phwin7 Privacy Policy

1. Introduction

phwin7 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all individuals who access or use the phwin7 website at https://phwin7.app and its associated services (collectively, the "Services"). This Privacy Policy describes how phwin7 collects, uses, stores, shares, and protects your personal data in connection with your use of the Services.

This Privacy Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as applicable guidelines issued by the National Privacy Commission (NPC) of the Philippines. By registering an account with phwin7 or otherwise using the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read together with our Terms & Conditions, which govern your use of the phwin7 platform. Capitalised terms not defined in this Privacy Policy have the meanings given to them in the Terms & Conditions.

2. Personal Data We Collect

phwin7 collects personal data from you in the following ways: directly from you when you register an account or interact with the Services; automatically when you use the platform; and from third parties such as payment processors and identity verification providers. The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS number).
• Contact Data: Email address, mobile phone number, and residential address (including barangay, city/municipality, province, and postal code).
• Account Data: Username, encrypted password, account preferences, communication preferences, and responsible gaming settings.
• Financial Data: GCash account details, Maya account details, bank account information (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank), debit card details (card number is not stored in full), transaction history, deposit and withdrawal records, and account balance information.
• Gaming Data: Game history, wagering activity, session duration, game preferences, bonus usage, and responsible gaming tool usage.
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, time zone, and unique device identifiers.
• Usage Data: Pages visited, features used, links clicked, session timestamps, and navigation patterns within the phwin7 platform.
• Communications Data: Records of your communications with phwin7 customer support, including live chat transcripts, email correspondence, and support ticket history.
• Verification Data: Photographs, selfies, and copies of identity documents submitted for KYC (Know Your Customer) verification purposes.

phwin7 does not intentionally collect sensitive personal information beyond what is necessary for identity verification and regulatory compliance. Where sensitive personal information is collected (such as government ID numbers), it is processed strictly in accordance with the Data Privacy Act of 2012.

3. How We Use Your Personal Data

phwin7 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your phwin7 player account, including processing your registration, verifying your identity, and enabling you to access the Services.
• Service Delivery: To provide you with access to phwin7's games, features, and content, including live dealer games, slots, fishing games, crash titles, bingo, and sports betting.
• Transaction Processing: To process deposits, withdrawals, and other financial transactions through your chosen payment method (GCash, Maya, bank transfer, or debit card).
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with Philippine anti-money laundering laws and PAGCOR regulatory requirements.
• Regulatory Compliance: To comply with applicable Philippine laws and regulations, including the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and PAGCOR licensing requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on the phwin7 platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our 24/7 customer support channels.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits, session timers, and self-exclusion.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may opt out at any time through your account settings.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the phwin7 platform, user interface, and game selection based on aggregated and anonymised data.

4. Legal Basis for Processing

phwin7 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and phwin7 (i.e., the Terms & Conditions), including account management, service delivery, and transaction processing.
• Legal Obligation: Processing is necessary for phwin7 to comply with applicable Philippine laws and regulations, including KYC/AML obligations and PAGCOR licensing requirements.
• Legitimate Interests: Processing is necessary for phwin7's legitimate interests in operating a secure, fair, and compliant gaming platform, including fraud prevention, security monitoring, and platform improvement, provided such interests are not overridden by your rights and interests.
• Consent: For certain processing activities, such as marketing communications and non-essential cookies, phwin7 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing and Disclosure

phwin7 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash (Mynt), Maya (Voyager Innovations), and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and identity verification service providers engaged by phwin7 to assist with age verification and document authentication.
• Game Providers: Licensed game software providers whose games are available on the phwin7 platform, to the extent necessary for game delivery and RNG certification.
• IT and Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers engaged by phwin7 to operate and secure the platform.
• Regulatory Authorities: The Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulatory obligation.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required pursuant to a valid legal process, court order, or applicable law.
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by phwin7, subject to professional confidentiality obligations.

All third parties with whom phwin7 shares personal data are required to process such data in accordance with applicable data protection laws and phwin7's data processing requirements.

6. Data Retention

phwin7 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account Data: Retained for the duration of your active phwin7 account and for a minimum of five (5) years following account closure, in compliance with Philippine AML record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC/Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer Support Records: Retained for a minimum of three (3) years from the date of the last interaction.
• Marketing Consent Records: Retained for as long as you remain subscribed to marketing communications, plus a reasonable period thereafter for compliance purposes.

Upon expiry of the applicable retention period, phwin7 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

7. Security Measures

phwin7 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the phwin7 platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls limiting access to personal data to authorised phwin7 personnel on a strict need-to-know basis.
• Regular security assessments, vulnerability scanning, and penetration testing of the phwin7 platform and infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While phwin7 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phwin7 will notify you and the National Privacy Commission in accordance with applicable requirements under the Data Privacy Act of 2012.

8. Cookies and Tracking Technologies

phwin7 uses cookies and similar tracking technologies (such as web beacons and local storage) to enhance your experience on the platform, remember your preferences, and analyse how the platform is used. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the phwin7 platform, including session management, authentication, and security. These cookies cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics Cookies: Used to collect aggregated, anonymised information about how players use the phwin7 platform, enabling us to improve the user experience and platform performance.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of phwin7's marketing campaigns, where you have consented to receive marketing communications.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phwin7 platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

9. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phwin7:

• Right to be Informed: The right to be informed of how your personal data is collected, used, stored, and shared, as described in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data phwin7 holds about you, together with information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by phwin7.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phwin7's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on phwin7's legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phwin7 has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact the phwin7 Data Protection Officer using the contact details provided in Section 13 of this Privacy Policy. phwin7 will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

10. Children's Privacy

The phwin7 platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law and PAGCOR regulations governing casino-style gambling. phwin7 does not knowingly collect personal data from individuals under the age of 21.

If phwin7 becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, all personal data associated with the account will be deleted, and any funds will be returned to the payment source. If you believe that phwin7 may have inadvertently collected personal data from a minor, please contact us immediately at [email protected].

11. Third-Party Links

The phwin7 platform may contain links to third-party websites or services for informational purposes. phwin7 is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party websites you visit. This Privacy Policy applies solely to personal data collected by phwin7 through the phwin7 platform and Services.

12. Changes to This Privacy Policy

phwin7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, phwin7 will notify registered players via email or a prominent notice on the platform prior to the changes taking effect. The date of the most recent revision is indicated at the top of this page.

Your continued use of the phwin7 Services following the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. If you do not agree to the revised Privacy Policy, you must cease using the Services and may request account closure by contacting customer support.

13. Contact and Data Protection Officer

phwin7 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO:

• Email: [email protected]
• Response Time: Within five (5) business days for general enquiries; within fifteen (15) business days for formal data subject requests.
• Support Hours: 24 hours a day, 7 days a week via live chat within your phwin7 account dashboard.

If you are not satisfied with phwin7's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy was last reviewed and updated in May 2026. Previous versions are available upon request by contacting the phwin7 Data Protection Officer.