phwil Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how phwil ("phwil", "we", "us", "our") collects, uses, stores, protects, and discloses personal information obtained from users ("you", "User", "Player") of our online gaming platform located at https://phwil.cam (the "Platform") and all associated services, games, applications, and content (collectively, the "Services").

phwil is committed to protecting your privacy and ensuring the security of your personal information in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and all relevant regulations issued by the National Privacy Commission of the Philippines. This Policy applies to all personal information collected through the Platform, mobile applications, customer service interactions, and any other means by which you interact with phwil.

By creating a phwil account, accessing the Platform, or using any of our Services, you acknowledge that you have read, understood, and consent to the collection, use, storage, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with the terms of this Policy, you must immediately cease all use of the Platform and Services.

2. Information We Collect

2.1 Personal Information Provided by You

When you register for a phwil account or use our Services, we collect personal information that you voluntarily provide to us, including but not limited to:

• Identity Information: Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents (such as Philippine passport, driver's license, or national ID) submitted for identity verification purposes
• Contact Information: Email address, mobile phone number, residential address, postal code, and preferred language
• Account Credentials: Username, password, security questions and answers, and any other authentication information
• Financial Information: Payment method details including GCash account information, PayMaya account information, bank account numbers, transaction history, deposit and withdrawal records, and payment card information (when applicable)
• Communication Records: Contents of messages sent through customer support channels, live chat transcripts, email correspondence, and any other communications with phwil

2.2 Information Collected Automatically

When you access or use the Platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type, operating system, browser type and version, unique device identifiers, mobile network information, and device settings
• Usage Data: Pages visited, games played, bet amounts, win/loss records, time spent on the Platform, clickstream data, referring/exit pages, and search queries
• Location Data: IP address, geolocation data derived from IP address or GPS (with your permission), and time zone information used to verify that you are physically located within the Philippines when accessing the Services
• Technical Data: Browser configuration, internet service provider, connection speed, screen resolution, and other technical specifications

2.3 Information from Third Parties

We may receive information about you from third-party sources, including payment processors (GCash, PayMaya, banking institutions), identity verification services, fraud prevention services, and marketing partners. This information is used to verify your identity, prevent fraud, process transactions, and improve our Services.

3. How We Use Your Information

3.1 Service Provision and Account Management

phwil uses your personal information to provide, maintain, and improve the Services, including:

• Creating and managing your phwil account and player profile
• Processing account registration and identity verification (Know Your Customer/KYC procedures)
• Authenticating your identity when you log in to your account
• Enabling you to participate in games, place bets, and use all features of the Platform
• Processing deposits, withdrawals, and other financial transactions
• Maintaining accurate records of your gaming activity, transaction history, and account balance
• Providing customer support and responding to your inquiries, requests, and complaints
• Communicating with you about your account, transactions, and Services

3.2 Legal and Regulatory Compliance

We process your personal information to comply with legal obligations and regulatory requirements applicable to online gaming operations in the Philippines:

• Verifying that you meet the minimum age requirement (21 years or older) to use the Services
• Confirming that you are physically located within Philippine territory when accessing the Platform
• Complying with anti-money laundering (AML) regulations and reporting obligations
• Implementing responsible gaming measures and self-exclusion programs
• Responding to lawful requests from regulatory authorities, law enforcement agencies, and courts
• Maintaining records required by Philippine gaming regulations and tax laws
• Preventing underage gambling and unauthorized access from restricted jurisdictions

3.3 Fraud Prevention and Security

Your personal information is processed to protect the integrity of the Platform and prevent fraudulent, illegal, or harmful activities:

• Detecting and preventing fraud, money laundering, collusion, bonus abuse, and other prohibited activities
• Identifying duplicate accounts and enforcing our one-account-per-person policy
• Monitoring betting patterns and gaming behavior for signs of problem gambling or suspicious activity
• Investigating disputes, violations of our Terms and Conditions, and potential security incidents
• Implementing security measures to protect your account from unauthorized access
• Conducting risk assessments and maintaining audit trails for compliance purposes

3.4 Marketing and Communications

With your consent, we may use your contact information to send you promotional materials, including:

• Information about new games, features, and updates to the Platform
• Promotional offers, bonuses, free bets, and special promotions
• Newsletters, gaming tips, and responsible gaming resources
• Invitations to participate in tournaments, competitions, and loyalty programs
• Surveys and requests for feedback about the Services

You may opt out of receiving marketing communications at any time by following the unsubscribe instructions in promotional emails or by adjusting your account communication preferences. Please note that even if you opt out of marketing communications, we will still send you transactional and service-related messages necessary for account management and legal compliance.

