pphwin Privacy Policy

Who We Are

This Privacy Policy is issued by pphwin ("pphwin", "we", "us", "our"), the operator of the online gaming platform accessible at pphwin.bio. pphwin acts as the data controller in respect of the personal data of all registered players and visitors to the platform.

pphwin operates in accordance with applicable Philippine gaming regulations and is committed to full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

This policy applies to all personal data collected through: the pphwin website; the pphwin mobile application (where available); pphwin customer support channels; and any other pphwin-operated service or communication channel through which personal data may be submitted or collected.

Personal Data We Collect

pphwin collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is processed. The categories of personal data we collect include:

How We Collect Your Data

pphwin collects your personal data through the following channels and interactions:

• Account Registration: When you create a pphwin account, you provide your name, mobile number, email address, date of birth, and chosen credentials.
• KYC Verification: When you submit identity documents for verification prior to your first withdrawal, we collect and process government-issued ID data and selfie images where required.
• Deposits and Withdrawals: When you conduct financial transactions, payment method details and transaction records are collected and processed.
• Platform Usage: As you use pphwin, we automatically collect technical and gaming activity data through server logs, session tracking, and platform analytics tools.
• Customer Support: When you contact pphwin support via live chat, email, or any other channel, we collect and retain the content of those communications.
• Promotions and Surveys: When you participate in pphwin promotions, competitions, or surveys, additional data relevant to those activities may be collected.
• Cookies and Tracking Technologies: pphwin's website uses cookies and similar technologies to collect technical and behavioral data about your browsing session. See Section 7 for full details.

Why We Use Your Data

pphwin uses personal data collected from players for the following purposes:

• Account Management: To create, maintain, and secure your pphwin account, including authentication and account recovery.
• Identity Verification (KYC): To verify your identity and age (21+) as required by PAGCOR regulations and anti-money laundering compliance obligations.
• Payment Processing: To facilitate deposits and withdrawals to and from your pphwin account via GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other supported channels.
• Game Delivery: To operate and deliver all gaming services available on the pphwin platform, including slots, live casino, bingo, tongits, fishing games, sabong, and sports betting.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the platform.
• Regulatory Compliance: To comply with obligations under applicable Philippine laws, PAGCOR licensing conditions, the Data Privacy Act of 2012, and anti-money laundering regulations.
• Customer Support: To respond to your inquiries, resolve disputes, and provide assistance in connection with your pphwin account.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling and, where necessary, to apply responsible gaming interventions such as deposit limit enforcement and self-exclusion.
• Marketing Communications (with consent): To send you promotional offers, bonus notifications, game updates, and other marketing communications where you have opted in. You may withdraw your marketing consent at any time.
• Platform Improvement: To analyze aggregated usage data and improve the pphwin platform's performance, design, and game offering.

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, pphwin processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and pphwin (i.e., the Terms and Conditions you agreed to upon registration). This includes account management, payment processing, and game delivery.
• Legal Obligation: Processing is required for pphwin to comply with applicable legal obligations, including PAGCOR regulatory requirements, anti-money laundering laws, and data breach notification obligations under the Data Privacy Act.
• Legitimate Interests: Processing is necessary for pphwin's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring — provided those interests are not overridden by your rights and interests.
• Consent: Where pphwin relies on your consent as the legal basis for processing (primarily for marketing communications), you have the right to withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support.

Data Sharing & Disclosure

pphwin does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited circumstances, and only to the extent necessary:

• Game Software Providers: Licensed game developers and studios that power the games available on pphwin may receive session and game activity data necessary to deliver and certify those games.
• Payment Processors: Payment service providers (including GCash, Maya, and banking partners) receive the financial data necessary to process your deposit and withdrawal transactions securely.
• KYC and Identity Verification Partners: Third-party identity verification services may receive your identity documents and data for the purpose of age and identity verification in compliance with regulatory requirements.
• Fraud Prevention and AML Services: Specialist anti-fraud and anti-money laundering service providers may process certain transaction and identity data for the purpose of detecting and preventing financial crime.
• Regulatory Authorities: pphwin will disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), law enforcement agencies, or other Philippine government authorities where required by law or valid legal process.
• Professional Advisors: Lawyers, auditors, and accountants engaged by pphwin may access personal data on a confidential basis to the extent necessary to provide their professional services.

All third parties with whom pphwin shares personal data are required to process that data in accordance with applicable data privacy laws and are bound by contractual data processing or data sharing agreements with pphwin.

Cookies & Tracking Technologies

pphwin uses cookies and similar tracking technologies on its website to enhance your experience, maintain session security, and gather analytics data. The types of cookies we use include:

• Essential Cookies: Strictly necessary for the operation of the pphwin platform — including session authentication, security tokens, and load balancing. These cannot be disabled without affecting platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymized data about how visitors use the pphwin website — including page views, session duration, and navigation paths — to help us improve platform performance.
• Functional Cookies: Used to remember your preferences such as language settings and display options to provide a more personalized experience.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection and device fingerprinting for account security purposes.

