Your privacy matters to philwin. This Privacy Policy explains what personal data we collect, why we collect it, how it is used and protected, and what rights you have as a Philippine-based player under the Data Privacy Act of 2012. Please take a few minutes to read it fully.
philwin processes your personal data in compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations as administered by the National Privacy Commission (NPC) of the Philippines.
All personal data held by philwin is encrypted at rest and in transit using industry-standard protocols. Passwords are stored using one-way cryptographic hashing and are never accessible in readable form by any philwin staff member.
philwin does not sell, rent, or trade your personal information to third-party marketers. Data shared externally is limited to what is strictly necessary for platform operations — payment processing, identity verification, and regulatory compliance.
Under the Philippine Data Privacy Act, you have the right to access, correct, erase, object to processing, and port your personal data. philwin has a dedicated process for handling data subject requests, reachable via the support contact on this page.
philwin uses cookies strictly for session management, platform functionality, and aggregate analytics. No third-party advertising cookies are placed. You can manage cookie preferences through your browser settings at any time without affecting your ability to use the philwin platform.
philwin will notify you of any material changes to this Privacy Policy via the mobile number or email address registered on your account. You will have a minimum of seven (7) days to review changes before they take effect on your account and data.
This Privacy Policy ("Policy") describes how philwin ("we," "us," "the Platform") collects, uses, stores, protects, and shares the personal information of individuals ("you," "Player," "Data Subject") who access or use the philwin website and gaming services at philwin.co. By registering an account or otherwise accessing philwin, you acknowledge that you have read and understood this Policy. This Policy should be read together with our Terms & Conditions.
philwin is an online gaming and entertainment platform serving players in the Philippines. As part of providing our services, philwin collects and processes personal information about the individuals who use the platform. We take this responsibility seriously and are committed to handling your personal data with care, transparency, and in full compliance with Philippine law.
This Policy applies to all personal data collected through the philwin website, any mobile-optimised version of the platform, customer support channels (including live chat and email), and any promotional or marketing communications you receive from philwin. It applies to registered account holders, visitors browsing the platform without an account, and any individual who interacts with philwin through these channels.
Note: philwin is committed to collecting only the personal data necessary for the specific purposes described in this Policy. We do not collect data speculatively or for purposes not identified at the time of collection.
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, philwin is the personal information controller in respect of your personal data collected through the philwin platform.
philwin has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection law. Contact details for the DPO are provided in Section 14 of this Policy. Players who wish to exercise their rights as data subjects or raise concerns about philwin's data processing practices should direct their enquiries to the DPO in the first instance.
philwin collects personal data in the following categories depending on the nature of your interaction with the platform:
When you create a philwin account, we collect:
When you complete the Know Your Customer verification process — required for processing withdrawals above applicable thresholds — we collect:
For every deposit, withdrawal, bonus credit, wager, and win processed through your philwin account, we retain:
When you access philwin, our systems automatically collect certain technical data:
If you contact philwin through live chat, email, or any other communication channel, we retain records of those communications, including:
Sensitive Personal Information: philwin does not intentionally collect sensitive personal information as defined by the Philippine Data Privacy Act (such as racial or ethnic origin, political opinions, religious beliefs, or health information) unless specifically required for responsible gaming compliance purposes and with your explicit consent.
philwin uses the personal data described in Section 3 for the following purposes:
| Purpose | Data Used |
|---|---|
| Account creation & management | Registration data, device data, communications data |
| Age & identity verification (KYC) | Registration data, KYC documents, selfie photographs |
| Processing deposits & withdrawals | Registration data, transaction data, KYC data |
| Delivering gaming services | Registration data, transaction data, device data |
| Customer support | Registration data, transaction data, communications data |
| Anti-fraud & security monitoring | All categories, particularly device and transaction data |
| Anti-money laundering (AML) compliance | Registration data, KYC data, transaction data |
| Responsible gaming monitoring | Registration data, transaction data, session data |
| Platform analytics & improvement | Aggregated and anonymised device and usage data |
| Marketing & promotional communications | Registration data (mobile number) — with consent only |
philwin does not use personal data for automated decision-making that produces legal or similarly significant effects on players without human review, except in the narrow context of real-time fraud prevention where automated temporary account suspensions may be applied pending immediate human review.
philwin processes your personal data on the following lawful grounds under the Philippine Data Privacy Act of 2012:
philwin shares personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:
philwin does not sell, rent, license, or otherwise transfer your personal data to any third party for that third party's own commercial purposes, including marketing. Any data sharing with the service providers listed above is governed by written data processing agreements that restrict the use of your data to the specific purpose for which it was shared.
