At phlwin.com, your privacy matters as much as your gaming experience. This Privacy Policy explains exactly how we collect, use, store, and protect your personal data — in full compliance with the Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines. We believe every Filipino player deserves to know how their information is handled, so we've written this in plain, straightforward English.
Six core principles that guide how we handle every piece of information you share with us.
Every piece of data you transmit to phlwin.com — from your login credentials to your GCash deposit details — is protected by industry-standard 256-bit SSL encryption. Your personal and financial information is never transmitted in plain text, keeping it safe from interception at all times.
phlwin.com fully complies with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. We are committed to upholding the rights of every Filipino player as defined under Philippine data protection law.
phlwin.com does not sell, rent, or trade your personal information to third-party marketers or data brokers — ever. Your data is used solely to provide, improve, and secure your gaming experience on the platform. Your privacy is not a product we monetise.
As a phlwin.com player, you have the right to access, correct, delete, and port your personal data at any time. You can also object to or restrict certain types of processing. We honour all data subject rights requests in accordance with the Data Privacy Act of 2012.
We only collect the personal data that is strictly necessary for the purposes described in this Privacy Policy. We do not collect excessive or irrelevant information. If a piece of data is not needed to provide our services or meet our legal obligations, we simply do not collect it.
phlwin.com retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. Once data is no longer needed, it is securely deleted or anonymised in accordance with our data retention schedule.
This Privacy Policy applies to all personal data collected by phlwin.com through the phlwincom.net website, mobile applications, and any related services. It should be read together with our Terms & Conditions. By using phlwin.com, you acknowledge that you have read and understood this Privacy Policy.
phlwin.com ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all players and visitors who use our online gaming platform at phlwincom.net. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of your personal information.
We operate in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC"). Where applicable, we also observe internationally recognised data protection principles.
As a platform serving Filipino players across Metro Manila, Cebu, Davao, Quezon City, Makati, and nationwide, we understand the importance of trust. We take our obligations as a personal information controller seriously, and we are dedicated to ensuring that your data is handled with the utmost care, transparency, and respect.
This Privacy Policy covers all personal data you provide to us directly — such as when you register an account, make a deposit via GCash or BDO, contact our support team, or participate in a promotion — as well as data we collect automatically through your use of the platform.
phlwin.com collects only the personal data that is necessary for the purposes described in this Privacy Policy. The categories of personal data we collect include the following:
In certain circumstances — such as during enhanced KYC verification or responsible gaming assessments — phlwin.com may collect sensitive personal information as defined under the Data Privacy Act of 2012, including government ID numbers. Such data is handled with heightened security measures and is processed only where strictly necessary and lawfully permitted.
phlwin.com collects personal data through the following means:
The majority of the personal data we hold about you is provided directly by you when you: register a phlwin.com account; complete our KYC verification process; make a deposit or request a withdrawal; contact our customer support team; participate in a promotion or survey; or update your account profile settings.
When you access and use the phlwin.com platform, we automatically collect certain technical and usage data through cookies, web beacons, log files, and similar tracking technologies. This data helps us understand how players interact with the platform, identify technical issues, and improve the overall user experience. Please refer to Section 7 (Cookies & Tracking Technologies) for more details.
In limited circumstances, phlwin.com may receive personal data about you from third parties, including:
phlwin.com uses your personal data for the following specific purposes. We will only use your data in a manner that is compatible with the purpose for which it was originally collected.
| Purpose | Data Used |
|---|---|
| Account Registration & Management Creating and maintaining your player account, verifying your identity and age (21+), and managing your account settings. |
Identity data, contact data, KYC documents |
| Payment Processing Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank in Philippine Peso (₱). |
Financial data, identity data |
| Gaming Services Providing access to casino games, slots, bingo, fish shooting games, and other platform features. |
Account data, usage data, game history |
| Fraud Prevention & Security Detecting and preventing fraud, money laundering, cheating, and other prohibited activities. |
Technical data, financial data, usage data |
| Legal & Regulatory Compliance Complying with PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws. |
All categories as required by law |
| Customer Support Responding to your enquiries, resolving complaints, and providing technical assistance. |
Communications data, account data |
| Responsible Gaming Monitoring gaming activity to identify potential problem gambling behaviour and administering self-exclusion and deposit limit tools. |
Usage data, game history, account data |
| Marketing & Promotions Sending you information about bonuses, promotions, and platform updates — only where you have given your explicit consent. |
Contact data, preferences |
| Platform Improvement Analysing usage patterns to improve platform performance, user experience, and game offerings. |
Technical data, usage data (anonymised where possible) |
Under the Data Privacy Act of 2012 of the Philippines, phlwin.com must have a lawful basis for processing your personal data. We rely on the following legal bases:
phlwin.com does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
We engage trusted third-party service providers who process personal data on our behalf as personal information processors. These include KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection services, cloud hosting providers, and customer support platform providers. All service providers are contractually bound to process your data only on our instructions and in accordance with the Data Privacy Act.
phlwin.com may disclose your personal data to regulatory authorities, law enforcement agencies, or other government bodies where we are legally required to do so — for example, to comply with PAGCOR reporting requirements, Anti-Money Laundering Council (AMLC) obligations, or a valid court order issued by a Philippine court.
