phlwin is committed to protecting the personal information of every Filipino player on our platform. This Privacy Policy explains exactly what data we collect, how we use it, who we share it with, and how you can exercise your rights under applicable Philippine data protection law.
Effective Date: January 1, 2026A plain-language overview of how phlwin handles your personal data. These summaries do not replace the full policy — please read the complete document below for all applicable details.
phlwin collects only the personal data necessary to operate your account, verify your identity under Philippine KYC requirements, process your GCash and PayMaya transactions, and provide customer support. We do not collect data we don't need.
phlwin does not sell, rent, or trade your personal information to any third party for their own commercial purposes. Data shared with third parties is limited to what is required to deliver services you use — such as payment processors and certified game providers — and is governed by strict data processing agreements.
All personal data transmitted between your device and phlwin's servers is protected by 256-bit SSL/TLS encryption — the same standard used by Philippine banks and major financial institutions. Your data is never transmitted in plain text over any phlwin channel.
phlwin's data handling practices are designed to comply with the Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its implementing rules. As a Filipino player, you hold the full set of data subject rights established under Philippine law.
phlwin retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable Philippine law and regulatory obligations. Account data is deleted or anonymised following the expiry of mandatory retention periods after account closure.
You have the right to access, correct, object to, and request erasure of your personal data held by phlwin, subject to our legal and regulatory obligations. All data subject requests can be submitted to [email protected] and will be actioned within the timeframes required under Philippine data protection law.
🔐 Summary: phlwin ("we," "us," "the Platform") takes your privacy seriously. This Privacy Policy describes how phlwin collects, processes, stores, and protects your personal information when you use phlwin.lat and associated services. This policy applies to all registered players and visitors and forms part of phlwin's Terms and Conditions. Please read it carefully before creating an account.
1.1 phlwin operates an online casino and sports betting platform accessible at phlwin.lat, serving players in the Philippines and other jurisdictions where online gaming is permitted. The operation of this platform necessarily involves the collection and processing of certain personal data about our players and visitors.
1.2 phlwin is committed to handling all personal data transparently, fairly, and securely, in compliance with the Republic Act No. 10173 (Data Privacy Act of 2012) of the Philippines, its Implementing Rules and Regulations, and all applicable orders and issuances of the National Privacy Commission (NPC) of the Philippines.
1.3 This Privacy Policy explains: what categories of personal data phlwin collects; the purposes for which we process that data; the legal bases on which we rely for processing; with whom we share data; how long we retain data; the technical and organisational measures we use to protect it; and the rights available to you as a data subject under Philippine law.
1.4 By creating a phlwin account or continuing to use the phlwin Platform after the effective date of this policy, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not create an account or continue using phlwin.
2.1 For the purposes of the Data Privacy Act of 2012 and its Implementing Rules, phlwin acts as the Personal Information Controller in respect of all personal data collected through the phlwin Platform at phlwin.lat.
2.2 As Personal Information Controller, phlwin determines the purposes and means of processing the personal data of its registered players and visitors. Where phlwin engages third-party service providers to process personal data on its behalf, those providers act as Personal Information Processors subject to binding data processing agreements with phlwin.
2.3 Questions, concerns, or requests relating to this Privacy Policy or phlwin's data handling practices should be directed to phlwin's Data Protection contact at [email protected] (plain text — not a clickable link).
3.1 This Privacy Policy applies to:
3.2 This policy does not apply to third-party websites, services, or platforms linked from or associated with phlwin. phlwin is not responsible for the privacy practices of any third-party service and encourages users to review the privacy policies of any third-party platforms they visit.
4.1 phlwin collects the following categories of personal data:
💡 phlwin does not collect sensitive personal information — such as racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation — and has no legitimate purpose for doing so in connection with the operation of an online gaming platform.
5.1 phlwin processes personal data on the following legal bases as recognised under the Data Privacy Act of 2012 of the Philippines:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Contractual necessity — required to perform the service agreement |
| KYC identity and age verification | Legal obligation — required under Philippine gaming and AML regulations |
| Payment processing (deposits and withdrawals) | Contractual necessity — required to deliver the service |
| Customer support and dispute resolution | Contractual necessity and legitimate interest |
| Anti-fraud and AML monitoring | Legal obligation and legitimate interest |
| Responsible gaming compliance | Legal obligation and legitimate interest |
| Platform security and abuse prevention | Legitimate interest |
| Marketing communications (where opted in) | Consent — you may withdraw consent at any time |
| Analytics and platform improvement | Legitimate interest (anonymised or pseudonymised data) |
6.1 phlwin processes your personal data for the following specific purposes:
6.2 phlwin will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required by applicable law, obtaining your consent.
7.1 phlwin does not sell, rent, or trade your personal information to any third party for their own commercial marketing or other purposes.
7.2 phlwin may share your personal data with the following categories of third parties, strictly limited to what is necessary for the stated purpose:
7.3 All third-party service providers who process personal data on phlwin's behalf are bound by contractual data processing agreements that impose obligations consistent with the Data Privacy Act of 2012 and prohibit any use of your data beyond the specific purpose for which it was shared.
🔒 Reminder: phlwin will never ask you to share your password, full GCash PIN, or complete payment card number via live chat, email, or any support channel. If you receive any such request purportedly from phlwin, treat it as fraudulent and contact us immediately.
