5 Responsible Gaming Protection

• Implementing deposit limits, loss limits, and session time limits requested by players
• Processing self-exclusion requests and maintaining exclusion periods
• Monitoring gaming behavior for problem gambling indicators
• Providing access to responsible gaming tools and resources
• Complying with player protection obligations under Philippine gaming regulations

2.6 Marketing and Promotional Communications

• Sending promotional offers, bonus notifications, and special campaigns via email and SMS (with consent)
• Personalizing marketing communications based on gaming preferences and activity
• Notifying players about new games, features, and platform updates
• Administering loyalty programs, VIP rewards, and player incentives
• Conducting market research and player satisfaction surveys

2.7 Service Improvement and Analytics

• Analyzing user behavior to improve platform functionality and user experience
• Optimizing website and mobile app performance
• Developing new games, features, and services based on player preferences
• Conducting A/B testing and product development research
• Generating aggregated and anonymized statistical reports

3. Legal Basis for Processing

Under the Data Privacy Act of 2012 and applicable Philippine data protection regulations, phiwn processes personal information based on the following legal grounds:

3.1 Contractual Necessity

Processing is necessary to perform our contractual obligations under the phiwn Terms and Conditions, including account creation, service provision, financial transactions, and fulfillment of gaming services requested by players.

3.2 Legal Obligations

Processing is required to comply with Philippine legal requirements including age verification laws, anti-money laundering regulations, tax reporting obligations, gaming license conditions, and court orders or lawful requests from authorities.

3.3 Legitimate Interests

Processing is necessary for phiwn's legitimate business interests including fraud prevention, security protection, network and information security, business analytics, service improvement, and direct marketing, provided such processing does not override the fundamental rights and freedoms of data subjects.

3.4 Consent

For certain processing activities such as marketing communications, optional data collection, and cookie usage beyond strictly necessary purposes, phiwn relies on explicit, freely given, and informed consent which players may withdraw at any time.

4. Data Sharing and Third Parties

phiwn may share personal information with third parties under the following circumstances and subject to appropriate safeguards:

4.1 Service Providers and Business Partners

We share data with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: GCash, PayMaya, banking partners, and payment gateway providers to facilitate deposits and withdrawals
• Gaming Software Providers: Casino game developers, sports betting data suppliers, and live dealer studios
• Identity Verification Services: KYC verification providers, document authentication services, and fraud detection systems
• Customer Support Platforms: Live chat software, helpdesk systems, and CRM platforms
• Marketing and Analytics Tools: Email marketing services, analytics platforms, and advertising networks (with consent)
• Cloud Infrastructure Providers: Hosting services, data storage providers, and content delivery networks

All service providers are contractually bound to protect data confidentiality and use information only for authorized purposes.

4.2 Regulatory and Legal Disclosures

phiwn may disclose personal information to:

• Philippine Amusement and Gaming Corporation (PAGCOR) and other gaming regulators
• Anti-Money Laundering Council (AMLC) for suspicious transaction reporting
• Bureau of Internal Revenue (BIR) for tax compliance and withholding tax reporting
• Law enforcement agencies pursuant to valid legal processes such as subpoenas, court orders, or search warrants
• Government authorities investigating potential violations of Philippine laws

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, personal information may be transferred to the acquiring entity, provided the new controller maintains equivalent privacy protections.

4.4 Aggregated and Anonymized Data

phiwn may share aggregated, de-identified, or anonymized data that cannot reasonably identify individual players with business partners, advertisers, researchers, or the public for industry analysis, market research, or promotional purposes.

5. International Data Transfers

While phiwn primarily serves Filipino players and stores data within the Philippines or with service providers maintaining Philippine data centers, certain technical services may involve data transfers outside the Philippines. When international transfers occur, phiwn ensures adequate protection through:

• Selecting service providers with strong data protection practices and certifications
• Implementing contractual data protection clauses meeting Philippine adequacy standards
• Conducting privacy impact assessments for cross-border data flows
• Ensuring compliance with National Privacy Commission guidelines on international transfers

6. Data Security Measures

phiwn implements comprehensive organizational and technical security measures to protect personal information against unauthorized access, alteration, disclosure, or destruction:

6.1 Technical Security Controls

• Encryption: 256-bit SSL/TLS encryption for data transmission and AES-256 encryption for sensitive data at rest
• Access Controls: Role-based access restrictions, multi-factor authentication for staff accounts, and principle of least privilege
• Network Security: Firewalls, intrusion detection systems, DDoS protection, and regular security audits
• Secure Development: Security code reviews, vulnerability testing, and regular security patches
• Data Anonymization: Pseudonymization and anonymization of data where full identification is not necessary

6.2 Organizational Security Measures

• Employee training on data protection and confidentiality obligations
• Background checks and non-disclosure agreements for staff with data access
• Incident response procedures and breach notification protocols
• Regular security audits and third-party penetration testing
• Data protection impact assessments for new processing activities

6.3 Data Breach Response

In the event of a personal data breach that poses a risk to player rights and freedoms, phiwn will notify affected individuals and the National Privacy Commission within seventy-two (72) hours of discovering the breach, as required by the Data Privacy Act.

