phwin7 Privacy Policy

Effective Date: October 8, 2026

1. Overview and Data Controller Identity

phwin7 is a PAGCOR-licensed online gaming operator serving Filipino players across the Philippines. As the entity that determines the purposes and means of processing personal data collected through phwin7.cam, phwin7 acts as the Personal Information Controller (PIC) under the Philippine Data Privacy Act of 2012.

phwin7 is subject to regulatory oversight by the Philippine Amusement and Gaming Corporation (PAGCOR) and complies with all applicable data protection requirements mandated by PAGCOR's licensing conditions, including anti-money laundering (AML) obligations under Republic Act No. 9160 (Anti-Money Laundering Act), as amended.

For all privacy-related inquiries, you may contact our Data Protection Officer (DPO) at the details provided in Section 13 of this Policy.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register for a phwin7 account, complete KYC (Know Your Customer) verification, make financial transactions, or contact our support team, we collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification number (from your Philippine passport, driver's license, UMID, or National ID);
• Contact Data: Residential address, email address, and Philippine mobile number;
• Financial Data: Payment account details (GCash wallet number, Maya account, bank account number), transaction history, deposit and withdrawal records, and source-of-funds declarations where required by AML regulations;
• Identity Verification Documents: Scanned or photographed copies of government-issued ID, proof of address, and any additional documentation requested for KYC or enhanced due diligence;
• Account Credentials: Username and encrypted password (phwin7 never stores passwords in plaintext);
• Support Communications: Content of live chat sessions, emails, and any other communications you send to phwin7 customer support.

2.2 Data Collected Automatically

When you access phwin7.cam, we automatically collect certain technical and behavioral data through our servers, cookies, and analytics tools:

• Device and Technical Data: IP address, device type and model, operating system, browser type and version, screen resolution, and mobile network information;
• Usage Data: Pages visited, features accessed, game sessions played, session duration, click-through patterns, and navigation paths within the platform;
• Geolocation Data: Approximate geographic location derived from your IP address, used for regulatory jurisdiction verification;
• Cookies and Tracking Data: Information collected via cookies, web beacons, pixel tags, and similar technologies as described in Section 8 of this Policy.

2.3 Data from Third Parties

phwin7 may receive personal data about you from the following third-party sources:

• Payment service providers (GCash, Maya, BPI, BDO, Metrobank, and others) when you initiate a deposit or withdrawal transaction;
• KYC and identity verification service providers used to validate government-issued identification documents;
• Fraud prevention and AML screening services that flag high-risk account or transaction patterns;
• PAGCOR or other regulatory authorities where data sharing is required by law or regulatory direction.

3. How We Use Your Personal Data

phwin7 uses your personal data solely for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity, contact, credential data
KYC identity verification (mandatory under PAGCOR licensing)	Identity data, verification documents
Processing deposits and withdrawals	Financial data, identity data
AML monitoring and fraud prevention	Financial data, usage data, identity data
Delivering gaming services and personalization	Usage data, account data
Customer support and dispute resolution	Identity, contact, support communications
Responsible gaming monitoring and self-exclusion management	Usage data, identity data, account data
Regulatory reporting to PAGCOR and NPC	Identity, financial, usage data
Platform security and technical maintenance	Technical data, usage data
Marketing communications (with your consent)	Contact data, usage data

phwin7 does not sell your personal data to third parties for their own marketing or commercial purposes. Your data is used exclusively for the purposes described in this Policy.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phwin7 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you accepted upon registration — including account management, financial transactions, and gaming service delivery;
• Legal Obligation: Processing required to comply with PAGCOR licensing requirements, Anti-Money Laundering Act obligations, National Privacy Commission regulations, and other applicable Philippine law;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests do not override your fundamental rights;
• Consent: Processing for optional purposes such as marketing communications, where your prior, free, specific, informed, and unambiguous consent has been obtained. You may withdraw this consent at any time.

5. Data Sharing and Disclosure

phwin7 shares your personal data only in the following circumstances:

5.1 Service Providers and Processors

phwin7 engages third-party service providers acting as Personal Information Processors (PIPs) under contractual arrangements that require them to maintain appropriate data protection standards. These include payment processors, KYC verification providers, IT infrastructure providers, game content providers, and customer support platform operators. Such processors access your data solely to provide services to phwin7 and are prohibited from using it for their own purposes.

5.2 Regulatory and Legal Disclosure

phwin7 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement authorities, or courts where required to do so by Philippine law, regulatory direction, valid legal process, or to protect the rights, property, and safety of phwin7, its players, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, or transfer of phwin7's business operations, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection obligations being assumed by the new operator.

