Privacy Policy

Effective Date: January 15, 2025

1. Information We Collect

1.1 Personal Information You Provide

When you register an account with phlwen, we collect personal information that you voluntarily provide to us, including but not limited to:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification numbers (e.g., passport number, driver's license number, SSS/GSIS number, TIN)
• Contact Information: Residential address, email address, mobile phone number
• Account Credentials: Username, password, and security questions/answers
• Financial Information: Bank account details, e-wallet information (GCash, PayMaya), payment card details, transaction history, deposit and withdrawal records
• Verification Documents: Copies of government-issued IDs, proof of address documents (utility bills, bank statements), selfies for identity verification
• Communication Data: Records of your communications with our customer support team, including chat logs, emails, and phone call recordings

1.2 Information Automatically Collected

When you access and use the phlwen platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: IP address, device type and model, operating system, browser type and version, unique device identifiers
• Usage Data: Pages visited, games played, betting history, session duration, click patterns, referral sources, timestamps of activities
• Location Data: Approximate geographic location derived from IP address and GPS data (when permitted) to verify compliance with geographic restrictions
• Performance Data: Application crashes, system activity, hardware settings to improve service performance and troubleshooting

1.3 Information from Third Parties

We may receive information about you from third-party sources to supplement the information you provide, including:

• Identity verification services and credit reference agencies for KYC compliance
• Payment processors and financial institutions for transaction processing and fraud prevention
• Marketing partners and analytics providers for service improvement
• Social media platforms if you choose to link your social media account (feature availability varies)
• Publicly available databases and government registries to verify your identity and comply with regulatory requirements

2. How We Use Your Information

phlwen collects and processes your personal information for the following purposes:

2.1 Account Management and Service Provision

• Creating and managing your user account
• Verifying your identity and age to comply with legal requirements
• Processing deposits, withdrawals, and other financial transactions
• Providing access to games, sports betting, and other platform features
• Managing bonuses, promotions, and loyalty rewards
• Maintaining accurate records of your transactions and gaming activity

2.2 Security and Fraud Prevention

• Detecting and preventing fraud, money laundering, and other illegal activities
• Monitoring transactions for suspicious patterns and behaviors
• Enforcing our Terms & Conditions and preventing abuse of services
• Protecting the security and integrity of our platform
• Investigating and resolving disputes and complaints

2.3 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Meeting reporting obligations to Philippine regulatory authorities including PAGCOR
• Responding to legal requests, court orders, and government inquiries
• Maintaining records required by gambling laws and regulations
• Implementing responsible gaming measures and self-exclusion programs

2.4 Customer Support and Communication

• Responding to your inquiries, requests, and complaints
• Providing technical support and troubleshooting assistance
• Sending transactional notifications about your account, deposits, withdrawals, and bets
• Communicating important updates about our services, terms, and policies

2.5 Marketing and Promotional Activities

With your consent, we may use your information to:

• Send promotional emails, SMS messages, and push notifications about bonuses, promotions, and special offers
• Personalize your experience and tailor recommendations based on your preferences and activity
• Conduct market research and surveys to improve our services
• Display targeted advertisements on our platform and third-party websites (with opt-out options available)

You may opt out of marketing communications at any time by adjusting your account settings or clicking the unsubscribe link in our emails.

2.6 Service Improvement and Analytics

• Analyzing usage patterns and user behavior to optimize platform performance
• Conducting research and development to introduce new features and improve existing services
• Generating statistical reports and insights for business purposes (using aggregated, anonymized data)
• Testing new technologies and troubleshooting technical issues

3. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and applicable data protection laws, we process your personal data based on the following legal grounds:

3.1 Consent

You provide explicit consent when you register an account, accept our Terms & Conditions, and opt in to marketing communications. You may withdraw consent at any time, though this may affect your ability to use certain services.

3.2 Contractual Necessity

Processing is necessary to fulfill our contractual obligations to you, including providing gaming services, processing transactions, and managing your account.

3.3 Legal Obligation

We are required by law to process certain personal data to comply with KYC, AML, tax reporting, and other regulatory requirements imposed by Philippine gambling laws and PAGCOR regulations.

3.4 Legitimate Interests

We process personal data based on our legitimate business interests, including fraud prevention, security, service improvement, and direct marketing (where permitted by law), provided such processing does not override your fundamental rights and freedoms.

4. Information Sharing and Disclosure

phlwen does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment processors (GCash, PayMaya, banks) to facilitate deposits and withdrawals
• Identity verification services for KYC compliance
• Cloud hosting and data storage providers
• Customer support and communication platforms
• Marketing and analytics service providers
• Game developers and software providers

These service providers are contractually obligated to use your personal information only for the specific services they perform for us and to maintain appropriate security measures.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, regulators, law enforcement agencies, and courts when required by law or in response to:

• Legal process, subpoenas, court orders, or government requests
• PAGCOR and other regulatory audits and compliance reporting
• Investigations of suspected illegal activity, fraud, or violations of our Terms
• Requests to enforce our legal rights or defend against legal claims

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor company. We will notify you of any such change and the choices you may have regarding your information.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, such as when you authorize us to share data with a social media platform or participate in a joint promotion with a partner brand.

