phwin8 Privacy Policy

This Privacy Policy ("Policy") describes how phwin8 ("phwin8", "we", "us", "our") collects, uses, stores, protects, and discloses the personal data of individuals ("you", "Player", "User") who access or use the phwin8 online gaming platform at phwin8.cam and any related services, applications, and communications.

This Policy applies to all personal data processed by phwin8 in connection with the phwin8 platform, regardless of whether you are a registered account holder, a visitor browsing the site, or a former player whose account has been closed. It does not apply to third-party websites or services that may be linked from or to phwin8.cam.

By registering a phwin8 account, accessing the platform, or otherwise providing personal data to phwin8, you acknowledge that you have read this Privacy Policy and understand its terms. If you do not agree with this Policy, you should not use the phwin8 platform.

phwin8 is the personal information controller ("Controller") responsible for your personal data as defined under the Data Privacy Act of 2012. As Controller, phwin8 determines the purposes for which and the means by which your personal data is processed.

phwin8 has appointed a Data Privacy Officer (DPO) who is responsible for overseeing the platform's compliance with the DPA and for handling data subject requests and complaints. Contact details for the phwin8 DPO are provided in Section 15 of this Policy.

phwin8 collects personal data from you in several ways: directly when you provide it, automatically when you use the platform, and from third parties where applicable. The categories of personal data we collect are detailed in the table below.

3.1 Sensitive Personal Information

phwin8 does not intentionally collect sensitive personal information as defined under the Philippine DPA (such as health information, political beliefs, or racial origin) unless specifically required by a legal obligation applicable to phwin8. If such data is inadvertently received, it will be handled with the heightened protection required by law.

3.2 Data from Minors

phwin8 strictly prohibits the registration or use of the platform by any person under 21 years of age. phwin8 does not knowingly collect personal data from individuals under 21. If phwin8 discovers that data has been collected from an underage individual, it will be deleted promptly and the associated account suspended.

phwin8 processes your personal data on one or more of the following lawful bases as recognized under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and phwin8 — specifically, to operate your account, process transactions, and provide the gaming services you have signed up for.
• Legal Obligation: Processing is required for phwin8 to comply with applicable Philippine laws, including anti-money laundering obligations, age verification requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for phwin8's legitimate interests, including fraud detection and prevention, platform security, improving the player experience, and responsible gaming monitoring — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For processing activities not covered by the above bases — in particular, sending you marketing communications about phwin8 promotions and new features — phwin8 relies on your consent. You may withdraw consent at any time by following the opt-out instructions in Section 5.3 below.

5.1 Core Platform Operations

phwin8 uses your personal data to create and manage your account, verify your identity and age, process deposits and withdrawals via GCash, PayMaya, BDO, BPI, and Metrobank, provide access to the games lobby and live dealer tables, and maintain accurate records of your wagering activity and financial transactions. These uses are essential for the phwin8 service to function.

5.2 Security, Fraud, and Legal Compliance

Technical and usage data is used by phwin8 to detect and prevent fraud, unauthorized account access, money laundering, and Terms & Conditions violations. IP address and device data help phwin8 identify anomalous login patterns and protect your account. phwin8 is legally required to retain certain transaction records and to report suspicious activities to the Anti-Money Laundering Council (AMLC) of the Philippines where applicable.

5.3 Marketing Communications

With your consent given at registration (or subsequently), phwin8 may use your contact information to send you promotional communications about new games, bonuses, phwin8 promotions, and platform updates via SMS, email, or push notification. You may withdraw marketing consent at any time by: (i) clicking "Unsubscribe" in any phwin8 promotional email; (ii) adjusting your marketing preferences in your phwin8 account settings; or (iii) contacting phwin8 support. Withdrawal of marketing consent does not affect the legality of processing carried out before withdrawal.

5.4 Responsible Gaming Monitoring

phwin8 uses your account activity data — including wagering patterns, session length, deposit frequency, and self-exclusion history — to monitor for signs of problem gambling and to fulfill its responsible gaming obligations. This processing is carried out in your interest as a player and in compliance with applicable responsible gaming standards.

5.5 Platform Improvement and Analytics

Aggregated and anonymized usage data is used by phwin8 to understand how players interact with the platform, which game categories are most popular, where technical improvements are needed, and how the overall phwin8 experience can be enhanced. This analytics processing does not identify you individually.

phwin8 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. phwin8 shares your data only in the following circumstances:

• Payment Processors: phwin8 shares necessary financial and identity data with GCash (operated by Globe Fintech Innovations, Inc.), PayMaya (Voyager Innovations, Inc.), BDO Unibank, BPI, and Metrobank solely for the purpose of processing your deposit and withdrawal transactions.
• Game Software Providers: Some game providers may receive limited technical data (such as a pseudonymous player ID and session token) to initialize a game session. They do not receive your full name, contact details, or financial information.
• Identity Verification Providers: Third-party KYC service providers process your identity documents on behalf of phwin8 for the purpose of age and identity verification. These providers are bound by data processing agreements with phwin8.
• Legal and Regulatory Authorities: phwin8 will disclose your personal data to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Philippine National Police, or other competent Philippine government authorities if required by law, court order, or legitimate regulatory request.
• Professional Advisors: phwin8 may share your data with legal counsel, auditors, or other professional advisors where reasonably necessary, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of phwin8's assets, your personal data may be transferred to the acquiring entity, who will be required to honor this Privacy Policy or provide you with adequate notice and choice.