In the event of a merger, acquisition, restructuring, or sale of all or part of phlwin.com's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and ensure that your data continues to be protected in accordance with this Privacy Policy.
phlwin.com will never share your personal data with third-party advertisers or marketing companies for their own marketing purposes. Any marketing communications you receive will come directly from phlwin.com, and only if you have given your explicit consent to receive them.
phlwin.com uses cookies and similar tracking technologies to enhance your experience on the platform, ensure its proper functioning, and gather analytics data that helps us improve our services.
| Cookie Type | Purpose | Required? |
|---|---|---|
| Strictly Necessary | Essential for the platform to function — e.g., maintaining your login session, remembering your language preference, and processing transactions securely. | Yes |
| Performance & Analytics | Collect anonymised data about how players use the platform — e.g., which pages are visited most, how long sessions last, and where errors occur — to help us improve performance. | Consent |
| Functional | Remember your preferences and personalisation settings — e.g., your preferred game categories, display settings, and notification preferences. | Consent |
| Security | Help detect and prevent fraudulent activity, bot access, and other security threats to your account and the platform. | Yes |
You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, please note that disabling strictly necessary cookies may affect the functionality of the phlwin.com platform and prevent you from accessing certain features, including your account and payment services.
phlwin.com implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:
While phlwin.com takes every reasonable measure to protect your data, you also play an important role in keeping your account secure. Never share your password with anyone, use a strong and unique password for your phlwin.com account, enable two-factor authentication where available, and contact our support team immediately if you suspect any unauthorised access to your account.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phlwin.com will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012 and NPC Circular No. 16-03.
phlwin.com retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | PAGCOR & AMLA requirements |
| Financial & Transaction Records | 5 years from transaction date | Anti-Money Laundering Act (AMLA) |
| KYC Documents | Duration of account + 5 years after closure | PAGCOR & AMLA requirements |
| Game History & Wagering Records | 3 years from date of activity | Regulatory compliance & dispute resolution |
| Customer Support Communications | 3 years from last interaction | Legitimate interests & dispute resolution |
| Marketing Preferences & Consent Records | Until consent is withdrawn + 1 year | Consent & legal compliance |
| Technical & Log Data | 12 months from collection | Security & platform improvement |
Upon expiry of the applicable retention period, your personal data will be securely deleted, destroyed, or anonymised in a manner that prevents reconstruction or identification. Where data is anonymised rather than deleted, the anonymised data may be retained for statistical and analytical purposes without limitation, as it no longer constitutes personal data.
Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by phlwin.com. We are committed to honouring these rights promptly and without undue delay.
You have the right to be informed about how your personal data is collected, used, and processed — which is the primary purpose of this Privacy Policy.
You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of your data subject rights, please contact our Data Protection Officer (DPO) using the details provided in Section 14 of this Privacy Policy. We will acknowledge your request within 3 business days and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, and we will notify you accordingly.
We may need to verify your identity before processing your request to ensure that we do not disclose personal data to an unauthorised person. There is no fee for exercising your rights, unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee.
If you are not satisfied with our response to your data subject rights request, or if you believe that phlwin.com has not complied with its obligations under the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
phlwin.com is an online gaming platform intended exclusively for adults. In the Philippines, the minimum legal age for participation in casino-style gaming is 21 years old. phlwin.com strictly enforces this age restriction and does not knowingly collect personal data from individuals under the age of 21.
All new players are required to verify their age as part of the account registration and KYC process. We use identity verification procedures to confirm that every player meets the minimum age requirement before they are permitted to deposit funds or access real-money gaming features.
If phlwin.com discovers or is notified that a player is under 21 years of age, we will immediately suspend the account, void any transactions, and securely delete all personal data associated with that account. If you believe that a minor has registered on phlwin.com, please contact our support team immediately at [email protected].
phlwin.com primarily stores and processes your personal data within the Philippines. However, in certain circumstances — for example, where we use cloud-based service providers or technology partners whose infrastructure is located outside the Philippines — your personal data may be transferred to, stored in, or processed in a country other than the Philippines.
Where such international transfers occur, phlwin.com ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012 and the standards set by the National Privacy Commission. These safeguards may include:
By using the phlwin.com platform, you acknowledge that your personal data may be transferred internationally in the circumstances described above, subject always to the safeguards outlined in this section.
phlwin.com reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, regulatory requirements, or platform features. We will always post the most current version of this Privacy Policy on this page, along with the effective date of the latest revision.
When we make material changes to this Privacy Policy — changes that significantly affect how we collect, use, or share your personal data — we will provide you with prominent notice. This notice will be delivered via email to the address associated with your phlwin.com account, and/or via a prominent banner or notification displayed on the platform when you next log in.
Your continued use of the phlwin.com platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Privacy Policy, you should cease using the platform and may request account closure by contacting our support team.
We encourage you to review this Privacy Policy periodically to stay informed about how phlwin.com protects your personal data. The date at the top of this page indicates when this Privacy Policy was last updated.
phlwin.com has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 17-01. Our DPO is responsible for overseeing our data protection strategy, ensuring compliance with the DPA, and serving as the primary point of contact for data subject rights requests and privacy-related enquiries.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phlwin.com, please contact us through any of the following channels:
If you are not satisfied with how phlwin.com has handled your personal data or responded to your data subject rights request, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for administering and enforcing the Data Privacy Act of 2012.
Now that you know exactly how phlwin.com protects your personal data, you can play with complete confidence. Join hundreds of thousands of Filipino players enjoying a safe, fair, and secure online gaming experience. Remember — 21+ only, and always play responsibly.