phwin6 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how phwin6 ("phwin6," "we," "us," "our") collects, uses, discloses, stores, and protects the personal information of individuals ("Data Subjects," "you," "your") who access or use the phwin6 online gaming platform at phwin6.cam (the "Platform").

This Policy applies to all personal data collected through the Platform, including data collected during registration, account management, financial transactions, customer support interactions, and general Platform use. It applies to all users of phwin6 regardless of whether they are registered account holders or casual visitors.

This Policy should be read alongside the phwin6 Terms and Conditions, which govern your use of the Platform generally. In the event of any conflict between this Policy and the Terms and Conditions regarding the treatment of personal data, this Policy shall prevail.

2. Data Controller

phwin6 is the personal information controller (PIC) in respect of personal data collected through the Platform, as defined under Section 3(i) of Republic Act No. 10173. phwin6 determines the purposes and means of the processing of personal data of its users and is responsible for ensuring that such processing is carried out in accordance with the DPA, its IRR, and applicable NPC issuances.

phwin6 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with data privacy obligations. Contact details for the DPO are provided in Section 15 of this Policy.

3. Data We Collect

phwin6 collects personal data in the following categories:

3.1 Registration and Identity Data. When you create a phwin6 account, we collect your full legal name, date of birth, mobile number, email address (if provided), and residential address. To complete identity verification (KYC), we additionally collect a government-issued Philippine identification document (e.g., PhilSys ID, UMID, passport, driver's license), a selfie photograph for liveness verification, and, where required, a secondary document to confirm your address.

3.2 Financial Data. We collect information necessary to process deposits and withdrawals, including your GCash or Maya mobile number, bank account details (BPI, BDO, Metrobank), or USDT wallet address, as applicable. We do not store complete payment credentials — all payment data is processed through secure, PCI-compliant third-party payment processors. phwin6 retains only the reference information needed to match transactions to accounts.

3.3 Transaction and Game Data. We maintain records of all deposits, withdrawals, bonus credits, and game activity associated with your phwin6 account. This includes bet amounts, game outcomes, session durations, and jackpot winnings. This data is required for financial reconciliation, regulatory reporting, and dispute resolution.

3.4 Technical and Device Data. When you access phwin6.cam, our systems automatically collect your IP address, browser type and version, device type and operating system, screen resolution, referring URL, session timestamps, and pages visited. This data is used for security monitoring, fraud prevention, and Platform performance optimization.

3.5 Customer Support Data. When you contact phwin6 customer support via live chat, the content of those communications — including any personal data you share during the interaction — is recorded and stored for quality assurance, dispute resolution, and regulatory compliance purposes.

3.6 Voluntary Data. phwin6 may collect additional personal data that you voluntarily provide in the context of promotions, surveys, or feedback forms. Participation in such activities is entirely optional and will not affect your access to phwin6 services.

4. Purpose and Legal Basis for Processing

phwin6 processes personal data for the following purposes and under the following legal bases as recognized under the DPA:

phwin6 does not use personal data for purposes incompatible with those listed above. If phwin6 proposes to process personal data for a new purpose, players will be notified and, where required, asked for fresh consent prior to the new processing commencing.

5. Sharing Your Personal Data

phwin6 does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. phwin6 shares personal data only in the following circumstances:

• Payment processors: GCash (G-Xchange, Inc.), Maya (Paymaya Philippines, Inc.), BPI, BDO, Metrobank, and other payment partners receive only the data necessary to process your transactions (e.g., mobile number for GCash, bank account number for bank transfers).
• KYC verification providers: Regulated third-party identity verification services receive copies of your ID documents and selfie photographs solely for the purpose of completing identity verification as required by PAGCOR and AML regulations.
• Regulatory authorities: phwin6 is required by law to disclose certain player information to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies upon lawful request or as required by mandatory reporting obligations.
• Game content providers: Licensed game studios (e.g., JILI, PG Soft, Pragmatic Play) may receive a session token and minimum technical data necessary to render their games within the phwin6 platform. These providers do not receive your name, ID documents, or financial data.
• IT and infrastructure providers: Cloud hosting, database management, and security service providers who process data on behalf of phwin6 are bound by data processing agreements that require them to maintain data confidentiality and security standards consistent with this Policy.
• Legal proceedings: phwin6 may disclose personal data in response to a valid court order, subpoena, or other legal process, or where disclosure is necessary to protect the rights, property, or safety of phwin6, its players, or the public.

6. International Data Transfers

Some phwin6 service providers and game content partners operate infrastructure located outside the Philippines. When personal data is transferred to a country that may not have data protection laws equivalent to Philippine standards, phwin6 requires the receiving party to execute a data processing agreement that includes the NPC-recommended standard contractual clauses for cross-border data transfers, as provided under NPC Circular 16-01.

phwin6 makes reasonable efforts to keep personal data within the Philippines or the Association of Southeast Asian Nations (ASEAN) region where technically and commercially feasible. Where transfers outside this region are unavoidable (for example, to game studios headquartered in Europe or East Asia), the standard contractual clause requirement applies without exception.

7. Data Security Measures

phwin6 implements a multi-layered security framework to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. Key technical and organizational measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and phwin6 servers;
• AES-256 encryption at rest for sensitive personal data, including identity documents and financial reference data;
• Role-based access control (RBAC) — phwin6 employees access personal data only to the extent required by their job function;
• Regular third-party penetration testing and vulnerability assessments of the Platform infrastructure;
• Intrusion detection systems (IDS) and 24/7 security monitoring of all production systems;
• Strict vendor due diligence — all third-party processors are assessed for data security standards before engagement;
• Staff training — all phwin6 personnel who handle personal data receive data privacy training consistent with NPC requirements.