phwin8 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active phwin8 account plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations under Philippine law.
• Financial transaction records: Retained for a minimum of five (5) years in compliance with the Anti-Money Laundering Act (AMLA) of the Philippines as amended.
• Game and wagering history: Retained for a minimum of two (2) years from the date of each session, or longer if required for an ongoing investigation or dispute.
• Support communications: Retained for two (2) years from the date of the last interaction.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or from account closure, whichever is later.
• Marketing consent records: Retained from the date consent was given until consent is withdrawn, plus a reasonable period thereafter for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be attributed to an identifiable individual.

phwin8 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Key security measures in place include:

• Encryption in Transit: All data exchanged between your browser or device and the phwin8 platform is encrypted using TLS (Transport Layer Security) with a minimum of TLS 1.2.
• Encryption at Rest: Sensitive personal and financial data stored in phwin8 databases is encrypted at rest using industry-standard algorithms.
• Access Controls: phwin8 personnel access to personal data is restricted on a need-to-know basis. Access rights are reviewed regularly and revoked upon role change or departure.
• Two-Factor Authentication: phwin8 offers optional two-factor authentication (2FA) for player accounts to reduce the risk of unauthorized account access.
• Security Monitoring: phwin8 employs intrusion detection systems and monitors platform activity for anomalous patterns indicative of security incidents.
• Regular Reviews: phwin8 conducts periodic reviews of its security policies and procedures and updates them in line with evolving threats and best practices.

phwin8 uses cookies and similar tracking technologies on the phwin8.cam website. A cookie is a small text file placed on your device when you visit a website. phwin8 uses the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the platform to function. They maintain your login session, remember your game preferences, and ensure secure page navigation. You cannot opt out of strictly necessary cookies without affecting platform functionality.
• Analytics Cookies: These collect anonymized information about how visitors use phwin8.cam — which pages are visited most, where users encounter errors, and similar aggregate insights — to help phwin8 improve the platform. phwin8 uses privacy-respecting analytics tools that do not share data with advertising networks.
• Preference Cookies: These remember your settings and preferences (such as language or interface customization) so you don't have to re-enter them each visit.
• Marketing Cookies: With your consent, phwin8 may use cookies to deliver promotional content about phwin8 that is relevant to your interests and usage patterns. These cookies may also help phwin8 measure the effectiveness of promotional campaigns.

You can manage and delete cookies through your browser's settings at any time. Disabling cookies may affect certain features of the phwin8 platform. phwin8 does not use cross-site tracking cookies to follow your browsing activity outside of phwin8.cam.

The phwin8 platform is strictly intended for persons aged 21 years and above. This age restriction is consistent with Philippine regulations applicable to casino-style gaming activities. phwin8 does not knowingly collect or process personal data of individuals under 21 years of age.

Age verification is conducted during the registration process, and phwin8 reserves the right to request government-issued photo identification to confirm age at any stage. If phwin8 determines that an account was created by a person under 21, the account will be immediately suspended, and any personal data collected will be deleted as soon as reasonably practicable in accordance with applicable law.

If you are a parent or guardian and believe your child under the age of 21 has provided personal information to phwin8, please contact our support team or Data Privacy Officer immediately using the contact details in Section 15.

To exercise any of your rights under the Data Privacy Act of 2012 — including the rights to access, rectification, erasure, objection, and data portability described in this Policy — you may submit a formal request by contacting the phwin8 Data Privacy Officer using the details provided in Section 15.

For security purposes, phwin8 will verify your identity before processing any data subject request. You may be asked to provide a copy of a government-issued ID to confirm you are the data subject to whom the request relates. phwin8 will respond to verified requests within thirty (30) calendar days of receipt. In complex cases requiring additional investigation, phwin8 may extend this period by a further thirty (30) days, in which case we will inform you of the extension and the reasons for it.

phwin8 will not charge a fee for processing a data subject request unless the request is manifestly unfounded, repetitive, or excessive. In such cases, phwin8 may either charge a reasonable fee or refuse to comply, and will explain the reason for refusal in writing.

If you have a complaint about how phwin8 handles your personal data, phwin8 encourages you to contact us in the first instance using the details in Section 15. phwin8 is committed to resolving all data privacy complaints promptly and fairly through our internal process.

If you are not satisfied with phwin8's response to your complaint, or if you believe phwin8 is processing your personal data in violation of the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data protection matters in the Philippines.

Some of phwin8's service providers — including certain game software providers and technical infrastructure partners — may be located outside the Philippines. Where phwin8 transfers your personal data to recipients in other countries, it takes steps to ensure that your data receives a level of protection consistent with the requirements of the Philippine Data Privacy Act of 2012.

Such steps include requiring recipients to enter into data processing agreements that incorporate standard contractual clauses, or relying on adequacy determinations where the recipient's jurisdiction provides a comparable level of data protection. phwin8 does not transfer personal data to jurisdictions that do not offer adequate protection without first implementing appropriate safeguards.

phwin8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or changes to the phwin8 platform. The effective date at the top of this page will be updated to reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect how we process your personal data or your rights as a data subject — phwin8 will notify registered players via email or a prominent notice on the phwin8 platform prior to the changes taking effect, allowing you an opportunity to review the updated Policy before it applies to you.

Your continued use of the phwin8 platform after a Privacy Policy update constitutes your acknowledgment of the revised Policy. If you do not accept the updated Policy, you should stop using the phwin8 platform and may request account closure in accordance with our Terms & Conditions.

For all data privacy-related inquiries, requests to exercise your data subject rights, or complaints about phwin8's data processing practices, please contact the phwin8 Data Privacy Officer through the following channels:

• Email: [email protected] — mark your message with the subject line "Data Privacy Request"
• Live Chat: Available 24/7 via the chat widget on phwin8.cam — request escalation to the Data Privacy Officer for formal requests

phwin8 will acknowledge receipt of your data privacy inquiry within five (5) business days and will provide a substantive response within thirty (30) calendar days as required under the Data Privacy Act of 2012.