1. Overview
This Privacy Policy applies to all users of the phwinvip platform, accessible at phwinvip.app. It covers the collection, processing, storage, and disclosure of personal information related to your use of all phwinvip services — including sports betting, live casino, poker, Pusoy, Jackpot Slots, Roulette, and any other games or features available now or in the future.
By creating an account with phwinvip or using any of our services, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described here. If you do not agree with this policy, please do not create an account or use the phwinvip platform.
This policy is written in plain language to make it easy for Filipino players to understand. We avoid legal jargon wherever possible, and where technical terms are necessary, we explain them. Your privacy matters to us — and understanding what we do with your data is an important part of that.
Philippine Data Privacy Act: phwinvip complies fully with Republic Act No. 10173 (Data Privacy Act of 2012) and its implementing rules and regulations. We are registered with the National Privacy Commission (NPC) of the Philippines as required for platforms of our size and data processing scope.
2. Who We Are (Data Controller)
For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, phwinvip is the personal information controller (PIC) for all data collected through the phwinvip platform.
phwinvip operates the online gaming platform at phwinvip.app and is responsible for determining how and why your personal data is processed. A designated Data Protection Officer (DPO) oversees our compliance with the Data Privacy Act and can be reached at any time through the contact details provided in Section 14 of this policy.
When phwinvip engages third-party service providers to process data on our behalf — for example, payment processors, identity verification services, or cloud hosting providers — those parties act as personal information processors (PIPs) under our instructions and are contractually bound to comply with the same data protection standards we apply internally.
3. What Personal Data We Collect
phwinvip collects only the personal data that is necessary to provide the services you use. The categories of data we collect are outlined in the table below.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality | Account registration and KYC verification |
| Contact Data | Mobile number, email address, residential address | Account registration and verification updates |
| Verification Documents | Government-issued ID images (passport, UMID, driver's licence, Philsys ID), proof of address | KYC verification, withdrawal requests, fraud investigation |
| Financial Data | GCash number, Maya account details, bank account name and number, transaction history | Deposits, withdrawals, and payment verification |
| Gaming Activity Data | Bets placed, games played, win/loss history, session duration, stake levels | Ongoing during platform use |
| Device and Technical Data | IP address, browser type, device model, operating system, screen resolution, connection type | Automatically on each platform visit |
| Behavioural Data | Pages visited, clicks, time spent per page, navigation patterns | Automatically via cookies and analytics tools |
| Communications Data | Support chat transcripts, emails, complaint records | When you contact phwinvip support |
Sensitive personal information — such as health data or biometric data — is not routinely collected by phwinvip. If responsible gaming circumstances require us to note health-related concerns reported voluntarily by a player, that information is treated with the highest level of care and access restriction.
Whether you're playing from Boracay or your living room — phwinvip keeps your personal data secure wherever you are in the Philippines.
4. Why We Collect Your Data (Purposes of Processing)
phwinvip uses your personal data only for the purposes listed below. We do not collect data speculatively or for purposes we haven't identified.
- Account management: To create, maintain, and administer your phwinvip player account, including processing your registation, managing your preferences, and updating your profile information.
- Identity verification (KYC): To verify your identity and age in compliance with anti-money laundering regulations and our licensing requirements before processing withdrawals or high-value transactions.
- Processing transactions: To facilitate deposits and withdrawals via GCash, Maya, BDO, BPI, UnionBank, and other supported Philippine payment channels — all in Philippine pesos.
- Providing gaming services: To run the games, record results, track your gaming history, and calculate bonuses, jackpots, and tournament results accurately.
- Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, multi-accounting, bot usage, and other security threats to the platform and its players.
- Regulatory compliance: To meet obligations under Philippine law, including the Data Privacy Act, anti-money laundering regulations, and gaming licensing requirements.
- Responsible gaming: To monitor gaming behaviour patterns that may suggest a player is experiencing gambling-related harm, and to intervene appropriately with responsible gaming tools and support.
- Platform improvement: To analyse how players use the platform, identify bugs and friction points, and improve the overall quality of the phwinvip experience.
- Customer support: To respond to your queries, resolve complaints, and provide assistance through live chat and email.
- Communications: To send you important account notifications, security alerts, and — where you have opted in — promotional updates about phwinvip offers and new features.
5. Legal Basis for Processing
phwinvip processes your personal data under the following legal bases as provided under the Data Privacy Act of 2012:
- Consent: Where you have given phwinvip explicit consent to process your data for a specific purpose — for example, opting in to receive promotional communications. You may withdraw consent at any time by contacting our DPO or updating your account settings.
- Contractual necessity: Processing that is necessary to fulfil the contract between you and phwinvip — including account creation, payment processing, and providing the games and services you have signed up for.
- Legitimate interests: Processing carried out for phwinvip's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your privacy rights.
- Legal obligation: Processing required to comply with Philippine law, including anti-money laundering obligations, gaming regulatory requirements, and National Privacy Commission directives.
