phwin25 Privacy Policy – How We Protect Your Personal Data

This Privacy Policy explains how phwin25 — the operator of phwin25.xyz — collects, stores, uses, and protects the personal information of players and visitors. phwin25 is committed to full compliance with Philippine Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations.

By accessing phwin25.xyz or registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use of the platform.

This policy applies to all personal data processed by phwin25 in connection with your use of the website, mobile platform, customer support channels, and any related services offered under the phwin25 brand.

phwin25 has appointed a Data Protection Officer (DPO) to oversee compliance with the DPA and to serve as your primary point of contact for any privacy-related concerns. Contact details are provided in Section 12 of this policy.

phwin25 collects personal data through various touchpoints during your use of the platform. The types of data collected depend on how you interact with phwin25 — registration, gaming activity, payment transactions, and customer support are the main sources.

phwin25 does not collect sensitive personal information as defined by the DPA (such as health or biometric data) unless specifically required for regulatory compliance and with your explicit consent. We collect only what is necessary for the purposes stated in this policy — nothing more.

Every piece of data phwin25 collects is used for a specific, legitimate purpose. We do not process your data for reasons that go beyond what is reasonably necessary to operate the platform and comply with our legal obligations.

Here is how your data is used at phwin25:

• Account Management: To create, verify, and maintain your phwin25 player account, including age and identity verification as required by Philippine gaming regulations.
• Service Delivery: To provide access to all games and services on phwin25, process your bets and wagers, and calculate and credit your winnings accurately.
• Payment Processing: To facilitate deposits and withdrawals via GCash, Maya, GrabPay, Coins.ph, InstaPay, bank transfers, and card payments — all in Philippine Peso.
• Regulatory Compliance: To fulfil our obligations under Philippine gaming laws, Anti-Money Laundering (AML) regulations, and the Data Privacy Act of 2012. This may include reporting certain transactions to relevant authorities as required by law.
• Security and Fraud Prevention: To monitor account activity for suspicious patterns, protect against unauthorised access, and investigate potential violations of our Terms and Conditions.
• Customer Support: To respond to your queries, resolve disputes, and provide assistance through our 24/7 support channels.
• Platform Improvement: To analyse usage patterns and player behaviour in aggregate form so we can improve the phwin25 platform, fix bugs, and develop new features.
• Responsible Gaming: To implement and monitor responsible gaming measures, including deposit limits, session controls, and self-exclusion tools.
• Marketing Communications: With your consent, to send you information about phwin25 promotions, tournaments, and platform updates. You can opt out at any time.

phwin25 does not use your data for automated decision-making that produces legal effects concerning you without human review, except where required by law or with your explicit consent.

phwin25 does not sell your personal data to any third party. Full stop. We share your data only in the following limited circumstances, and always with appropriate safeguards in place:

• Payment Service Providers: Financial data is shared with your chosen payment provider (e.g., GCash, Maya, BDO, BPI) only to the extent necessary to complete your transaction. These providers operate under their own privacy policies and data security standards.
• Identity Verification Partners: To meet our KYC (Know Your Customer) obligations under Philippine AML laws, phwin25 may share identity data with licensed verification service providers.
• Regulatory Authorities: phwin25 is required by law to report certain transactions and disclose player information to the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), and other competent Philippine government agencies when lawfully required.
• Technology Infrastructure: phwin25 uses trusted technology partners for platform hosting, security monitoring, and analytics. These partners process data on our behalf under strict data processing agreements and are not permitted to use your data for their own purposes.
• Legal Proceedings: phwin25 may disclose personal data to legal and law enforcement authorities when required to do so by a valid court order or applicable Philippine law.

phwin25 uses cookies and similar tracking technologies to improve your experience on the platform, maintain session security, and understand how the site is used. A cookie is a small data file stored on your browser or device when you visit phwin25.xyz.

The types of cookies used on phwin25 include:

• Essential Cookies: Required for the platform to function properly — these handle login sessions, security tokens, and basic site functionality. You cannot opt out of these without disabling the site entirely.
• Functional Cookies: Remember your preferences such as language settings and previously viewed game categories, making your return visits smoother.
• Analytics Cookies: Help us understand which pages and features are most used so we can improve phwin25. These collect data in aggregate and do not identify you personally.
• Security Cookies: Used to detect unusual login behaviour, protect against cross-site request forgery (CSRF), and flag potentially fraudulent activity.

