phlwin222 Privacy Policy

1 Who We Are and How to Contact Us

phlwin222 ("phlwin222," "we," "us," or "our") operates the online casino and sports betting platform accessible at phlwin222.asia. For the purposes of the Data Privacy Act of 2012, phlwin222 acts as the Personal Information Controller in respect of the personal data it collects from players and visitors.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, you may contact our Data Protection Officer (DPO) by email at: [email protected]. Please include "Privacy / DPO Request" in the subject line so your message is routed correctly. We aim to respond to all privacy-related inquiries within five (5) business days.

This Privacy Policy applies to all personal data collected through the phlwin222 website, mobile-optimized interface, customer support channels, and any other touchpoint through which you interact with phlwin222. It does not apply to third-party websites or services that may be linked from our platform.

2 Personal Data We Collect

phlwin222 collects personal data in several ways: directly from you when you register or use our services, automatically through your use of the platform, and occasionally from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect include:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older, as required under Philippine law)
• Residential address, including barangay, city or municipality, province, and postal code
• Email address and mobile number
• Username and encrypted password
• Copies of government-issued identification documents (e.g., PhilSys National ID, passport, driver's license, UMID, SSS ID, Voter's ID) submitted for KYC verification
• Selfie or liveness check images submitted during identity verification

2.2 Financial and Transaction Data

• GCash mobile number or PayMaya account details used for deposits and withdrawals
• Bank account details (BPI, BDO, Metrobank) provided for bank transfer transactions
• Visa or Mastercard details (card number is tokenized and never stored in full by phlwin222)
• Transaction history including deposit amounts, withdrawal requests, and bonus credits
• Source of funds declarations where required for enhanced due diligence

2.3 Gaming Activity Data

• Game session logs including games played, bets placed, wins, and losses
• Responsible gaming settings you have configured (deposit limits, loss limits, self-exclusion status)
• Bonus and promotion usage history
• Customer support interactions and complaint records

2.4 Technical and Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Pages visited on phlwin222.asia, time spent, and navigation paths
• Cookie identifiers and similar tracking technologies (see Section 7)
• Login timestamps and session duration

3 How We Use Your Personal Data

phlwin222 processes your personal data only for specific, legitimate purposes and only to the extent necessary for those purposes. The table below summarizes our primary processing activities and the legal basis for each under the Data Privacy Act of 2012:

phlwin222 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable Philippine law.

4 Sharing Your Personal Data

phlwin222 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and card payment networks (Visa/Mastercard) receive the minimum data necessary to process your transactions. These providers operate under their own privacy policies and are bound by applicable Philippine financial regulations.
• Identity Verification Providers: Third-party KYC and liveness-check service providers process identity documents and biometric data on our behalf under strict data processing agreements.
• Game Content Providers: Software providers whose games are hosted on phlwin222 may receive anonymized or pseudonymized session data for game integrity and technical support purposes. They do not receive your full identity data.
• Regulatory and Law Enforcement Authorities: phlwin222 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory directive.
• IT and Security Service Providers: Cloud hosting, cybersecurity, and fraud detection vendors who process data on our behalf under binding data processing agreements that require them to maintain confidentiality and implement appropriate security measures.
• Professional Advisors: Lawyers, auditors, and accountants who require access to certain data in the course of providing professional services to phlwin222, subject to professional confidentiality obligations.

Any third party that processes personal data on behalf of phlwin222 is required to do so only in accordance with our instructions and in compliance with the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

5 Data Retention

phlwin222 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our general retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and regulatory record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Gaming activity logs: Retained for three (3) years from the date of the activity, or longer if required for an ongoing investigation or dispute.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter as evidence of the consent.
• Technical and usage data (logs, cookies): Typically retained for thirteen (13) months from collection.

When personal data is no longer required, phlwin222 will securely delete or anonymize it in accordance with our internal data disposal procedures.

6 Data Security

phlwin222 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and phlwin222 servers.
• Encryption at rest for sensitive data fields including passwords (hashed using bcrypt), payment credentials, and identity document images.
• Access controls limiting internal access to personal data on a strict need-to-know basis, with role-based permissions and multi-factor authentication for all staff accounts.
• Regular security audits and penetration testing conducted by independent cybersecurity professionals.
• Intrusion detection systems and 24/7 security monitoring to detect and respond to threats in real time.
• Incident response procedures that comply with the NPC's mandatory breach notification requirements under the Data Privacy Act of 2012.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phlwin222 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.

While phlwin222 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phlwin222 account credentials and for notifying us immediately if you suspect unauthorized access to your account.

7 Cookies and Tracking Technologies

phlwin222 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the platform, remember your preferences, analyze usage patterns, and deliver relevant content. The types of cookies we use are:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming limits you have set, and your last visited game category. These improve your experience on phlwin222.
• Analytics Cookies: Help us understand how players use phlwin222 – which pages are most visited, how long sessions last, and where errors occur. This data is aggregated and anonymized where possible.
• Marketing Cookies: Used to deliver promotional content relevant to your interests. These are only set with your consent and can be withdrawn at any time through your account settings or browser controls.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the phlwin222 platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

8 Your Rights Under the Data Privacy Act of 2012

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by phlwin222:

• Right to be Informed: You have the right to know what personal data phlwin222 collects about you, how it is used, and with whom it is shared. This Privacy Policy fulfills that obligation.
• Right to Access: You may request a copy of the personal data phlwin222 holds about you, along with information about how it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update basic account details directly through your phlwin222 account settings.
• Right to Erasure or Blocking: You may request the deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to Data Portability: You may request a copy of the personal data you have provided to phlwin222 in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: If you believe phlwin222 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." We will respond within fifteen (15) business days of receiving a verifiable request. We may need to verify your identity before processing your request to protect against unauthorized access to your data.

9 Children and Minors

phlwin222 is strictly an adults-only platform. Access to and use of phlwin222 is limited to individuals who are 21 years of age or older, in accordance with PAGCOR regulations and applicable Philippine law governing online gambling. phlwin222 does not knowingly collect personal data from individuals under the age of 21.

During registration, all players are required to confirm their date of birth and submit valid government-issued identification for age verification. If phlwin222 discovers that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, void any balances, and delete the personal data in question as promptly as possible.

If you are a parent or guardian and believe your child has registered on phlwin222, please contact us immediately at [email protected] so we can take appropriate action.

10 Changes to This Privacy Policy

phlwin222 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When we make material changes, we will notify registered players by email and/or by posting a prominent notice on the phlwin222 platform at least fourteen (14) days before the changes take effect.

The "Last updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how phlwin222 protects your personal data. Your continued use of the phlwin222 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

If you do not agree with any changes to this Privacy Policy, you should stop using phlwin222 and may request account closure by contacting our support team.