phdwin Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how phdwin ("phdwin," "we," "us," "our") collects, processes, stores, uses, and protects personal information obtained from individuals ("you," "Player," "User") who access, register on, or otherwise interact with the phdwin online gaming platform at phdwin.cam, including all associated mobile experiences, promotional communications, and customer support channels (collectively, the "Platform").

phdwin is committed to safeguarding the privacy and data security of every Filipino player on our Platform. We designed this Policy to be straightforward and readable — not buried in impenetrable legalese — because we believe you have a genuine right to understand exactly how your information is handled. That said, where legal precision is required, we have preserved the appropriate language to ensure regulatory compliance.

By creating a phdwin account, depositing funds, or using any Platform feature, you acknowledge that you have read and understood this Policy. If you do not agree with any part of it, please cease using the Platform and contact us to close your account. This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which form part of your agreement with phdwin.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations, phdwin is the personal information controller responsible for the personal data collected through the Platform.

Our designated Data Protection Officer ("DPO") oversees compliance with the DPA and this Policy. You may contact the DPO regarding any data privacy matter by emailing [email protected] with the subject line "Data Privacy Inquiry." We acknowledge all DPO inquiries within five (5) business days.

3. Personal Data We Collect

phdwin collects only the personal data necessary to provide our gaming services, comply with legal obligations, and protect the integrity of the Platform. The categories of personal data we may collect are set out below.

phdwin does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, unless specifically required by PAGCOR regulations or anti-money laundering compliance and only with your explicit consent where required by law.

4. How We Collect Your Data

phdwin collects personal data through the following channels:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, participating in promotions, or responding to surveys.
• Automated Collection: Data collected automatically via cookies, session tokens, server logs, and analytics tools when you browse or interact with the Platform.
• Third-Party Sources: Data received from identity verification providers, payment processors (GCash, Maya, BPI, BDO, Metrobank, UnionBank), fraud detection services, and regulatory reporting agencies where permitted by law.
• Publicly Available Sources: In limited circumstances, phdwin may verify information against publicly available government records or databases for KYC or fraud prevention purposes.

5. Purpose & Legal Basis for Processing

phdwin processes your personal data only where a lawful basis under the DPA applies. The primary purposes and corresponding legal bases are:

5.1 Contract Performance

Processing necessary to create and manage your phdwin account, process deposits and withdrawals via GCash or Philippine banks, deliver gaming services, and handle customer support queries — all required to perform our contract with you.

5.2 Legal Compliance

Processing required to comply with Philippine law, including: identity verification under PAGCOR licensing conditions; anti-money laundering (AML) obligations under the Anti-Money Laundering Act of 2001 (AMLA) and its amendments; age verification (21+ requirement); and mandatory reporting to regulatory authorities.

5.3 Legitimate Interests

Processing that phdwin undertakes in pursuit of legitimate business interests that do not override your rights, including: fraud detection and platform security; improving our gaming products and user experience; responsible gaming monitoring to identify players who may be at risk; and internal analytics and business intelligence.

5.4 Consent

Where phdwin processes data based on your consent — such as sending promotional emails, push notifications, or SMS updates about new games and bonus offers — you may withdraw that consent at any time by updating your communication preferences in account settings or contacting our support team.

6. Sharing Your Personal Data

phdwin does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment Processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, UnionBank, GrabPay, and 7-Eleven CLiQQ — to facilitate deposits and withdrawals in Philippine Peso.
• Identity Verification Providers: Licensed KYC/AML service providers who assist phdwin in verifying player identity and screening against sanctions lists.
• Game Software Providers: Third-party game studios and live dealer platform operators whose software powers the phdwin game library — these providers receive only the minimum data required to deliver their service.
• Regulatory Authorities: PAGCOR and other Philippine government agencies where disclosure is required by law, court order, or regulatory directive.
• Fraud Prevention Services: Third-party fraud analytics platforms that help phdwin detect, investigate, and prevent fraudulent account activity and financial crime.
• Customer Support Infrastructure: Providers of live chat, email, and ticketing platforms used to deliver 24/7 phdwin support — subject to strict data processing agreements.
• Professional Advisors: Lawyers, auditors, and accountants who require access to data in the course of providing professional services to phdwin, subject to confidentiality obligations.

All third parties with whom phdwin shares personal data are required to process that data in accordance with applicable law, implement appropriate security measures, and use the data only for the specified purpose.

7. Data Retention

phdwin retains personal data for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

As a general rule, phdwin retains account and transaction records for a minimum of five (5) years following account closure, in accordance with Philippine anti-money laundering regulations. KYC documentation is retained for the same minimum period. Communications data is typically retained for two (2) years from the date of the interaction.

