Legal
At phlwin, your privacy is not an afterthought — it's a core part of how we build and operate our platform. This Privacy Policy explains exactly what personal data phlwin collects, why we collect it, how we use it, and what rights you have as a Filipino player.
This Privacy Policy ("Policy") describes how phlwin ("phlwin," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of users ("you," "Player," or "User") who access or use the phlwin website at phlwin.asia and all associated services, including online casino games, live sabong, sports betting, bingo, slot games, and account management features (collectively, the "Platform").
phlwin operates in the Philippines and is committed to complying with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). We also adhere to applicable guidelines issued by the Philippine Amusement and Gaming Corporation (PAGCOR) with respect to player data handling.
By registering an account on phlwin or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the phlwin Platform.
phlwin collects only the personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:
phlwin collects personal data through the following means:
phlwin uses your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and securing your phlwin account; processing phlwin login requests; enabling account recovery. |
| Identity Verification (KYC) | Verifying your identity and age (21+) as required by PAGCOR regulations and the Data Privacy Act. |
| Payment Processing | Processing deposits and withdrawals via GCash, PayMaya, bank transfer, and debit card in Philippine Peso (₱). |
| Regulatory Compliance | Complying with AML obligations, PAGCOR reporting requirements, NPC data privacy obligations, and other applicable Philippine laws. |
| Fraud Prevention | Detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, and unauthorized account access. |
| Responsible Gaming | Administering deposit limits, loss limits, session reminders, and self-exclusion programs to protect player welfare. |
| Customer Support | Responding to your inquiries, resolving disputes, and improving our support services. |
| Platform Improvement | Analysing usage patterns to improve game offerings, platform performance, and user experience for Filipino players. |
| Marketing | Sending promotional offers, bonus notifications, and platform updates — only where you have provided consent and only via channels you have opted into. |
Under the Data Privacy Act of 2012, phlwin processes your personal data on the following legal bases:
phlwin does not sell your personal data to third parties. We share your data only in the following limited circumstances:
phlwin engages trusted third-party service providers to assist in operating the Platform, including KYC and identity verification providers, payment processors (GCash, PayMaya, Philippine banks), fraud detection and AML screening services, cloud hosting and infrastructure providers, and customer support platform providers. All service providers are contractually bound to process your data only on phlwin's instructions and in compliance with the Data Privacy Act.
phlwin may disclose your personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), or other Philippine government authorities where required by law, court order, or regulatory directive.
In the event of a merger, acquisition, or sale of all or substantially all of phlwin's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer via email or an in-platform notification.
phlwin may disclose your data where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of phlwin, our players, or the public — including sharing information with law enforcement agencies in connection with suspected criminal activity.
phlwin uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit phlwin.asia. We use the following types of cookies:
You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect the functionality of the phlwin Platform, including your ability to log in and play games.
phlwin retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulation. Specifically:
When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, phlwin will securely delete or anonymise the data.
Our security measures include, but are not limited to:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phlwin will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, as required by the Data Privacy Act.
As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phlwin:
You have the right to request a copy of the personal data phlwin holds about you, including information on how it is being processed.
You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update basic account details directly from your phlwin account settings.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under PAGCOR and AMLC regulations.
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your individual circumstances warrant it.
You may request a copy of your personal data in a structured, commonly used, machine-readable format, where technically feasible.
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact phlwin's Data Protection Officer at [email protected]. We will respond to all verified requests within fifteen (15) business days, as required by the Data Privacy Act. We may request proof of identity before processing your request.
If you believe phlwin has not adequately addressed your privacy concerns, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
If you are a parent or guardian and believe your child has provided personal data to phlwin, please contact us immediately at [email protected] so we can take prompt action.
phlwin's primary operations and data storage are based in the Philippines. In some cases, personal data may be processed by our service providers in other countries — for example, cloud infrastructure providers or KYC verification platforms with servers outside the Philippines.
Where personal data is transferred outside the Philippines, phlwin ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by the Data Privacy Act of 2012. These safeguards include contractual data processing agreements incorporating the NPC's standard contractual clauses, and transfers only to jurisdictions with adequate data protection frameworks.
phlwin may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.
The most current version of this Policy will always be available at phlwin.asia/privacy-policy, with the effective date clearly indicated at the top of the page. Your continued use of the phlwin Platform after the effective date of any update constitutes your acceptance of the revised Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or phlwin's handling of your personal data, please contact our Data Protection Officer:
For complaints that remain unresolved after contacting phlwin, you may escalate to the National Privacy Commission of the Philippines.
Every Filipino player on phlwin deserves to know their personal information is handled with care, transparency, and full legal compliance.
All data transmitted between your device and phlwin is protected by SSL/TLS encryption. Your phlwin login credentials and financial details are never sent in plain text.
phlwin fully complies with the Republic Act No. 10173 — the Data Privacy Act of 2012 — and all NPC issuances. Your rights as a Filipino data subject are respected and upheld.
phlwin never stores raw payment card numbers. All debit card data is tokenised immediately upon entry. GCash and PayMaya transactions are processed directly through their secure APIs.
phlwin has a registered Data Protection Officer (DPO) who oversees all privacy matters. You can reach our DPO directly at [email protected] for any data-related concerns.
phlwin does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Your information is used only to operate and improve the phlwin Platform.
Access, correct, delete, or port your data — phlwin honours all data subject rights under the DPA. Submit a request and we'll respond within 15 business days, guaranteed.
phlwin protects your privacy so you can focus on what matters — enjoying the best online casino and live sabong experience in the Philippines.
21+ only. Please gamble responsibly. PAGCOR regulated.