3.5 Service Improvement and Analytics

We analyze usage patterns, player preferences, and platform performance to improve the Services:

• Understanding how users interact with different games and features
• Identifying technical issues, bugs, and areas for improvement
• Developing new products, services, and gaming experiences
• Conducting market research and analyzing industry trends
• Optimizing website performance, loading times, and user interface design
• Creating aggregated, anonymized statistical data for internal business purposes

4. Legal Bases for Processing (DPA Compliance)

Under the Data Privacy Act of 2012, phwil processes your personal information based on the following legal grounds:

• Consent: You have provided explicit consent for us to process your personal information for specific purposes, such as creating your account and receiving marketing communications
• Contract Performance: Processing is necessary to fulfill our contractual obligations under the Terms and Conditions, including providing gaming services, processing transactions, and managing your account
• Legal Obligation: Processing is required to comply with Philippine laws and regulations governing online gaming, anti-money laundering, taxation, and data protection
• Legitimate Interest: Processing is necessary for our legitimate business interests, such as fraud prevention, security, service improvement, and protecting the rights and safety of phwil, our users, and third parties, provided such interests do not override your fundamental rights and freedoms

5. How We Share Your Information

5.1 Service Providers and Business Partners

We may share your personal information with trusted third-party service providers who assist us in operating the Platform and delivering the Services, including:

• Payment Processors: GCash, PayMaya, banking institutions, and other payment service providers that process deposits, withdrawals, and financial transactions on our behalf
• Identity Verification Services: Third-party providers that verify your identity, age, and location to ensure compliance with regulatory requirements
• Gaming Platform Providers: Software providers and game developers whose products are integrated into the phwil Platform
• Cloud Infrastructure Providers: Hosting services, data storage providers, and content delivery networks that store and manage Platform data
• Customer Support Services: Third-party support platforms and communication tools used to respond to player inquiries
• Marketing and Analytics Providers: Services that help us analyze user behavior, optimize marketing campaigns, and improve the Services
• Fraud Prevention Services: Specialized providers that help detect and prevent fraudulent activity, money laundering, and security threats

All third-party service providers are contractually obligated to maintain the confidentiality and security of your personal information and are prohibited from using your information for any purpose other than providing services to phwil. We conduct due diligence to ensure that service providers implement appropriate technical and organizational security measures.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, regulatory bodies, law enforcement authorities, and courts when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Cooperate with investigations by the National Privacy Commission, PAGCOR, or other regulatory authorities
• Report suspicious transactions to the Anti-Money Laundering Council (AMLC)
• Respond to lawful requests from law enforcement agencies investigating criminal activity
• Comply with tax reporting requirements and financial regulations
• Enforce our Terms and Conditions and protect our legal rights
• Prevent or investigate fraud, security breaches, or violations of law

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. We will notify you of any such transfer and any choices you may have regarding your personal information.

5.4 Information We Do Not Share

phwil does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We do not share your personal information with unaffiliated third parties except as described in this Privacy Policy or with your explicit consent.

6. Data Security and Protection

6.1 Security Measures

phwil implements comprehensive technical, organizational, and physical security measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols. Sensitive information stored in our databases is encrypted at rest
• Access Controls: Access to personal information is restricted to authorized personnel on a need-to-know basis and protected by multi-factor authentication
• Secure Infrastructure: Our Platform is hosted on secure servers with firewalls, intrusion detection systems, and regular security monitoring
• Password Protection: User passwords are hashed and salted using strong cryptographic algorithms and are never stored in plain text
• Regular Security Audits: We conduct periodic security assessments, vulnerability testing, and penetration testing to identify and address potential security risks
• Data Backup and Recovery: Regular backups are maintained to ensure data integrity and business continuity
• Employee Training: Our personnel receive regular training on data protection, security best practices, and privacy regulations

6.2 Account Security Responsibilities

While phwil implements robust security measures, you are also responsible for maintaining the security of your account:

• Choose a strong, unique password and do not share it with anyone
• Enable two-factor authentication if available
• Log out of your account when using shared or public devices
• Promptly notify phwil of any unauthorized access or suspicious activity
• Keep your contact information up to date so we can reach you about security matters
• Be cautious of phishing attempts and verify that you are on the legitimate phwil website

6.3 Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, phwil will notify you and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by the Data Privacy Act. We will provide information about the nature of the breach, the personal information affected, the potential consequences, and the measures taken to address the breach and mitigate harm.