✓ Your data stays within purpose. Every third party with whom philwin shares your data is contractually bound to use it only for the specific, stated purpose and to maintain security standards equivalent to those applied by philwin.
philwin uses cookies and similar technologies on the platform for the following purposes only:
philwin does not use any of the following:
You may manage and delete cookies through your browser's settings at any time. Disabling essential session cookies will prevent you from accessing your philwin account. Disabling functional and analytics cookies will not affect your ability to play, deposit, or withdraw on the platform.
philwin retains your personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years after closure |
| KYC and identity documents | Duration of account + 5 years after closure |
| Transaction records | Minimum 5 years (AML regulatory requirement) |
| Customer support communications | 3 years from date of interaction |
| Session and device logs | 12 months from session date |
| Marketing consent records | Duration of consent + 3 years |
| Fraud investigation records | 5 years from conclusion of investigation |
Upon expiry of the applicable retention period, philwin will securely delete or anonymise your personal data. Where anonymisation is applied, the resulting data no longer constitutes personal data under the Data Privacy Act and may be retained indefinitely for statistical purposes.
philwin implements a layered approach to data security, applying technical and organisational measures proportionate to the sensitivity of the personal data processed and the risks associated with its potential unauthorised disclosure.
In the event of a personal data breach that is likely to result in serious harm to the data subjects affected, philwin will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach. Affected players will be notified without undue delay via the contact details registered on their philwin accounts.
Your responsibility: You are responsible for maintaining the security of your philwin account credentials. Use a strong, unique password and enable two-factor authentication. Do not share your login details with any other person. philwin will never ask for your password in any communication.
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by philwin. To exercise any of these rights, please contact philwin's Data Protection Officer using the details in Section 14.
How to exercise your rights: Contact philwin's Data Protection Officer via live chat or at [email protected] with the subject line "Data Subject Request." Please include your registered mobile number for identity verification. philwin will respond within 30 days of receiving a verified request.
The philwin platform is intended solely for adults aged 21 years and above. philwin does not knowingly collect personal data from individuals under 21 years of age. The platform's registration process includes explicit age declaration, and the KYC process verifies age against government-issued identification.
If philwin becomes aware that personal data has been collected from an individual under 21 years of age, the relevant account will be immediately suspended and permanently closed, all associated funds will be returned to the originating payment method, and all personal data associated with the account will be deleted from philwin's systems as soon as operationally possible, subject to any minimum retention periods required by law for AML purposes.
If you are a parent or guardian and believe your child has accessed or registered on philwin, please contact our support team immediately via live chat or email.
Some of philwin's third-party service providers — including certain game studios and technical infrastructure providers — may process personal data outside of the Philippines. Where such cross-border transfers occur, philwin ensures that appropriate safeguards are in place to protect the personal data transferred, consistent with the requirements of the Philippine Data Privacy Act and the guidelines issued by the National Privacy Commission.
Such safeguards include, but are not limited to, contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law, and, where available, transfer to recipients in jurisdictions recognised by the NPC as providing an adequate level of data protection.
philwin reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Material changes — meaning changes that significantly affect how we collect, use, or share your personal data, or that meaningfully reduce your rights as a data subject — will be communicated to you via SMS to your registered Philippine mobile number and/or email at least seven (7) days before they take effect.
Non-material changes (such as typographical corrections, clarifications that do not change the substance of the Policy, or updated contact details) may be made without prior notice. The effective date and version number at the top of this page will always reflect the most current version. We encourage you to review this Policy periodically.
Your continued use of the philwin platform after the effective date of any update constitutes your acknowledgment of the revised Policy. If you do not accept the revised terms, you may close your account in accordance with the account closure process described in our Terms & Conditions.
For all privacy-related enquiries, data subject requests, or concerns about philwin's data processing practices, please contact us through the following channels:
If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. The NPC is the independent supervisory authority responsible for administering and enforcing the Data Privacy Act of 2012 in the Philippines.
Now that you know how philwin protects your privacy, you can play with confidence. One secure account gives you access to 500+ games, instant GCash transactions, and 24/7 Filipino support. 21+ only.
🔞 21+ only. Gambling can be addictive. Play responsibly. philwin supports responsible gaming for all Filipino players.