PHWin33 Privacy Policy – How We Protect Your Data

PHWin33 ("phwin33," "we," "us") respects the privacy of every person who uses our platform. This Privacy Policy explains how phwin33 collects, uses, stores, and protects the personal information of members and visitors based in the Philippines.

This policy applies to the phwin33 website, mobile browser interface, and all associated services. It should be read alongside our Terms and Conditions, which govern your use of the platform.

By registering a phwin33 account or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described here. If you disagree with any part of this policy, please do not use phwin33.

PHWin33 complies with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

PHWin33 collects the minimum personal data necessary to provide you with a safe, compliant, and functional gaming experience. The categories of data we collect are set out in the table below.

PHWin33 does not intentionally collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for identity verification and regulatory compliance purposes. We do not collect data about your religion, ethnicity, political affiliations, or health status.

PHWin33 collects personal data through the following channels:

• Directly from you: When you register an account, submit KYC documents, make a deposit or withdrawal, contact support, or update your account profile.
• Automatically: When you use the phwin33 platform, our systems automatically log technical data including your IP address, device information, browser type, and session activity. This occurs as a normal part of delivering and securing the service.
• From payment providers: When you process a GCash, Maya, or bank transfer transaction, phwin33 receives transaction confirmation data from the relevant payment gateway. This is limited to what is necessary to verify and credit the transaction.
• From game providers: Licensed game software providers may transmit game session metadata to phwin33 for the purpose of game delivery, result logging, and dispute resolution.
• From third-party verification services: For KYC purposes, phwin33 may use third-party identity verification tools that cross-reference submitted documents against relevant databases.

PHWin33 uses personal data only for legitimate purposes that are directly connected to providing and improving our services for Filipino members. We do not use data for purposes that are unrelated to the operation of phwin33.

• Account management: To create, maintain, and secure your phwin33 member account.
• Identity verification: To comply with KYC requirements and verify that you meet eligibility criteria (age 18+, eligible jurisdiction).
• Transaction processing: To process deposits, withdrawals, and bonus credits accurately and promptly.
• Game delivery: To provide access to games, record bet placements and outcomes, and settle winnings correctly.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and unauthorised account access.
• Regulatory compliance: To fulfil phwin33's obligations under Anti-Money Laundering regulations and other applicable Philippine laws.
• Responsible gaming: To monitor gaming activity for signs of problem gambling and to apply limits or interventions where appropriate.
• Customer support: To respond to your enquiries, resolve disputes, and improve support quality.
• Platform improvement: To analyse aggregate usage patterns and improve phwin33's interface, game selection, and payment processes.
• Marketing communications: To send promotional offers and updates — only where you have opted in, and subject to your opt-out at any time.

Under the Philippine Data Privacy Act of 2012, phwin33 processes your personal data on the following legal bases:

• Consent: For marketing communications and optional data processing activities, phwin33 relies on your explicit consent. You may withdraw consent at any time by contacting support or adjusting your account settings.
• Contractual necessity: Processing required to perform the services you have requested — account creation, game access, transaction processing — is carried out as necessary to fulfil the phwin33 member agreement.
• Legal obligation: Certain data processing — particularly KYC, AML compliance record-keeping, and mandatory regulatory reporting — is required by Philippine law and not subject to individual opt-out.
• Legitimate interests: Security monitoring, fraud prevention, platform improvement analytics, and responsible gaming monitoring are carried out on the basis of phwin33's legitimate interests, balanced against your privacy rights.

PHWin33 does not sell your personal data to any third party. Data is shared only where necessary for service delivery, regulatory compliance, or the protection of phwin33 and its members.

The categories of third parties with whom phwin33 may share your data are:

• Payment processors: GCash, Maya, GrabPay, Coins.ph, InstaPay partners, BDO, BPI, UnionBank, and Visa/Mastercard networks — for processing deposits and withdrawals. Data shared is limited to transaction identifiers, amounts, and account references required to complete the payment.
• Game software providers: JILI Games, Evolution Gaming, FC Gaming, Playtech, and other licensed suppliers — for delivering game content and logging game session results for dispute resolution purposes.
• Identity verification partners: Third-party KYC technology providers that help phwin33 verify the authenticity of identity documents submitted during account verification.
• Regulatory authorities: Relevant Philippine government bodies and regulators, where disclosure is required by law or a valid legal process such as a court order.
• Fraud and AML detection: Specialist services that assist phwin33 in identifying and preventing financial crime. Data shared is used only for the specific fraud or AML detection purpose.

