phwn Privacy Policy

1. Introduction and Scope

phwn is committed to protecting the privacy and security of your personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and all applicable Philippine data protection regulations. This Privacy Policy applies to all users who access our platform, create accounts, or engage with our services from any location where such access is lawful.

This policy explains what information we collect, why we collect it, how we use it, who we share it with, and what rights you have regarding your personal data. We encourage you to read this policy carefully to understand our data handling practices.

We reserve the right to update or modify this Privacy Policy at any time. Material changes will be communicated via email or prominent notice on our platform. Continued use of our services following any changes constitutes acceptance of the revised policy. The "Last Updated" date at the top of this document indicates when the most recent changes were made.

2. Information We Collect

2.1 Personal Information You Provide

When you register for a phwn account or use our services, we collect personal information that you voluntarily provide, including but not limited to:

• Account Registration Data: Full legal name, date of birth, gender, residential address, email address, mobile phone number, and username.
• Identity Verification Documents: Government-issued identification (passport, driver's license, national ID), proof of address (utility bills, bank statements), and photographs for identity confirmation.
• Payment Information: Bank account details, e-wallet account information (GCash, PayMaya), payment card numbers (last four digits only), and transaction history.
• Communication Records: Information you provide when contacting customer support, including chat logs, emails, support tickets, and any documentation submitted during dispute resolution.
• Marketing Preferences: Your communication preferences, promotional opt-ins, and newsletter subscriptions.

2.2 Information Automatically Collected

When you access our platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, time spent on pages, navigation paths, clickstream data, game play history, bet amounts, wins and losses, and session duration.
• Location Data: General geographic location derived from IP address to ensure compliance with geographic restrictions and local regulations.
• Technical Logs: Server logs, error reports, system diagnostics, and security event logs for platform maintenance and security purposes.

2.3 Information from Third Parties

We may receive information about you from third-party sources including payment processors, identity verification services, fraud prevention agencies, and public databases. This information helps us verify your identity, prevent fraud, and comply with legal obligations including anti-money laundering (AML) and know-your-customer (KYC) requirements.

3. How We Use Your Information

3.1 Primary Purposes

We process your personal information for the following primary purposes necessary to provide our gaming services:

• Account Management: Creating and maintaining your account, verifying your identity, processing deposits and withdrawals, and managing account security.
• Service Provision: Enabling you to play games, place bets, participate in promotions, and access all features of our platform.
• Transaction Processing: Processing payments, calculating winnings, managing bonuses, and maintaining accurate financial records.
• Customer Support: Responding to inquiries, resolving disputes, investigating complaints, and providing technical assistance.
• Legal Compliance: Meeting regulatory obligations under PAGCOR licensing requirements, AML/KYC laws, tax reporting, and other applicable regulations.

3.2 Secondary Purposes

With your consent or based on legitimate business interests, we may use your information for secondary purposes including:

• Marketing and Promotions: Sending promotional offers, bonus notifications, newsletters, and personalized gaming recommendations (you may opt out at any time).
• Platform Improvement: Analyzing usage patterns, conducting user research, testing new features, and optimizing user experience.
• Security and Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, collusion, bonus abuse, and unauthorized access.
• Responsible Gaming: Monitoring gaming behavior, identifying problem gambling indicators, and implementing player protection measures.
• Business Operations: Conducting internal analytics, generating aggregated statistics, performing audits, and supporting business development activities.

4. Legal Basis for Processing

Under Philippine data protection law, we must have a lawful basis for processing your personal information. We rely on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our contractual obligations to you when providing gaming services.
• Legal Obligation: Processing required to comply with PAGCOR regulations, AML/KYC laws, tax obligations, and court orders.
• Consent: Processing based on your explicit consent, particularly for marketing communications and optional features.
• Legitimate Interest: Processing necessary for our legitimate business interests, such as fraud prevention, security enhancement, and service improvement, provided these interests do not override your fundamental rights and freedoms.

5. Information Sharing and Disclosure

5.1 When We Share Your Information

We may share your personal information with third parties under the following circumstances:

• Payment Processors: GCash, PayMaya, banks, and payment gateways to process deposits and withdrawals.
• Identity Verification Services: Third-party providers who perform KYC/AML checks and document authentication.
• Gaming Platform Providers: Software providers who supply casino games, sports betting platforms, and other gaming content.
• Regulatory Authorities: PAGCOR and other government agencies when required by law or regulatory obligation.
• Service Providers: Cloud hosting providers, customer support platforms, analytics services, and other vendors who assist in operating our business (all bound by strict confidentiality agreements).
• Professional Advisors: Lawyers, accountants, auditors, and consultants who provide professional services to us.
• Business Transfers: Potential buyers, investors, or successors in the event of a merger, acquisition, or sale of assets.

