ph2win Privacy Policy

1. Introduction

ph2win ("ph2win," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our online casino and sports betting platform. This Privacy Policy ("Policy") describes how ph2win collects, processes, stores, shares, and protects personal information in connection with your use of the ph2win website, mobile platform, games, and all related services (collectively, the "Platform").

This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. It also reflects ph2win's obligations under PAGCOR's regulatory framework for online gaming operators.

By registering an account on ph2win, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not use the ph2win Platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, ph2win acts as the Personal Information Controller (PIC) with respect to the personal data of its players and users. As PIC, ph2win determines the purposes and means of processing your personal information.

ph2win has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection laws. Contact details for the DPO are provided in Section 14 of this Policy.

3. Personal Data We Collect

ph2win collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

3.1 Registration Data

When you create a ph2win account, we collect: full legal name, date of birth, gender, nationality, residential address (including city, province, and postal code), email address, and mobile phone number.

3.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and Philippine anti-money laundering laws, we collect copies of government-issued identification documents, proof of address documents, and proof of payment method ownership. This may include your Philippine passport, driver's license, SSS ID, GSIS ID, PhilHealth ID, or other NPC-recognized identification.

3.3 Financial Data

We collect information related to your deposits and withdrawals, including payment method details (GCash account number, PayMaya account, bank account details for BPI, BDO, or Metrobank), transaction amounts, transaction dates, and transaction reference numbers. We do not store full payment card numbers on our servers.

3.4 Gaming Activity Data

We collect records of your gaming activity on the ph2win Platform, including games played, bet amounts, game outcomes, session durations, bonus usage, and wagering history. This data is used for account management, dispute resolution, and responsible gaming monitoring.

3.5 Technical and Device Data

We automatically collect certain technical data when you access the ph2win Platform, including: IP address, device type and model, operating system, browser type and version, screen resolution, referring URL, and session timestamps.

3.6 Communications Data

We retain records of your communications with ph2win customer support, including live chat transcripts, email correspondence, and any feedback or complaints submitted through the Platform.

Data Category	Examples	Purpose
Registration Data	Name, email, date of birth, address	Account creation, age verification
KYC Data	Government ID, proof of address	Identity verification, AML compliance
Financial Data	GCash number, bank account, transactions	Payment processing, fraud prevention
Gaming Activity	Bets, game history, session data	Account management, responsible gaming
Technical Data	IP address, device info, browser	Security, fraud detection, analytics
Communications	Support chats, emails	Customer service, dispute resolution

4. How We Use Your Personal Data

ph2win uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your ph2win player account, including processing deposits, withdrawals, and bonus credits.
• Identity Verification: To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine law, and to conduct ongoing KYC checks as required.
• Payment Processing: To process your deposits and withdrawal requests through GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels.
• Legal and Regulatory Compliance: To comply with our obligations under the Data Privacy Act of 2012, the Anti-Money Laundering Act (RA 9160 as amended), PAGCOR regulations, and other applicable Philippine laws.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats to the ph2win Platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce deposit limits and self-exclusion requests, and provide responsible gaming support to players who need it.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our 24/7 support channels.
• Platform Improvement: To analyze usage patterns, improve game performance, optimize the user experience, and develop new features on the ph2win Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided your consent to receive such communications. You may opt out at any time.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, ph2win processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your ph2win account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate Interests: Processing is necessary for ph2win's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and certain non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

ph2win does not share your personal data with third parties except in the following circumstances:

6.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the ph2win Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC verification providers, cloud hosting providers, and customer support technology providers. All service providers are contractually bound to process your data only on ph2win's instructions and in compliance with applicable data protection laws.

6 .2 Regulatory and Law Enforcement Authorities

We are required by law to disclose certain personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities upon lawful request. ph2win will comply with all valid legal orders, warrants, and regulatory directives requiring disclosure of player data.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ph2win's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players of any such transfer and ensure that the receiving entity is bound by data protection obligations no less stringent than those in this Policy.

