phwow Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how phwow ("phwow," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "your," or "data subject") who access or use the phwow online gaming platform at phwow.one, including all associated mobile interfaces, customer support channels, and promotional communications.

phwow is committed to protecting your privacy and handling your personal data in a manner consistent with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as well as applicable PAGCOR regulatory requirements. By registering for a phwow account or using our platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy applies to all personal data collected through the phwow platform, regardless of the device or method used to access it. It does not apply to third-party websites or services that may be linked from our platform, which are governed by their own privacy policies.

2. Data Controller Information

phwow is the data controller responsible for the personal data collected through the phwow platform. As data controller, phwow determines the purposes and means of processing your personal data. phwow has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012.

For all privacy-related inquiries, requests to exercise your data subject rights, or concerns regarding this Policy, you may contact our Data Protection Officer through the phwow customer support channel. We will acknowledge receipt of your inquiry within three (3) business days and endeavor to resolve all privacy-related requests within fifteen (15) business days, in accordance with the timelines prescribed by the National Privacy Commission of the Philippines.

3. Personal Data We Collect

phwow collects the following categories of personal data in connection with your use of the platform:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification numbers (e.g., PhilSys National ID number, passport number, driver's license number, UMID number).
• Contact Data: Residential address (including barangay, city/municipality, province, and ZIP code), email address, and Philippine mobile number.
• Financial Data: GCash account details, Maya account details, Philippine bank account information (account name, account number, bank name), and transaction history on the phwow platform.
• Account Data: Username, encrypted password, account preferences, gaming history, bonus and promotion history, and responsible gaming settings.
• Technical Data: IP address, device identifiers, browser type and version, operating system, time zone, and platform access logs.
• Usage Data: Information about how you use the phwow platform, including pages visited, games played, session duration, and click-stream data.
• Communications Data: Records of your communications with phwow customer support, including chat transcripts, email correspondence, and call recordings where applicable.
• Verification Data: Copies of government-issued identification documents and selfie photographs submitted for identity and age verification purposes.

phwow does not collect sensitive personal information as defined under the Data Privacy Act of 2012 (such as health data, political opinions, or religious beliefs) unless specifically required by law or regulation and with your explicit consent.

4. How We Collect Your Data

phwow collects personal data through the following means:

• Direct collection: Information you provide when registering for a phwow account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, log files, and similar tracking technologies when you access and use the phwow platform.
• Third-party sources: Identity verification data from third-party KYC (Know Your Customer) service providers; fraud prevention data from anti-money laundering screening services; and payment data from payment processors including GCash and Maya.
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with our licensing obligations.

5. Purposes and Legal Basis for Processing

phwow processes your personal data for the following purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

• Account registration and management: To create and maintain your phwow account, verify your identity and age (21+ requirement), and provide access to the platform. Legal basis: performance of contract; compliance with legal obligation.
• Financial transactions: To process deposits, withdrawals, and bonus payments in Philippine Peso (PHP), and to maintain accurate financial records. Legal basis: performance of contract; compliance with legal obligation.
• Regulatory compliance: To comply with PAGCOR licensing requirements, anti-money laundering (AML) obligations under Republic Act No. 9160 (Anti-Money Laundering Act), and other applicable Philippine laws. Legal basis: compliance with legal obligation.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the platform. Legal basis: legitimate interests; compliance with legal obligation.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance. Legal basis: performance of contract; legitimate interests.
• Responsible gaming: To monitor gaming activity for signs of problem gambling, enforce self-exclusion requests, and provide responsible gaming tools. Legal basis: compliance with legal obligation; legitimate interests.
• Marketing and promotions: To send you information about phwow promotions, bonuses, and new games, where you have provided consent. Legal basis: consent. You may withdraw consent at any time by contacting customer support.
• Platform improvement: To analyze usage patterns, improve platform functionality, and develop new features. Legal basis: legitimate interests.

6. Sharing of Personal Data

phwow does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: GCash, Maya, and Philippine banking partners, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML screening service providers engaged to assist with regulatory compliance.
• IT and platform service providers: Cloud hosting, cybersecurity, and technical support providers who process data on our behalf under strict data processing agreements.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities, where required by law or regulation.
• Law enforcement: Philippine law enforcement agencies, where required by a valid legal order or where disclosure is necessary to prevent or investigate criminal activity.

Where personal data is shared with third-party processors, phwow ensures that appropriate contractual safeguards are in place to protect your data and that processors are bound by confidentiality and data protection obligations consistent with the Data Privacy Act of 2012.

7. Data Retention

phwow retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following retention periods apply as a general guide:

• Account data and transaction records: Retained for a minimum of five (5) years following account closure, in compliance with PAGCOR requirements and the Anti-Money Laundering Act.
• Identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer support communications: Retained for three (3) years from the date of the communication.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of consent.
• Technical and usage logs: Retained for up to twelve (12) months, unless required for longer periods for security or fraud investigation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with phwow's data disposal procedures.

8. Cookies and Tracking Technologies

phwow uses cookies and similar tracking technologies to enhance your experience on the platform, remember your preferences, maintain your session, and analyze platform usage. The following types of cookies are used:

• Strictly necessary cookies: Essential for the operation of the platform, including session management and security. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and display options.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the platform, helping us improve functionality and user experience.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phwow platform. For more information on managing cookies, refer to your browser's help documentation.

9. Security Measures

phwow implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the phwow platform.
• AES-256 encryption for personal data stored on phwow servers.
• Multi-factor authentication options for player accounts.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing.
• Real-time fraud monitoring and anomaly detection systems.
• Incident response procedures for the detection, reporting, and management of personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phwow will notify the National Privacy Commission and affected data subjects in accordance with the timelines and requirements prescribed by the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by phwow:

• Right to be informed: The right to be informed of the existence of processing, the nature of the data processed, and the purposes for which it is processed.
• Right of access: The right to obtain a copy of the personal data phwow holds about you, along with information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure or blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, or where processing is unlawful.
• Right to object: The right to object to the processing of your personal data, including processing for direct marketing purposes.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to damages: The right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data.
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact phwow customer support. We will respond to all data subject requests within fifteen (15) business days. We may require you to verify your identity before processing your request.

11. Children's Privacy

The phwow platform is strictly intended for individuals who are at least 21 years of age, in compliance with PAGCOR regulations governing online gambling in the Philippines. phwow does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on the phwow platform or provided personal data without your consent, please contact phwow customer support immediately so that we can investigate and take appropriate action.

12. Changes to This Policy

phwow reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will notify registered players via email or through a prominent notice on the phwow platform prior to the changes taking effect. The date of the most recent revision is indicated at the top of this document.

Your continued use of the phwow platform following the posting of any changes to this Policy constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must cease using the platform and may request closure of your account by contacting phwow customer support.

For any questions or concerns regarding this Privacy Policy or phwow's data practices, please contact our Data Protection Officer through the phwow customer support channel. We are committed to resolving all privacy-related concerns promptly and transparently, in accordance with our obligations under the Data Privacy Act of 2012.