6. Data Retention

phwin7 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes. Specific retention periods are as follows:

• Account and KYC Data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AML regulations;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, pursuant to AML record-keeping requirements;
• Support Communications: Retained for two (2) years from the date of the communication, or longer if related to an ongoing dispute;
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year thereafter as evidence of consent;
• Technical and Usage Data: Retained for up to twelve (12) months, except where retained longer for security or fraud investigation purposes.

When personal data is no longer required for any of the above purposes, phwin7 will securely delete or anonymize it in accordance with NPC guidelines.

7. Security Measures

phwin7 implements technical, organizational, and procedural security measures designed to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These include:

• Encryption in Transit: All data transmitted between your device and phwin7 servers is encrypted using TLS 1.2 or higher (256-bit SSL);
• Encryption at Rest: Sensitive personal data stored in phwin7 databases is encrypted at rest using industry-standard cryptographic protocols;
• Access Controls: Access to personal data is restricted to authorized phwin7 personnel and processors on a strict need-to-know basis, enforced through role-based access control;
• Two-Factor Authentication (2FA): Available for all player accounts to add an additional layer of login security;
• Penetration Testing and Audits: Regular independent security assessments of phwin7's technical infrastructure;
• Incident Response: A documented data breach response procedure in compliance with NPC notification requirements, including notifying affected data subjects and the NPC within seventy-two (72) hours of discovering a breach that is likely to result in risk to your rights and freedoms.

While phwin7 takes all reasonable steps to protect your personal data, no online system can guarantee absolute security. You are also responsible for keeping your account credentials confidential and notifying us immediately at [email protected] if you suspect unauthorized access to your account.

8. Cookies and Tracking Technologies

phwin7 uses cookies and similar technologies on phwin7.cam to maintain session continuity, remember your preferences, analyze platform usage, detect fraudulent activity, and deliver relevant content. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the platform to function — including session management, authentication, security tokens, and load balancing. These cannot be disabled without affecting platform functionality;
• Functional Cookies: Remember your preferences such as language settings, display preferences, and recently played games to improve your experience;
• Analytics Cookies: Collect aggregated, anonymized data about how players use the phwin7 platform to help us improve features and performance. No individual player is identified in analytics reports;
• Security Cookies: Support fraud detection, bot prevention, and session integrity monitoring.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality. phwin7 does not use third-party advertising or behavioral tracking cookies.

9. Your Privacy Rights Under Philippine Law

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phwin7:

To exercise any of the above rights, submit a written request to our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." phwin7 will respond within fifteen (15) business days of receiving your request. We may require you to verify your identity before processing your request.

10. Minors and Age Verification

phwin7 is strictly a platform for adults. In compliance with PAGCOR regulations governing online gaming in the Philippines, the minimum age for registering and using the phwin7 platform is twenty-one (21) years. phwin7 does not knowingly collect, process, or retain personal data from individuals under 21 years of age.

Where phwin7 discovers that personal data has been collected from a person under 21 years of age, the account will be immediately and permanently closed, all data will be deleted in accordance with applicable law, and any deposited funds will be handled in accordance with PAGCOR regulatory requirements.

phwin7 employs age verification mechanisms during the registration process and during KYC verification, including government-issued ID checks, to prevent underage individuals from accessing the platform. We encourage parents and guardians to use parental control software to prevent minors from accessing online gambling services.

11. International Data Transfers

phwin7 may transfer your personal data to service providers and processors located outside the Philippines — including hosting infrastructure providers, game content suppliers, and KYC verification vendors — where such transfers are necessary to provide the phwin7 service.

All international data transfers are conducted in compliance with the requirements of the Philippine Data Privacy Act, including ensuring that the recipient jurisdiction provides an adequate level of data protection, or that appropriate contractual safeguards (such as standard data processing agreements) are in place before the transfer occurs. phwin7 does not transfer personal data to jurisdictions or entities that cannot provide adequate protection.

12. Changes to This Privacy Policy

phwin7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. Material changes will be communicated to registered players via email to the address on file or through a prominent notice on the phwin7 platform, at least seven (7) days before the changes take effect.

Your continued use of the phwin7 platform after the effective date of any revised Privacy Policy constitutes your acknowledgment and acceptance of the updated Policy. We encourage you to review this Policy periodically. The current version will always be accessible at phwin7.cam/privacy-policy, with the effective date indicated at the top.

13. Contact Information and Data Protection Officer

phwin7 has appointed a Data Protection Officer (DPO) responsible for overseeing data privacy compliance and handling privacy-related inquiries and complaints from data subjects.

You may contact phwin7's Data Protection Officer through the following channels:

• Email: [email protected] — use subject line "Attn: Data Protection Officer"
• Live Chat: Available 24/7 at phwin7.cam — request to speak with the DPO team
• Languages: English and Filipino
• Response Time: Within 15 business days for formal privacy requests; under 5 minutes for general support queries

If you are not satisfied with phwin7's handling of your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the regulatory authority responsible for enforcing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is publicly available on the NPC's official website.