When data is no longer required for any lawful purpose, phdwin will securely delete or anonymise it so it can no longer be linked to any individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis and product improvement without further notice.

8. Security Measures

phdwin implements a multi-layered security architecture to protect your personal and financial data from unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmission between your device and our servers
• Encrypted storage of passwords using industry-standard one-way hashing algorithms — phdwin staff can never view your password in plain text
• Multi-factor authentication (MFA) options available to all account holders
• Regular penetration testing and vulnerability assessments conducted by independent security firms
• Role-based access controls ensuring staff access only the data necessary for their specific function
• Real-time fraud monitoring and automated suspicious activity detection
• Secure, geographically redundant data centre infrastructure

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phdwin will notify the National Privacy Commission (NPC) within seventy-two (72) hours and will inform affected players without undue delay in accordance with the DPA and NPC Circular No. 16-03.

9. Cookies & Tracking Technologies

The phdwin Platform uses cookies and similar tracking technologies to operate core functions, improve user experience, and maintain platform security. A cookie is a small text file stored on your device when you visit a website.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function — they enable login sessions, maintain account security, and remember your language preference. These cannot be disabled without impairing core functionality.
• Performance Cookies: Collect anonymised data about how players interact with the Platform (pages visited, load times, error events) to help phdwin improve stability and user experience.
• Functionality Cookies: Remember your account preferences such as game display settings, responsible gaming configuration, and notification choices.
• Analytics Cookies: Used internally by phdwin to understand aggregate usage patterns and improve product decisions. phdwin does not permit third-party advertising networks to place tracking cookies on the Platform.

9.2 Managing Cookies

Most web browsers allow you to control cookie settings through the browser's privacy or settings menu. You can typically block or delete cookies, or set your browser to notify you when cookies are being placed. Note that disabling strictly necessary cookies will impair the functionality of the phdwin Platform, potentially preventing you from logging in or completing transactions.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by phdwin:

• Right to be Informed: To be notified of how your personal data is collected, processed, and used — as set out in this Policy.
• Right of Access: To request a copy of the personal data phdwin holds about you and information about how it is processed.
• Right to Rectification: To request correction of inaccurate or incomplete personal data held in your phdwin account.
• Right to Erasure: To request deletion of your personal data where it is no longer necessary, subject to phdwin's legal retention obligations under AMLA and other applicable law.
• Right to Data Portability: To receive a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Object: To object to processing of your personal data for direct marketing or, in certain circumstances, legitimate interests.
• Right to Withdraw Consent: To withdraw previously given consent for marketing communications or other consent-based processing at any time.
• Right to Lodge a Complaint: To file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phdwin has violated your data privacy rights.

To exercise any of the above rights, please contact phdwin at [email protected] with the subject line "Data Subject Rights Request." We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) calendar days, subject to identity verification and any applicable legal exceptions.

11. Minors

The phdwin Platform is strictly intended for adults aged twenty-one (21) years and above, in accordance with Philippine gaming regulations. phdwin does not knowingly collect personal data from individuals under 21 years of age.

If you are a parent or guardian and believe that a minor has registered on the phdwin Platform or that their personal data has been collected without your consent, please contact us immediately at [email protected]. phdwin will promptly investigate and, upon confirmation, will delete the minor's account and all associated personal data.

12. International Data Transfers

phdwin primarily processes and stores personal data within the Philippines. However, certain service providers — including game software operators, cloud infrastructure providers, and fraud detection services — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, phdwin ensures that appropriate safeguards are in place, which may include: standard contractual clauses approved or recognised by the National Privacy Commission; binding corporate rules; or transfers to jurisdictions that the NPC has determined provide an adequate level of data protection. International transfers will never be made to jurisdictions lacking adequate safeguards without your explicit consent or a recognised legal exception.

13. Amendments to This Policy

phdwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The "Last Updated" date at the top of this page will be revised accordingly.

Where amendments are material — meaning they significantly affect how we process your personal data or reduce your rights — phdwin will notify registered players by email or prominent in-Platform notice at least fourteen (14) calendar days before the changes take effect.

Continued use of the phdwin Platform after an amended Policy becomes effective constitutes your acceptance of the revised terms. If you object to any amendment, you may close your account before the effective date in accordance with the process described in our Terms & Conditions.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or phdwin's data processing practices, please contact our Data Protection Officer or support team through any of the following channels:

Email: [email protected] (subject: "Privacy Policy" or "Data Subject Rights Request")

Live Chat: Available 24 hours a day, 7 days a week, directly on the phdwin Platform.

Our support team — staffed by Filipino agents fluent in both English and Tagalog — will acknowledge your inquiry within five (5) business days. We are committed to resolving all privacy-related concerns promptly and transparently. You also retain the right to escalate unresolved complaints to the National Privacy Commission of the Philippines.