You may control cookie preferences through your browser settings. Please note that disabling essential cookies may impair or prevent access to the pphwin platform. pphwin does not use third-party advertising or cross-site tracking cookies.

Data Retention

pphwin retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to the following retention considerations:

• Active Accounts: Personal data associated with an active pphwin account is retained for the duration of the account's active status and for a reasonable period thereafter to enable account reactivation.
• Closed Accounts: Following account closure, pphwin retains personal data for a minimum period as required by applicable Philippine law — including PAGCOR regulatory obligations, anti-money laundering record-keeping requirements (typically 5 years), and tax compliance obligations.
• KYC Documents: Identity verification documents are retained for the period required by applicable AML and gaming regulations from the date of the last transaction or account closure, whichever is later.
• Transaction Records: Financial transaction records are retained for the period required by Philippine tax and AML regulations.
• Marketing Data: Marketing communication preferences and related data are retained until you withdraw your consent or close your account, whichever comes first.
• Support Communications: Customer support correspondence is retained for a reasonable period to enable resolution of disputes and to support quality assurance.

Upon expiry of the applicable retention period, pphwin will securely delete or anonymize your personal data so that it can no longer be associated with you as an individual.

Your Data Rights

Under the Philippine Data Privacy Act of 2012, pphwin players have the following rights in respect of their personal data. You may exercise any of these rights by contacting pphwin's Data Protection Officer (see Section 14):

pphwin will respond to valid data rights requests within 15 business days of receipt. In complex cases, this period may be extended by a further 15 business days, in which case you will be notified of the extension and the reason for it.

Data Security

pphwin implements technical and organizational security measures appropriate to the nature and sensitivity of the personal data we process. Our security measures include:

• Encryption: All data transmitted between your device and pphwin servers is encrypted using TLS 1.2 or higher. Sensitive data at rest, including financial data and KYC documents, is encrypted using AES-256.
• Access Controls: Access to personal data is restricted to authorized pphwin personnel and service providers who require access to perform their functions. Role-based access controls and multi-factor authentication are enforced for all system access.
• Intrusion Detection: pphwin's infrastructure is monitored 24/7 for unauthorized access attempts, anomalous activity, and security threats.
• Secure Development: pphwin follows secure software development practices, including regular security testing and vulnerability assessments of platform components.
• Staff Training: All pphwin personnel with access to personal data undergo regular data privacy and security training.
• Incident Response: pphwin maintains a documented data breach response plan. In the event of a confirmed breach affecting your personal data, pphwin will notify you and the National Privacy Commission as required by law.

Children's Privacy — 21+ Only

pphwin's services are strictly restricted to individuals aged 21 years and above, in compliance with PAGCOR's minimum age requirement for online gaming in the Philippines. pphwin does not knowingly collect personal data from any person under the age of 21.

If pphwin becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended and the personal data will be deleted or handled in accordance with applicable regulations as promptly as reasonably possible.

If you believe that pphwin may have inadvertently collected personal data from a person under the age of 21, please contact our Data Protection Officer immediately using the contact details in Section 14.

Cross-Border Data Transfers

Some of pphwin's service providers and technology partners are located outside of the Philippines. Where personal data is transferred to a recipient in another country, pphwin ensures that appropriate safeguards are in place to protect your data, including:

• Transferring data only to countries or organizations that provide an adequate level of data protection as assessed under applicable Philippine data privacy law and NPC guidance.
• Implementing standard contractual clauses or equivalent binding data protection obligations in contracts with international data processors.
• Limiting the personal data transferred to the minimum necessary for the specific service being provided.

By using pphwin and accepting these Terms and this Privacy Policy, you acknowledge and consent to the transfer of your personal data to service providers in other countries for the purposes described in this policy and subject to the safeguards described above.

Updates to This Policy

pphwin may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. The "Effective Date" at the top of this policy indicates when the current version came into force.

When material changes are made to this Privacy Policy, pphwin will notify registered players via the mobile number or email address associated with their account, or by displaying a prominent notice on the platform, prior to the changes taking effect. We encourage you to review this policy periodically to stay informed about how pphwin protects your personal data.

Your continued use of the pphwin platform following notification of a policy update constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with a material change, you should stop using the platform and may request account closure.

Contact & Data Protection Officer

pphwin has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012 and the National Privacy Commission's implementing rules. The DPO is responsible for overseeing pphwin's compliance with data privacy obligations and serves as the primary point of contact for data privacy inquiries and rights requests from players.

To exercise any of your data rights, submit a privacy inquiry, or raise a data privacy concern, please contact the pphwin Data Protection Officer using the details below. All data privacy requests should include your registered pphwin username and a clear description of your request to allow us to process it efficiently.

Data Protection Officer — pphwin
Email (plain text — not a clickable link):
support@pphwin.bio

For general account or gaming support inquiries unrelated to data privacy, our customer support team is available 24 hours a day, 7 days a week via the support chat accessible from any page on the pphwin platform.

If you are not satisfied with pphwin's response to a data privacy request or complaint, you have the right to lodge a complaint with the Philippine National Privacy Commission.