phwin6 Privacy
Policy

1 Introduction

This Privacy Policy ("Policy") is issued by phwin6 ("phwin6", "we", "us", "our") and applies to all personal data collected through the phwin6.net website, its subdomains, and any officially sanctioned phwin6 mobile application (collectively, the "Platform"). This Policy forms part of phwin6's broader legal framework alongside the Terms & Conditions and Responsible Gaming Policy.

phwin6 is committed to protecting the privacy and personal data of all users who access the Platform. We process personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable guidelines issued by the National Privacy Commission (NPC) of the Philippines.

By accessing or using the phwin6 Platform — whether you are browsing as a guest, registering a new account, making a deposit, or participating in a game — you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.

2 Data Controller

phwin6 acts as the personal information controller in respect of all personal data collected through the Platform. This means phwin6 determines the purposes and means of processing your personal data and is responsible for ensuring that all processing activities comply with applicable Philippine data privacy law.

If you have any questions, concerns, or requests relating to your personal data or this Policy, you may contact the phwin6 Data Privacy Officer through the channels listed in Section 14 of this Policy. phwin6 is committed to acknowledging all data privacy enquiries within 72 hours and resolving them within a reasonable period.

3 Information We Collect

phwin6 collects personal data through several channels — directly from you when you register or use the Platform, automatically through technical systems when you browse or play, and in limited cases from trusted third-party sources as part of our verification obligations. The categories of data collected are described below.

3.1 Registration & Account Data

When you create a phwin6 account, we collect the following information:

• Full legal name
• Date of birth (used to verify you are 21 years of age or older)
• Email address
• Mobile phone number
• Residential address (including city — e.g., Manila, Cebu, Davao, Makati, Quezon City)
• Username and encrypted password
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering regulations and PAGCOR requirements, phwin6 may collect:

• Government-issued photo ID (e.g., Philippine passport, driver's license, UMID, SSS ID, PhilSys National ID)
• Proof of address documents (e.g., utility bill, bank statement)
• Proof of payment method (e.g., screenshot of GCash or Maya account showing your name)
• Selfie or liveness check image for identity matching

3.3 Financial & Transaction Data

• Deposit and withdrawal history
• Payment method details (GCash number, Maya account, BPI/BDO/UnionBank account number — last four digits only where applicable)
• Transaction amounts in Philippine Peso (PHP / ₱) or cryptocurrency (USDT TRC20)
• Bonus and promotion redemption records

3.4 Gameplay & Activity Data

• Game participation history (slots, bingo, live casino, sports betting)
• Wagering amounts, game outcomes, and session durations
• Responsible gaming tool usage (deposit limits, self-exclusion requests)
• Customer support communication logs

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps and access logs
• Cookies and similar tracking technologies (see Section 6)

4 How We Use Your Data

phwin6 uses the personal data it collects exclusively for legitimate, clearly defined purposes. The table below summarises the primary use cases:

phwin6 does not use your personal data for any purpose not listed above without first obtaining your explicit consent or as otherwise required by Philippine law.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, phwin6 processes your personal data on the following lawful bases:

• Contractual necessity: Processing required to perform the contract between you and phwin6 — i.e., to operate your account, process deposits and withdrawals, and deliver gaming services.
• Legal obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering regulations, PAGCOR compliance requirements, and NPC data privacy obligations.
• Legitimate interests: Processing carried out in pursuit of phwin6's legitimate business interests, such as fraud prevention, platform security, and service improvement — where such interests are not overridden by your rights and freedoms.
• Consent: For specific processing activities such as marketing communications and personalised promotions, phwin6 will obtain your explicit consent and will provide a straightforward mechanism to withdraw that consent at any time through your account settings.

6 Cookies & Tracking Technologies

phwin6 uses cookies and similar tracking technologies to operate the Platform effectively, personalise your experience, and gather analytical insights to improve our services. A cookie is a small text file placed on your device when you visit phwin6.net.

6.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function — including session management, login authentication, and security tokens. These cannot be disabled without breaking core Platform functionality.
• Analytical cookies: Used to understand how players navigate and use the Platform, which games are most popular, and where technical issues occur. Data collected is aggregated and anonymised.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming limits to streamline repeat visits.
• Marketing cookies: Used — only with your consent — to deliver relevant phwin6 promotions and bonus offers based on your activity and game preferences.

6.2 Managing Cookies

You can manage or disable non-essential cookies through the phwin6 cookie preference centre, accessible via the cookie banner shown on your first visit to phwin6.net, or at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform.

7 Data Sharing & Disclosure

phwin6 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and only to the extent necessary for each specified purpose:

• Payment processors: GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, USDT TRC20 network operators, and Coins.ph — to process your deposits and withdrawal requests.
• Identity verification providers: Third-party KYC and AML compliance vendors who assist phwin6 in verifying player identities and screening against regulatory watchlists.
• Game providers: Licensed third-party game studios whose games are hosted on the phwin6 Platform. These providers may receive anonymised gameplay data for game performance monitoring.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities where disclosure is required by law, court order, or regulatory mandate.
• IT and platform infrastructure providers: Cloud hosting, cybersecurity, and technical support vendors who process data on phwin6's behalf under strict data processing agreements.