All third-party partners with whom phwin33 shares personal data are contractually required to process that data only for the specific purpose for which it was shared and to maintain data security standards consistent with phwin33's own obligations under the DPA.

PHWin33 implements industry-standard and regulatory-compliant technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

• Encryption: All data transmitted between your device and phwin33's servers is protected by 256-bit SSL/TLS encryption — the same standard used by Philippine banks and major financial institutions.
• Access controls: Personal data held by phwin33 is accessible only to staff and systems with a verified need to access it for the purpose of service delivery, security, or compliance. Access is logged and monitored.
• Two-factor authentication: PHWin33 provides and strongly encourages two-factor authentication (2FA) for member account access. Enabling 2FA significantly reduces the risk of unauthorised login even if your password is compromised.
• Secure payment processing: Financial transaction data is processed through PCI-DSS compliant payment gateways. PHWin33 does not store full card numbers on its own servers.
• Vulnerability management: PHWin33 conducts regular security reviews and applies patches and updates to its systems in a timely manner to address identified vulnerabilities.
• Incident response: In the event of a personal data breach that is likely to affect your rights and freedoms, phwin33 will notify affected members and the NPC within the timeframes required by the DPA and NPC regulations.

While phwin33 applies robust security measures, no online platform can guarantee absolute security. You also have a role to play — protecting your login credentials, enabling 2FA, and reporting suspicious account activity to phwin33 support immediately.

PHWin33 retains personal data only for as long as necessary for the purposes described in this policy or as required by applicable Philippine law.

• Active accounts: Personal data is retained throughout the period your phwin33 account is active and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements under Philippine law.
• KYC documents: Identity verification documents are retained for a minimum of five (5) years from the date of last transaction or account closure, whichever is later.
• Transaction records: Financial transaction logs are retained for a minimum of five (5) years from the date of the transaction, consistent with AML and tax record-keeping obligations.
• Game session logs: Individual game session records are retained for a minimum of 90 days for dispute resolution purposes and archived for longer periods for regulatory compliance.
• Communications data: Support communications are retained for up to two (2) years from the date of the interaction.
• Marketing data: Marketing preference and opt-in data is retained until you withdraw consent or close your account, after which it is deleted within 30 days.

When data is no longer required for any active purpose and retention is not required by law, phwin33 securely deletes or anonymises it in a manner that prevents reconstruction or re-identification.

PHWin33 uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device when you visit a website. Cookies help phwin33 deliver a functional, personalised, and secure experience.

You can manage your cookie preferences through your browser settings. Note that disabling essential and security cookies will affect the functionality of phwin33 — you may not be able to log in or play games with these cookies disabled.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phwin33. These rights can be exercised by contacting our Data Protection Officer at support@phwin33.net.

PHWin33 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. Registration is not permitted for minors, and phwin33 applies age verification controls during the onboarding process.

If phwin33 discovers or has reasonable grounds to believe that an account has been registered by or on behalf of a person under 18, the account will be immediately suspended, all gaming activity will be voided, and deposited funds will be reviewed and returned to the originating payment method following investigation.

If you have reason to believe that a minor has registered on phwin33, please contact support immediately at support@phwin33.net so we can investigate and take appropriate action without delay.

PHWin33 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. The effective date at the top of this document indicates when the current version was last updated.

Where changes are material — meaning they affect how your data is collected, used, or shared in ways that could significantly impact your rights — phwin33 will notify you via your registered email address or SMS at least 7 days before the changes take effect.

Minor or clarifying updates may be made without individual notification. Continued use of phwin33 following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

We recommend bookmarking this page and reviewing it periodically. The most current version is always available at phwin33.net/privacy-policy.

PHWin33 has designated a Data Protection Officer (DPO) in compliance with the requirements of the Data Privacy Act of 2012. For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, you may reach phwin33's DPO through the following channels:

Requests relating to your data rights will be acknowledged within 3 business days and resolved within 15 days of receiving a complete and verifiable request. If you are not satisfied with phwin33's response, you may file a complaint with the National Privacy Commission of the Philippines.