6. Sharing Your Personal Data
phwinvip does not sell your personal data to any third party for marketing or commercial purposes. Full stop. Your data may be shared in the following limited and specific circumstances only:
Service Providers (Personal Information Processors)
phwinvip shares data with trusted third-party service providers who process data on our behalf under strict data processing agreements. These include:
- Payment processors and e-wallet providers (GCash, Maya, and Philippine bank networks) — to process deposits and withdrawals in pesos.
- Identity verification and KYC providers — to verify government-issued IDs and confirm player identity as required by Philippine anti-money laundering regulations.
- Cloud hosting and infrastructure providers — to store platform data securely in compliant data centre environments.
- Fraud detection and cybersecurity providers — to protect the platform and its players from malicious activity.
- Customer support platform providers — to manage live chat and support ticket systems.
Regulatory and Law Enforcement Authorities
phwinvip may be required to disclose personal data to the National Privacy Commission, the Anti-Money Laundering Council (AMLC), gaming regulatory authorities, or Philippine law enforcement agencies where legally required to do so. phwinvip will notify affected players of such disclosures where permitted by law.
Corporate Transactions
In the event of a merger, acquisition, or sale of all or part of phwinvip's business, player data may be transferred as part of that transaction. Affected players will be notified and the incoming data controller will be required to honour all commitments made under this Privacy Policy.
From Dumaguete to CDO — your phwinvip data stays protected no matter where in the Philippines you're playing from.
7. Data Retention
phwinvip retains your personal data only for as long as necessary for the purposes it was collected, or as required by Philippine law. The general retention guidelines we follow are:
- Account data: Retained for the lifetime of your active account plus a minimum of five years after account closure, as required by Philippine anti-money laundering regulations.
- Transaction records: Retained for a minimum of five years from the date of the transaction in compliance with financial record-keeping requirements under Philippine law.
- KYC documents: Retained for a minimum of five years after account closure or the end of the business relationship.
- Gaming activity logs: Retained for a minimum of three years to support dispute resolution, responsible gaming monitoring, and regulatory compliance.
- Support communications: Retained for a minimum of three years to provide accurate records for dispute resolution and service improvement.
- Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter for compliance documentation.
When personal data is no longer needed and the retention period has expired, phwinvip will securely delete or anonymise the data so it can no longer be linked to you.
8. Security Measures
phwinvip implements technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Key security measures in place include:
- Transport Layer Security (TLS): All data transmitted between your device and the phwinvip platform is encrypted in transit using TLS 1.2 or higher.
- Data encryption at rest: Sensitive personal data — including payment details, ID documents, and account credentials — is encrypted in storage using AES-256 encryption.
- Access controls: Access to personal data is restricted to phwinvip staff who need it to perform their specific job functions. All staff with data access are bound by confidentiality obligations.
- Two-factor authentication (2FA): Players are encouraged and, for certain account actions, required to use 2FA to protect their accounts from unauthorised access.
- Regular security audits: The phwinvip platform undergoes regular independent security assessments and penetration testing to identify and address vulnerabilities.
- Incident response: phwinvip maintains a data breach response procedure. In the event of a breach that affects your personal data, you and the National Privacy Commission will be notified within the timeframes required by the Data Privacy Act.
Reminder: No system is 100% impenetrable. phwinvip takes all reasonable technical precautions, but you also play a role — keep your password strong and unique, don't share your login, and enable 2FA on your account through Account Settings.
Strong data security behind every peso transaction — phwinvip protects your deposits and withdrawals from Subic Bay to Manila Bay.
9. Cookies and Tracking Technologies
phwinvip uses cookies and similar tracking technologies when you visit the platform. Cookies are small text files stored in your browser that help us deliver a better experience and understand how the platform is being used.
Types of Cookies We Use
- Strictly necessary cookies: Required for the platform to function. These manage your login session, security tokens, and shopping cart equivalents (bet slips). You cannot opt out of these without disabling the platform entirely.
- Functional cookies: Remember your preferences — such as language, display settings, and your chosen stake levels — so you don't have to reset them every session.
- Analytics cookies: Help phwinvip understand how players navigate the platform — which pages are most visited, where players encounter problems, and how long sessions last. This data is aggregated and used only for platform improvement.
- Security cookies: Support fraud detection and bot prevention by analysing device and behaviour patterns during your session.
Managing Cookies
You can manage cookie preferences through your browser settings. Most modern mobile and desktop browsers allow you to view, delete, and block cookies. Note that blocking strictly necessary cookies will affect platform functionality. Analytics cookies can be disabled without affecting gameplay.
phwinvip does not use advertising or tracking cookies to build marketing profiles or to serve you targeted advertisements outside the phwinvip platform.
10. Your Rights Under the Data Privacy Act
As a data subject under the Data Privacy Act of 2012, Filipino players have the following rights with respect to their personal data held by phwinvip. You can exercise any of these rights by contacting our Data Protection Officer using the details in Section 14.