All third-party service providers engaged by phwin6 are contractually required to implement appropriate technical and organisational security measures and to process personal data only on phwin6's documented instructions.

8 Data Retention

phwin6 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, in accordance with Philippine AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of 2001 and its amendments.
• Gameplay and activity logs: Retained for up to three (3) years from the date of each session or activity, for responsible gaming monitoring, dispute resolution, and analytical purposes.
• Marketing preferences and consent records: Retained for the duration of your account plus two (2) years, or until you withdraw consent, whichever comes first.
• Support communication logs: Retained for up to two (2) years from the date of the last communication.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction or re-identification.

9 Data Security

phwin6 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• 256-bit TLS encryption: All data transmitted between your device and phwin6.net is encrypted in transit using industry-standard Transport Layer Security protocols.
• Encryption at rest: Sensitive personal data, including KYC documents and financial records, is encrypted when stored on phwin6 servers.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. phwin6 employees and contractors are granted only the minimum level of access required for their specific roles.
• Two-factor authentication (2FA): Available for all phwin6 player accounts and mandatory for administrative access to phwin6 internal systems.
• Regular security audits: phwin6 conducts periodic vulnerability assessments and penetration testing of its Platform infrastructure.
• Incident response protocol: phwin6 maintains a documented data breach response procedure. In the event of a data breach affecting your personal data, phwin6 will notify affected users and the National Privacy Commission in accordance with NPC Circular 16-03 requirements.

While phwin6 takes all reasonable steps to safeguard your personal data, no internet transmission or electronic storage system is completely immune from security risk. You also play a role — please use a strong, unique password for your phwin6 account and enable two-factor authentication.

10 Your Rights Under Philippine Data Privacy Law

As a data subject under the Data Privacy Act of 2012, you are entitled to the following rights in relation to your personal data held by phwin6:

• Right to be informed: The right to know whether phwin6 holds personal data about you, and to be provided with information about how that data is processed — which is the purpose of this Privacy Policy.
• Right to access: The right to request a copy of the personal data phwin6 holds about you, and to be informed of its source, recipients, and processing purposes.
• Right to rectification: The right to request correction of any inaccurate, incomplete, or outdated personal data in your phwin6 account.
• Right to erasure or blocking: The right to request deletion or blocking of your personal data where the data is unlawfully obtained, no longer necessary for the purpose it was collected, or where you have withdrawn consent and no other legal basis for processing applies.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on phwin6's legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller where technically feasible.
• Right to damages: The right to claim compensation for actual damages suffered as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data by phwin6.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact the phwin6 Data Privacy Officer via the channels in Section 14. phwin6 will respond to all valid data subject requests within 30 calendar days of receipt, in accordance with NPC guidelines.

11 Children & Minors

Age verification is conducted at registration and may be repeated at any time throughout the account's active life. If phwin6 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, phwin6 will immediately suspend the associated account, delete the personal data in question (subject to any legal retention obligations), and report the matter to relevant authorities where required.

If you are a parent or guardian and believe that a minor in your care has provided personal data to phwin6 or accessed the Platform, please contact phwin6 support immediately via live chat on phwin6.net so that the matter can be addressed promptly.

12 Third-Party Services & Links

The phwin6 Platform may display informational content that references third-party services such as payment providers (GCash, Maya, BPI, BDO) or game studios. phwin6 is not responsible for the privacy practices of any third-party service. When you interact directly with a third-party payment provider or game platform, that provider's own privacy policy governs the handling of your data.

phwin6 carefully selects its third-party partners and requires all data processors to maintain privacy and security standards consistent with Philippine data privacy law. However, phwin6 strongly encourages you to review the privacy policies of any third-party service you use in connection with your phwin6 account.

13 Updates to This Privacy Policy

phwin6 may revise this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine law, NPC regulatory guidance, or Platform features. When material changes are made, phwin6 will notify registered users by email or through a prominent notice on phwin6.net at least seven (7) days before the updated Policy takes effect.

The "Last Updated" date shown at the top of this page indicates when the Policy was most recently revised. Older versions of this Policy are available upon written request to the phwin6 Data Privacy Officer. Your continued use of the phwin6 Platform after any updated Policy is published constitutes your acceptance of those changes.

14 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a data privacy concern, please get in touch with the phwin6 Data Privacy Officer through the following channels:

• Live Chat: Available 24/7 on phwin6.net — the fastest way to reach our Filipino-speaking support and privacy team.
• Email: [email protected] — for formal written privacy requests, data access or erasure requests, and complaints.

If you are unsatisfied with phwin6's response to a privacy concern, you have the right to escalate your complaint directly to the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.