7. Your Privacy Rights

7.1 Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

• Right to Be Informed: You have the right to be informed about the collection, use, and disclosure of your personal information, as described in this Privacy Policy
• Right to Access: You have the right to request access to your personal information held by phwil and obtain copies of such information
• Right to Rectification: You have the right to request correction of inaccurate, incomplete, or outdated personal information
• Right to Erasure or Blocking: You have the right to request deletion or blocking of personal information that is no longer necessary for the purposes for which it was collected, subject to legal retention requirements
• Right to Object: You have the right to object to the processing of your personal information for direct marketing purposes or when processing is based on legitimate interests
• Right to Data Portability: You have the right to obtain your personal information in a structured, commonly used, and machine-readable format and transmit it to another service provider
• Right to Withdraw Consent: You have the right to withdraw consent for processing activities based on consent, though this will not affect the lawfulness of processing prior to withdrawal
• Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission if you believe your privacy rights have been violated

7.2 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 12 of this Policy. We will respond to your request within a reasonable timeframe, typically within thirty (30) days, and may require verification of your identity before processing your request. Some requests may be subject to legal limitations or exceptions.

8. Data Retention

phwil retains your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, enforce our agreements, and prevent fraud. Specific retention periods include:

• Active Accounts: Personal information associated with active accounts is retained for the duration of your relationship with phwil
• Closed Accounts: Following account closure, we retain personal information for a minimum of five (5) years or longer as required by Philippine gaming regulations, anti-money laundering laws, and tax regulations
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years in compliance with regulatory requirements
• Communications: Customer service communications are typically retained for two (2) to three (3) years for quality assurance and dispute resolution purposes
• Marketing Consent Records: Records of marketing consent and opt-out requests are retained indefinitely to honor your preferences

After the applicable retention period expires, personal information is securely deleted or anonymized so that it can no longer be associated with you. Anonymized or aggregated data may be retained indefinitely for statistical and analytical purposes.

9. Cookies and Tracking Technologies

9.1 Use of Cookies

The phwil Platform uses cookies, web beacons, pixels, and similar tracking technologies to enhance your user experience, analyze platform performance, and deliver personalized content. Cookies are small text files stored on your device that enable us to recognize you and remember your preferences.

9.2 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly, including session management, authentication, and security features
• Performance Cookies: Collect information about how you use the Platform to help us improve performance and user experience
• Functional Cookies: Remember your preferences, language settings, and customization choices
• Analytics Cookies: Help us understand user behavior, popular games, and navigation patterns through aggregated statistics
• Marketing Cookies: Used to deliver targeted advertisements and promotional content based on your interests

9.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, though this may affect your ability to use certain features of the Platform. Essential cookies cannot be disabled as they are necessary for the Platform to function. For more information about managing cookies, please refer to your browser's help documentation.

10. Third-Party Links and Services

The Platform may contain links to third-party websites, applications, or services that are not operated or controlled by phwil. This Privacy Policy applies only to information collected by phwil through the Platform. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party services you access through the Platform. phwil does not endorse or assume responsibility for third-party privacy practices.

11. Changes to This Privacy Policy

phwil reserves the right to modify, update, or revise this Privacy Policy at any time to reflect changes in our information practices, legal requirements, or business operations. We will notify you of material changes by posting the updated Policy on the Platform with a revised "Last Updated" date and, where appropriate, by sending you an email notification or displaying a prominent notice on the Platform.

Your continued use of the Services following the posting of changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we collect, use, and protect your personal information. If you do not agree with any changes, you must discontinue use of the Services and may request closure of your account.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer:

13. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations. Any disputes arising from or relating to this Privacy Policy or our data protection practices shall be subject to the exclusive jurisdiction of the courts located within Metro Manila, Philippines.