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of phwin25. For most browsers, the settings are found under Privacy or Security in the browser menu.

phwin25 does not use third-party advertising cookies or tracking pixels for displaying ads on external websites.

phwin25 takes data security seriously and has implemented a range of technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or loss.

• Encryption: All data transmitted between your device and phwin25.xyz is encrypted using TLS (Transport Layer Security). Sensitive data stored in our systems — including payment details and identity documents — is encrypted at rest using industry-standard methods.
• Access Controls: Access to personal data within phwin25 is restricted on a strict need-to-know basis. Internal staff access is logged and reviewed regularly.
• Two-Factor Authentication (2FA): phwin25 offers 2FA for all player accounts and strongly encourages every player to enable it. This significantly reduces the risk of unauthorised account access.
• Regular Security Audits: The phwin25 platform undergoes regular vulnerability assessments and penetration testing by qualified security professionals.
• Incident Response: In the event of a data breach that is likely to result in risk to your rights and freedoms, phwin25 will notify the National Privacy Commission (NPC) within 72 hours as required by Philippine law, and will notify affected players without undue delay.

While phwin25 takes all reasonable steps to protect your data, no online platform can guarantee 100% security. Players are responsible for maintaining the security of their own account credentials and should never share their password with anyone.

phwin25 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account plus a minimum of 5 years after account closure, as required by gaming regulatory and AML obligations.
• Transaction and Financial Data: Retained for a minimum of 5 years in compliance with AMLC requirements and standard financial recordkeeping obligations in the Philippines.
• Customer Support Communications: Retained for 3 years from the date of the interaction, or longer if the matter relates to an ongoing dispute.
• Usage and Technical Data: Retained for up to 2 years for analytics and security monitoring purposes, then anonymised or deleted.
• Marketing Consent Records: Retained for as long as you remain opted in, plus 1 year after opt-out for audit purposes.

When personal data is no longer required, phwin25 will securely delete or anonymise it in a manner that prevents reconstruction or identification. If you request deletion of your account, residual data required for legal compliance may still be retained for the periods stated above.

Under the Data Privacy Act of 2012, every Filipino data subject has specific rights regarding their personal information. phwin25 is committed to honouring all of these rights. Here's what you're entitled to:

phwin25 is strictly an adult gaming platform and does not knowingly collect personal data from individuals under the age of 21. Our registration process requires players to confirm their age and is supported by periodic identity verification checks.

If phwin25 becomes aware that personal data has been collected from a player who does not meet the minimum age requirement, that account will be immediately suspended, all data will be deleted in accordance with applicable law, and any deposited funds will be returned through appropriate channels.

phwin25 may integrate with or reference third-party service providers — such as payment processors and verification partners — in the course of delivering services to you. These third parties operate under their own privacy policies, and phwin25 is not responsible for their data handling practices beyond the contractual safeguards we put in place.

phwin25.xyz does not contain outbound links to external websites beyond what is required for payment processing. When you leave phwin25 to complete a transaction on a third-party platform (such as GCash or your bank's online portal), that platform's own privacy policy governs how your data is handled during that session.

We recommend reviewing the privacy policies of any third-party service you use in connection with phwin25, particularly your chosen payment provider.

phwin25 may update this Privacy Policy periodically to reflect changes in our data practices, regulatory requirements, or platform features. When material changes are made, we will update the "Last updated" date at the top of this page and notify registered players via their registered email address.

For changes that significantly affect how we process your personal data, phwin25 will seek fresh consent where required by the DPA. For minor or clarifying changes, continued use of the platform after the updated policy is posted will constitute your acceptance of the revised terms.

We recommend checking this page periodically. You can always find the current version at phwin25.xyz/privacy-policy.

If you have questions about this Privacy Policy, want to exercise any of your data rights, or need to report a suspected data privacy concern, please contact phwin25's Data Protection Officer directly:

• Email: support@phwin25.xyz (subject line: "Data Privacy – [Your Concern]")
• Live Support: Available through the phwin25 platform after login — ask to be connected to the DPO team
• Response Time: phwin25 will respond to all data rights requests within 15 business days, as prescribed by the DPA's Implementing Rules.

If you are not satisfied with phwin25's response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) — the government body responsible for enforcing the Data Privacy Act.

phwin25 takes every privacy inquiry seriously. Whether you're asking about your data, requesting a correction, or flagging a concern about how we've handled your information — our DPO team is here to help. Hindi kayo pag-iiwanan.