In the event of a personal data breach that is likely to result in harm to you, phwin6 will notify affected players and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by NPC Circular 16-03.

8. Data Retention

8.1 Active Accounts. Personal data associated with an active phwin6 account is retained for the duration of the account's active status. Data is required for the ongoing delivery of gaming services, financial processing, regulatory compliance, and customer support.

8.2 Closed Accounts. Upon account closure — whether initiated by the player or by phwin6 — personal data including identity documents, transaction records, game logs, and communication records is retained for a minimum period of five (5) years from the date of closure. This retention period is mandated by Republic Act No. 9160 (Anti-Money Laundering Act), as amended, and applicable PAGCOR licensing conditions.

8.3 Analytics Data. Aggregated and anonymized data used for Platform analytics and performance improvement is retained for a maximum of twenty-four (24) months. This data cannot be used to identify individual players after anonymization.

8.4 Marketing Data. If you have consented to receive marketing communications from phwin6, your contact data used for this purpose is retained until you withdraw your consent. Upon withdrawal of consent, marketing data is deleted within thirty (30) days.

9. Cookies and Tracking Technologies

phwin6 uses browser cookies, local storage, and similar tracking technologies to deliver essential Platform functionality, maintain your login session, remember your preferences, monitor Platform performance, and (with your consent) serve personalized promotional content.

Essential cookies are required for the Platform to function and cannot be disabled. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These do not collect personal data for marketing purposes.

Analytics cookies collect anonymized usage data (pages visited, session duration, click patterns) to help phwin6 improve the Platform. This data is aggregated and does not identify individual users.

Preference cookies remember your Platform settings (language, display preferences) across sessions. You can delete preference cookies at any time through your browser settings without affecting your ability to use phwin6.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in or using core Platform features. phwin6 does not use third-party advertising cookies or permit third-party ad networks to place tracking cookies on phwin6.cam.

10. Minors and Age Restriction

phwin6 does not knowingly collect personal data from individuals under the age of twenty-one (21). The Platform is strictly restricted to adults of legal gambling age in the Philippines. During registration, phwin6 collects date of birth and verifies age through KYC documentation. Accounts identified as belonging to individuals under 21 will be immediately suspended, and any deposits will be returned to the source payment method after completion of mandatory identity verification.

If you believe that phwin6 has inadvertently collected personal data from a minor, please contact the Data Protection Officer immediately at the address provided in Section 15. phwin6 will promptly investigate and delete any such data.

11. Marketing Communications

11.1 Opt-In Basis. phwin6 sends promotional communications — including bonus offers, game announcements, and personalized recommendations — only to players who have given explicit prior consent at the time of registration or through their account notification settings. Consent to marketing is separate from the consent required to create a phwin6 account and is entirely voluntary.

11.2 Withdrawal of Consent. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your phwin6 account settings, or by contacting phwin6 customer support. Withdrawal of marketing consent does not affect your ability to use the Platform or receive service-related communications (such as transaction confirmations, security alerts, and KYC notifications), which are sent on a legitimate interest basis.

11.3 Service Communications. phwin6 may send you essential service communications regardless of your marketing preferences. These include account security alerts (such as new device login notifications), transaction confirmations, KYC status updates, material changes to Terms and Conditions or this Privacy Policy, and responsible gaming notifications triggered by your account activity patterns.

12. Your Privacy Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data processed by phwin6. To exercise any of these rights, submit a written request to the phwin6 Data Protection Officer at the contact details in Section 15:

phwin6 will respond to data subject rights requests within thirty (30) days of receipt. In complex cases, phwin6 may extend this period by a further thirty (30) days, with prior notice provided to you. Requests that are manifestly unfounded or excessive may be refused, with written reasons provided.

13. Complaints and the National Privacy Commission

If you believe that phwin6 has violated your rights under the Data Privacy Act, we encourage you to first contact the phwin6 Data Protection Officer to seek resolution. phwin6 is committed to resolving data privacy complaints fairly and promptly, and will acknowledge all complaints within five (5) business days.

If you are not satisfied with phwin6's response, or if you wish to escalate your complaint directly, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC oversees the implementation and enforcement of Republic Act No. 10173 and has the authority to investigate complaints, issue compliance orders, and impose sanctions on personal information controllers found to be in violation of the DPA.

Information about filing an NPC complaint — including the NPC's contact details, complaint form, and guidelines — is publicly available through the NPC's official channels. phwin6 fully cooperates with all NPC investigations and will respond to any NPC inquiry within the timeframes prescribed by applicable NPC issuances.

14. Changes to This Privacy Policy

phwin6 may update this Privacy Policy from time to time to reflect changes in our data practices, technological developments, regulatory requirements, or business operations. Material changes — those that significantly affect your rights or the way phwin6 processes your personal data — will be communicated to registered players via email notification or in-platform notice at least fourteen (14) days before the changes take effect.

Non-material changes (such as typographical corrections or clarifications that do not alter the substance of any provision) may take effect immediately upon publication of the updated Policy on phwin6.cam. The effective date at the top of this Policy will be updated accordingly.

Your continued use of the phwin6 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree to the updated Policy, you should close your phwin6 account by contacting customer support.

15. Contact Our Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phwin6, please contact the designated Data Protection Officer:

When contacting the DPO regarding a data subject rights request, please include your full name, registered mobile number, and a clear description of your request. Where identity verification is required to process your request (for example, for access or erasure requests), phwin6 will ask you to provide appropriate proof of identity before the request is actioned. This verification step is in place to protect your data from unauthorized disclosure or deletion by third parties.