7. Data Retention and Deletion

phiwn retains personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements.

7.1 Retention Periods

Data Category	Retention Period	Basis
Account and Registration Data	Duration of active account + 5 years	Gaming regulations, AML compliance
Financial Transaction Records	5 years from transaction date	Tax laws, AML regulations
Gaming Activity Logs	5 years from last activity	Regulatory requirements, dispute resolution
KYC Verification Documents	5 years from account closure	Anti-Money Laundering Act
Marketing Communications	Until consent withdrawn + 1 year	Consent management, opt-out processing
Customer Support Records	3 years from interaction date	Dispute resolution, service improvement

7.2 Data Deletion

Upon expiration of retention periods or upon receiving valid deletion requests (subject to legal retention requirements), phiwn securely deletes personal information using irreversible deletion methods including data wiping and cryptographic erasure. Backup copies are deleted according to backup retention schedules.

8. Your Privacy Rights

Under the Data Privacy Act of 2012, Filipino players have the following rights regarding their personal information:

8.1 Right to Access

You have the right to request confirmation of whether phiwn processes your personal data and to obtain a copy of your data in a commonly used, machine-readable format. Access requests are fulfilled within fifteen (15) business days.

8.2 Right to Correction

You may request correction of inaccurate or incomplete personal data. Account information can be updated directly through your account settings, or by contacting customer support for verification and manual updates.

8.3 Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes collected, processing is based on consent which has been withdrawn, you object to processing and no overriding legitimate grounds exist, or data has been unlawfully processed. This right is subject to legal retention obligations.

8.4 Right to Object

You may object to processing based on legitimate interests, including direct marketing. Upon receiving an objection to marketing, phiwn will cease such processing immediately. Objections to other processing will be evaluated on a case-by-case basis.

8.5 Right to Data Portability

You have the right to receive personal data you provided to phiwn in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.

8.6 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

8.7 Right to Lodge Complaints

You have the right to lodge complaints with phiwn's Data Protection Officer or with the National Privacy Commission if you believe your privacy rights have been violated.

8.8 Exercising Your Rights

To exercise any privacy rights, contact phiwn's Data Protection Officer at [email protected] with your full name, account username, and specific request details. We may require identity verification before processing requests.

9. Cookies and Tracking Technologies

phiwn uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content.

9.1 Types of Cookies Used

• Essential Cookies: Necessary for platform functionality, account authentication, security, and session management
• Performance Cookies: Collect anonymized data on how players use the platform to improve performance and user experience
• Functional Cookies: Remember preferences, language settings, and personalization choices
• Marketing Cookies: Track user behavior across sites to deliver targeted advertising (requires consent)

9.2 Managing Cookie Preferences

Players can manage cookie preferences through browser settings or phiwn's cookie consent manager. Disabling essential cookies may affect platform functionality. Third-party cookies from service providers are subject to those providers' privacy policies.

10. Marketing Communications

phiwn sends promotional communications to players who have provided consent or based on legitimate interest where permitted by law. Marketing messages include bonus offers, new game announcements, tournaments, loyalty rewards, and platform updates.

10.1 Opting Out

Players may opt out of marketing communications at any time by:

• Clicking "unsubscribe" links in promotional emails
• Replying "STOP" to SMS marketing messages
• Adjusting communication preferences in account settings
• Contacting customer support to request removal from marketing lists

Opt-out requests are processed within forty-eight (48) hours. Note that account-related communications (transaction confirmations, security alerts, regulatory notices) cannot be opted out of as they are necessary for service provision.

11. Children's Privacy

phiwn services are intended exclusively for individuals aged twenty-one (21) years and older. We do not knowingly collect personal information from minors under the age of twenty-one. If phiwn becomes aware that a person under the legal gambling age has provided personal information or created an account, we will immediately delete such data and permanently close the account. Parents or guardians who believe a minor has provided information to phiwn should contact our Data Protection Officer immediately.

12. Changes to Privacy Policy

phiwn reserves the right to modify this Privacy Policy at any time to reflect changes in data processing practices, legal requirements, or business operations. Material changes will be communicated to players via email, on-site notifications, or prominent announcements thirty (30) days before taking effect. The "Effective Date" at the top of this document indicates when the policy was last updated. Continued use of phiwn services after changes take effect constitutes acceptance of the updated Privacy Policy.

13. Contact and Data Protection Officer

For privacy-related inquiries, data subject requests, complaints, or questions about this Privacy Policy, please contact: