1. Data Controller
For the purposes of the Philippine Data Privacy Act of 2012 (R.A. 10173) and its Implementing Rules and Regulations, the data controller responsible for your personal data is phwww, operating the platform accessible at phwww.vip ("phwww," "we," "us," or "our").
phwww has appointed a Data Privacy Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection legislation. Contact details for the DPO are provided in Section 13 of this Policy.
2. Data We Collect
phwww collects personal data in the following categories, depending on how you interact with the Platform:
Registration & Identity Data:
- Full legal name, date of birth, gender
- Philippine mobile number and email address
- Government-issued ID number and ID document images (for KYC purposes)
- Selfie photograph submitted during identity verification
- Residential address (where required for enhanced KYC)
Financial Data:
- GCash mobile number, PayMaya account reference, or bank account details associated with your phwww account
- Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers
- Account balance history
Gaming & Usage Data:
- Game session logs, bet history, wager amounts, game outcomes, and win/loss records
- Platform interaction logs, feature usage, and session duration data
- Bonus and promotion participation records
Technical Data:
- IP address, device identifiers, browser type, operating system, and mobile device model
- Geolocation data (city/region level, derived from IP address) used for compliance verification
- Cookie and similar tracking technology data as described in Section 6
Communications Data:
- Records of customer support interactions, including live chat transcripts and email correspondence
- Feedback, complaints, and dispute records
📌 phwww does not collect sensitive personal information beyond what is strictly required for identity verification (KYC) under PAGCOR regulatory obligations and anti-money laundering compliance requirements.
3. How We Use Your Data
phwww uses the personal data we collect for the following purposes:
- Account Management: To create, maintain, and administer your phwww account, including authentication, password recovery, and account security.
- Identity Verification (KYC): To verify your identity and age (21+) in compliance with PAGCOR licensing requirements and the Anti-Money Laundering Act of 2001 (AMLA) and its amendments.
- Payment Processing: To process deposits, withdrawals, and refunds via GCash, PayMaya, BPI, BDO, Metrobank, and other supported Philippine payment methods.
- Game Operation: To operate, log, and audit all gaming activity on the Platform, including calculating bet outcomes, applying bonus credits, and maintaining fair play records.
- Regulatory Compliance: To fulfill reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC) as required by Philippine law.
- Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behavior and to implement deposit limits, cooling-off periods, and self-exclusion requests in accordance with our Responsible Gaming policy.
- Customer Support: To respond to your queries, complaints, and support requests, and to maintain records of such interactions.
- Platform Improvement: To analyze usage patterns, diagnose technical issues, and improve the phwww Platform's features, performance, and user experience.
- Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent or where permitted under applicable law. You may opt out at any time.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized access, and other prohibited conduct on the Platform.
4. Legal Basis for Processing
phwww processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:
- Contractual Necessity: Processing necessary for the performance of your contract with phwww — including account registration, game operation, and payment processing.
- Legal Obligation: Processing required to comply with Philippine law, including PAGCOR licensing conditions, AMLA reporting requirements, and NPC data protection obligations.
- Legitimate Interests: Processing necessary for phwww's legitimate interests in fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights.
- Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5. Sharing Your Data
phwww does not sell your personal data. We may share your data with the following categories of third parties only to the extent necessary for the stated purposes:
- Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other Philippine payment processors, for the sole purpose of executing your deposit and withdrawal transactions.
- Game Providers: Licensed third-party game suppliers (such as JILI Games and other certified providers) who operate games accessible through the phwww Platform, for game operation and RNG audit purposes.
- KYC & Identity Verification Providers: Third-party identity verification services engaged to process KYC documentation on phwww's behalf, under strict data processing agreements.
- Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulatory obligation.
- Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by phwww, subject to professional confidentiality obligations.
All third-party service providers engaged by phwww are required to process your personal data only on phwww's instructions and in compliance with applicable data protection law. phwww does not permit third parties to use your data for their own independent purposes.
6. Cookies & Tracking Technologies
phwww uses cookies and similar tracking technologies on the Platform for the following purposes:
- Essential Cookies: Required for the Platform to function, including session management, authentication tokens, and security features. These cannot be disabled without affecting Platform functionality.
- Performance Cookies: Collect anonymized data about how players use the Platform (e.g., pages visited, error encounters) to help phwww diagnose issues and improve the user experience.
- Functional Cookies: Remember your preferences (e.g., language settings, game history display) to provide a more personalized experience.
- Marketing Cookies: Used, with your consent, to deliver relevant promotional content. You may opt out of marketing cookies through your account settings or browser controls.
You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the phwww Platform. phwww's cookies do not store full payment card numbers or government ID data.
7. Data Retention
phwww retains your personal data for as long as necessary to fulfill the purposes outlined in this Policy, subject to the following minimum retention periods:
- Account & KYC Records: Retained for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing conditions and AMLA record-keeping requirements.
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLA and PAGCOR regulations.
- Game Session Logs: Retained for a minimum of three (3) years for audit, dispute resolution, and regulatory reporting purposes.
- Customer Support Records: Retained for two (2) years following resolution of the relevant inquiry or complaint.
- Marketing Consent Records: Retained for the duration of your account and for one (1) year following opt-out, to evidence compliance.
Following expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with phwww's data disposal procedures.
8. Data Security
phwww implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
- TLS/SSL encryption for all data transmitted between your device and the phwww Platform
- AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records
- Cryptographic hashing (bcrypt) for all stored passwords — phwww never stores plaintext passwords
- Role-based access controls limiting internal access to personal data on a strict need-to-know basis
- Regular security audits, penetration testing, and vulnerability assessments by independent security specialists
- Incident response procedures for data breach detection, containment, and notification in accordance with NPC requirements
⚠️ In the event of a personal data breach that poses a real risk to your rights, phwww will notify affected players and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by NPC Circular No. 16-03.
9. Your Rights
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phwww:
- Right to be Informed: The right to know how your personal data is being collected and processed — which this Privacy Policy fulfills.
- Right of Access: The right to request a copy of the personal data phwww holds about you, including the purposes for which it is processed.
- Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by phwww.
- Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
- Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller, where technically feasible.
- Right to Object: The right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests.
- Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe your data privacy rights have been violated.
To exercise any of the above rights, please contact phwww's Data Privacy Officer using the contact details in Section 13. phwww will respond to verified requests within fifteen (15) days, in accordance with NPC guidelines.
10. Children's Privacy
The phwww Platform is strictly intended for individuals who are at least 21 years of age, in compliance with PAGCOR's age requirement for casino-style online gaming in the Philippines. phwww does not knowingly collect personal data from any person below the age of 21.
If phwww becomes aware that personal data has been collected from an individual below the minimum age, such data will be deleted promptly and the associated account will be permanently closed. If you believe that a minor has registered an account on phwww, please contact our support team or DPO immediately.
11. International Data Transfers
phwww primarily stores and processes personal data within the Philippines. Where personal data is transferred to third-party service providers located outside the Philippines (for example, international game providers or cloud infrastructure providers), phwww ensures that such transfers are conducted in compliance with the Philippine Data Privacy Act, including the implementation of appropriate safeguards such as contractual data processing agreements that impose data protection standards equivalent to those required under Philippine law.
phwww does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.
12. Changes to This Privacy Policy
phwww reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, Platform features, or applicable law. Material changes will be communicated to registered players via their registered email address or mobile number, or through a prominent notice on the Platform, with at least fourteen (14) days' notice prior to the effective date of such changes where practicable.
Your continued use of the phwww Platform following the effective date of any update to this Privacy Policy constitutes your acknowledgment of the revised Policy. The date of the most recent revision is displayed at the top of this page.
13. Contact & Data Privacy Officer
For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by phwww, please contact our Data Privacy Officer through the following channels:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24/7 via the phwww Platform
phwww will acknowledge receipt of your request within three (3) business days and provide a substantive response within fifteen (15) days of identity verification, in accordance with NPC guidelines.
If you are not satisfied with phwww's response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.