5.2 When We Do Not Share Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We do not share your information with unrelated third parties except as described in this policy or with your explicit consent. All third-party recipients are contractually obligated to maintain confidentiality and use your information only for specified purposes.

6. Data Security and Protection

6.1 Security Measures

We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption: SSL/TLS encryption for all data transmission and AES encryption for data storage.
• Access Controls: Role-based access restrictions, multi-factor authentication for staff, and regular access reviews.
• Network Security: Firewalls, intrusion detection systems, DDoS protection, and continuous security monitoring.
• Regular Audits: Periodic security assessments, vulnerability testing, and third-party security audits.
• Staff Training: Mandatory data protection training for all employees with access to personal information.
• Incident Response: Documented procedures for identifying, containing, and responding to data breaches.

6.2 Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities within seventy-two (72) hours as required by Philippine data protection law. Notifications will include the nature of the breach, the data affected, potential consequences, and measures taken to address the breach.

7. Data Retention and Deletion

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data category and are determined by regulatory requirements, operational needs, and legitimate business interests.

Upon account closure, we will retain certain information to comply with legal obligations (typically five to seven years for financial and identity records). You may request deletion of your personal information subject to legal retention requirements. Deleted data is anonymized or securely destroyed to prevent unauthorized access.

8. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to enhance your experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on return visits, remember your preferences, and improve our services.

We use the following types of cookies:

• Essential Cookies: Required for platform functionality, account authentication, and security features.
• Performance Cookies: Collect anonymous data about how users interact with our platform to improve performance.
• Functionality Cookies: Remember your preferences, language settings, and customization choices.
• Marketing Cookies: Track your online activity to deliver relevant advertisements and promotions (with your consent).

You can control cookie preferences through your browser settings. Disabling essential cookies may limit platform functionality. For more details, see our Cookie Policy.

9. Your Privacy Rights

9.1 Access and Portability

You have the right to request access to your personal information held by phwn. We will provide a copy of your data in a structured, commonly used, and machine-readable format within thirty (30) days of your verified request. You may also request data portability to transfer your information to another service provider where technically feasible.

9.2 Correction and Updates

You have the right to correct inaccurate or incomplete personal information. You can update most account information directly through your account settings. For information you cannot update yourself, contact our customer support team.

9.3 Deletion and Erasure

You have the right to request deletion of your personal information, subject to legal retention requirements. We will honor deletion requests within a reasonable timeframe unless we are required to retain information for regulatory compliance, legal claims, or legitimate business purposes.

9.4 Objection and Restriction

You have the right to object to processing based on legitimate interests or for direct marketing purposes. You may also request restriction of processing under certain circumstances, such as when contesting data accuracy or objecting to processing legality.

9.5 Exercising Your Rights

To exercise any privacy rights, submit a written request to our Data Protection Officer via email at [email protected] (plain text, not linked). We will verify your identity before processing rights requests and respond within the timeframes required by Philippine law.

10. Children's Privacy

Our services are not intended for individuals under twenty-one (21) years of age. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected information from a person under 21, we will delete that information immediately and close the associated account. Parents or guardians who believe we may have collected information from a minor should contact us immediately.

11. International Data Transfers

Your personal information may be transferred to and processed in countries outside the Philippines where our service providers and partners are located. We ensure that all international data transfers are protected by appropriate safeguards including contractual data protection clauses, adequacy decisions, or other legally recognized transfer mechanisms. By using our services, you consent to such transfers.

12. Third-Party Websites and Services

Our platform may contain links to third-party websites, services, or applications that are not controlled by phwn. This Privacy Policy does not apply to third-party sites. We are not responsible for the privacy practices or content of external sites. We encourage you to review the privacy policies of any third-party services you access.

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated via email to your registered address or through prominent notice on our platform at least thirty (30) days before taking effect. Your continued use of our services after such notice constitutes acceptance of the updated policy.

14. Contact Information and Complaints

If you have questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact us:

• Data Protection Officer: [email protected] (plain text, not linked)
• Customer Support: Available 24/7 via live chat
• Mailing Address: phwn Data Protection, Manila, Philippines

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.