6.4 Fraud Prevention Networks

ph2win may share limited personal data with industry fraud prevention networks and responsible gaming registries where required to protect the integrity of the Platform and the safety of our players. Such sharing is conducted on a strictly need-to-know basis and in compliance with applicable law.

7. Cookies & Tracking Technologies

ph2win uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and analyze usage patterns. The types of cookies we use include:

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players interact with the ph2win Platform. This helps us identify areas for improvement and optimize the user experience.
• Marketing Cookies: Used to deliver relevant promotional content to you based on your activity on the Platform. These are only set with your prior consent.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling essential cookies may prevent you from accessing certain features of the ph2win Platform, including your account login.

8. Data Retention

ph2win retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to the following retention periods:

• Active Account Data: Retained for the duration of your active ph2win account relationship, plus a minimum of five (5) years following account closure, in compliance with PAGCOR regulations and Philippine anti-money laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, as required by the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC record-keeping obligations.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer retention period is required for ongoing dispute resolution or legal proceedings.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, ph2win will securely delete or anonymize your personal data in accordance with its data disposal procedures. Where anonymization is not technically feasible, data will be securely destroyed.

9. Data Security

ph2win implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the ph2win Platform is encrypted using industry-standard SSL/TLS protocols, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive personal data stored on ph2win's servers, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to ph2win personnel and authorized service providers who have a legitimate need to access it. All access is logged and subject to regular audit.
• Penetration Testing: ph2win conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in the Platform's infrastructure.
• Incident Response: ph2win maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, ph2win will notify the NPC and affected players within the timeframes required by the Data Privacy Act.
• Employee Training: All ph2win personnel who handle personal data receive regular training on data protection obligations and security best practices.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph2win:

• Right to Be Informed: You have the right to be informed about how ph2win collects and processes your personal data, as described in this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data ph2win holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data ph2win holds about you. You may update certain account details directly through your ph2win account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph2win's legal retention obligations under PAGCOR regulations and the Anti-Money Laundering Act.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another personal information controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph2win has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of these rights, please contact ph2win's Data Protection Officer using the contact details provided in Section 14. ph2win will respond to all data subject requests within thirty (30) days of receipt, in accordance with NPC guidelines.

11. Children's Privacy and Age Restriction

The ph2win Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law and PAGCOR regulations governing online gaming participation. ph2win does not knowingly collect personal data from individuals under the age of 21.

During the registration process, ph2win collects date of birth information and conducts age verification checks to prevent underage access to the Platform. Where ph2win discovers or has reason to believe that a registered account belongs to a person under 21 years of age, the account will be immediately suspended, all pending transactions will be voided, and any deposited funds will be returned to the verified payment source.

If you are a parent or guardian and believe that your child has registered an account on ph2win, please contact our support team immediately at the email address provided in Section 14. We will investigate and take appropriate action promptly.

12. Cross-Border Data Transfers

ph2win primarily processes and stores personal data within the Republic of the Philippines. However, certain service providers engaged by ph2win — including cloud infrastructure providers and KYC verification platforms — may process data in other jurisdictions.

Where personal data is transferred outside the Philippines, ph2win ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include contractual data processing agreements incorporating standard contractual clauses approved by the NPC, or transfers to jurisdictions that the NPC has recognized as providing adequate data protection.

ph2win will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without your explicit consent or without implementing appropriate contractual safeguards.

13. Updates to This Privacy Policy

ph2win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, ph2win will notify registered players via a prominent notice on the Platform or by email to the address associated with their account. We encourage you to review this Policy periodically to stay informed about how ph2win protects your personal data.

Your continued use of the ph2win Platform following the posting of any changes to this Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using the Platform and may request account closure by contacting our support team.

14. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or ph2win's handling of your personal data, please contact our Data Protection Officer. Our DPO is responsible for ensuring ph2win's compliance with the Data Privacy Act of 2012 and for handling all data subject rights requests.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC is the government authority responsible for enforcing the Data Privacy Act of 2012 in the Philippines.