8.1 The phlwin Platform's primary data storage and processing infrastructure is located within or in jurisdictions that provide adequate data protection standards. Where personal data must be transferred to a third-party service provider located outside the Philippines, phlwin will:
8.2 By registering for a phlwin account, you acknowledge that certain data may be processed by third-party providers operating in jurisdictions outside the Philippines where such processing is necessary for service delivery, subject to the safeguards described in this Section.
9.1 phlwin retains personal data for the periods specified below, or for such longer periods as are required by applicable Philippine law, regulatory obligations, or ongoing dispute resolution processes:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years after closure |
| KYC verification documents | Duration of account + 5 years after closure (AML obligation) |
| Financial transaction records | 10 years (Philippine AML and tax record-keeping requirements) |
| Gameplay and wagering records | Duration of account + 5 years after closure |
| Customer support communications | 3 years from last interaction |
| Self-exclusion records | Permanent (to enforce future exclusion if account is re-opened) |
| Marketing consent records | Duration of consent + 3 years |
| Technical logs (IP, device) | 12 months rolling |
9.2 Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Anonymised aggregated data may be retained for platform analytics purposes indefinitely, as it can no longer identify any individual.
10.1 phlwin implements the following technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:
10.2 Despite these measures, no data transmission or storage system is completely impenetrable. In the unlikely event of a personal data breach affecting your data, phlwin will notify you and the National Privacy Commission as required by the Data Privacy Act of 2012, within the timeframes mandated by law.
11.1 phlwin uses cookies and similar tracking technologies on the Platform for the following purposes:
11.2 phlwin does not use cookies for third-party advertising targeting. Your browsing behaviour on phlwin is not shared with advertising networks for retargeting purposes.
11.3 You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent your ability to use the phlwin Platform.
12.1 phlwin's services are strictly for individuals aged 21 years and older. phlwin does not knowingly collect or process personal data of persons under 21 years of age. Age verification is a mandatory step in the account registration and KYC process specifically to enforce this restriction.
12.2 If phlwin determines at any point that personal data has been collected from a person under 21 years of age, the relevant account will be immediately closed, any balance forfeited in accordance with the Terms and Conditions, and the personal data of the underage individual deleted in accordance with our data retention policies, subject to any mandatory reporting obligations to relevant Philippine authorities.
12.3 If you have reason to believe that a minor has registered on phlwin, please report it immediately to [email protected].
13.1 Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data held by phlwin:
You have the right to request a copy of the personal data phlwin holds about you and information about how it is processed. Submit your request to [email protected] and phlwin will respond within 15 business days.
You have the right to request correction of any inaccurate or incomplete personal data phlwin holds about you. Certain corrections may require supporting documentation for verification purposes.
You have the right to request deletion of your personal data in certain circumstances. This right is subject to phlwin's legal and regulatory obligations — some data must be retained for the periods specified in Section 9 regardless of erasure requests.
You have the right to object to phlwin's processing of your data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interest in certain circumstances.
You have the right to receive a copy of personal data you have provided to phlwin in a structured, commonly used, machine-readable format, and to have that data transmitted to another controller where technically feasible.
In certain circumstances, you have the right to request that phlwin restricts the processing of your personal data — for example, while the accuracy of data you have disputed is being verified.
You have the right to be informed about how phlwin processes your personal data — which is the primary purpose of this Privacy Policy. phlwin will notify you of any material changes to this policy that affect your data.
If you believe phlwin has not handled your personal data in accordance with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
14.1 phlwin will only send you promotional communications about phlwin offers, new games, bonuses, and events if you have provided explicit prior consent to receive such communications during registration or at a later point through your Account Settings.
14.2 You may withdraw your consent to receive marketing communications from phlwin at any time, free of charge and without providing any reason, by:
14.3 Withdrawal of consent for marketing communications does not affect phlwin's ability to send you service-related communications necessary for the operation of your account — such as transaction confirmations, security alerts, KYC requests, and important policy updates.
15.1 phlwin may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory guidance, or the features and services offered on the Platform.
15.2 When material changes are made to this Privacy Policy, phlwin will post a notice on the Platform and, where practicable, send a notification to registered players' contact details on file. The effective date at the top of this policy will be updated to reflect the date on which the revised policy takes effect.
15.3 Continuing to use the phlwin Platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with the updated policy, you should discontinue use of the Platform and may request account closure as described in Section 14 of the Terms and Conditions.
16.1 For any questions, concerns, or requests relating to this Privacy Policy or phlwin's handling of your personal data — including the exercise of any data subject rights described in Section 13 — please contact phlwin as follows:
16.2 Where phlwin requires additional information to verify your identity before processing a data subject request (to ensure data is not disclosed to an unauthorised party), we will notify you of what is required within the initial acknowledgement response.
🇵🇭 National Privacy Commission: If you believe your data rights under the Data Privacy Act of 2012 have not been upheld by phlwin, you may file a complaint with the National Privacy Commission of the Philippines. phlwin encourages players to contact us directly first so that we have the opportunity to resolve any concern — but your right to escalate to the NPC is unconditional.
Your data is safe, your rights are protected, and your winnings arrive in your GCash wallet in minutes. That's the phlwin promise to every Filipino player.