4.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for research, analytics, marketing, and other business purposes.

5. Data Security and Protection

phlwen employs industry-standard technical, physical, and administrative security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

5.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols. Sensitive data at rest is encrypted using AES-256 encryption.
• Secure Authentication: Multi-factor authentication options are available to enhance account security.
• Firewalls and Intrusion Detection: Advanced firewall systems and intrusion detection/prevention systems monitor and protect our network infrastructure.
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and remediate potential security weaknesses.

5.2 Access Controls

• Access to personal data is restricted to authorized personnel on a need-to-know basis
• Employees with access to personal data are bound by confidentiality obligations
• Role-based access controls ensure users can only access data necessary for their job functions
• All access to personal data is logged and monitored for unusual activity

5.3 Data Minimization and Purpose Limitation

We collect only the personal information necessary for the purposes described in this Privacy Policy and retain it only for as long as required by law or business necessity.

5.4 Third-Party Security

We require all third-party service providers handling personal data on our behalf to implement appropriate security measures and comply with applicable data protection laws.

5.5 Incident Response

In the event of a data breach that compromises your personal information, we will notify affected users and relevant authorities as required by the Philippine Data Privacy Act within 72 hours of becoming aware of the breach.

6. Data Retention

6.1 Retention Periods

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, regulatory, and business requirements:

• Active Accounts: Personal data is retained for the duration of your active account plus the periods specified below.
• Closed Accounts: After account closure, we retain transaction records, KYC documents, and other data required by law for a minimum of five (5) years from the date of the last transaction, as mandated by Philippine AML regulations.
• Gaming Records: Betting histories, game outcomes, and related records are retained for at least seven (7) years to comply with gambling regulatory requirements.
• Tax and Financial Records: Financial transaction records are retained for periods required by Philippine tax laws and regulations.
• Legal Claims: Data may be retained longer if necessary to establish, exercise, or defend legal claims.

6.2 Deletion of Data

After the applicable retention period expires, we will securely delete or anonymize your personal data in accordance with our data retention policy and applicable laws. Anonymized data may be retained indefinitely for statistical and research purposes.

7. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request access to the personal data we hold about you, including the purposes of processing, categories of data, recipients, and retention periods. You may access most of your personal information directly through your account dashboard.

7.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. You can update your profile information directly in your account settings or contact customer support for assistance.

7.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose or when you withdraw consent. However, we may be required to retain certain data to comply with legal obligations or establish legal claims.

7.4 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes at any time. You can opt out of marketing communications by adjusting your preferences in your account settings or clicking the unsubscribe link in promotional emails.

7.5 Right to Data Portability

You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format. You may also request that we transfer your data to another service provider where technically feasible.

7.6 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

7.7 Right to Lodge a Complaint

If you believe your privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Contact information for the NPC can be found at privacy.gov.ph.

7.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] or through our customer support channels. We will respond to your request within thirty (30) days. We may require verification of your identity before processing your request.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize your device, remember your preferences, and improve your experience on our platform.

8.2 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality, including authentication, security, and session management. These cannot be disabled.
• Performance Cookies: Collect information about how you use our platform, including pages visited and errors encountered, to help us improve performance.
• Functionality Cookies: Remember your preferences, language settings, and other choices to provide a personalized experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertisements and measure campaign effectiveness.

8.3 Third-Party Cookies

We use third-party analytics services (such as Google Analytics) and advertising partners that may set cookies on your device. These third parties have their own privacy policies governing their use of cookies.

8.4 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, though this may affect your ability to use certain features of our platform. You can adjust cookie preferences in your account settings or visit our Cookie Policy for detailed instructions.

9. Third-Party Services and Links

The phlwen platform may contain links to third-party websites, games, or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services before providing your personal information.

When you use payment services such as GCash, PayMaya, or bank transfers, you are subject to the privacy policies and terms of those service providers. We have no control over how these third parties collect, use, or protect your information.

10. International Data Transfers

Your personal information may be transferred to and processed in countries outside the Philippines where our servers, service providers, or business partners are located. These countries may have data protection laws that differ from Philippine law.

When we transfer personal data internationally, we implement appropriate safeguards such as:

• Ensuring the recipient country provides adequate data protection recognized by the National Privacy Commission
• Using standard contractual clauses approved by data protection authorities
• Obtaining your explicit consent for international transfers where required by law

By using phlwen services, you acknowledge and consent to the transfer of your personal data outside the Philippines in accordance with this Privacy Policy.

11. Children's Privacy

phlwen services are strictly intended for individuals aged 21 years and older. We do not knowingly collect personal information from individuals under the legal gambling age. If we discover that we have inadvertently collected information from someone under 21 years of age, we will immediately delete that information and close the account.

Parents and guardians who believe their child has provided personal information to phlwen should contact us immediately at [email protected]. We take underage gambling prevention seriously and employ age verification measures to prevent minors from accessing our services.

12. Changes to This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on our website with a revised "Effective Date"
• Sending email notification to the address associated with your account
• Displaying a prominent notice on our platform

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of phlwen services after the effective date of changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Data Protection Officer: [email protected]
• Customer Support Email: [email protected]
• Live Chat: Available 24/7 on the phlwen website
• Mailing Address: phlwen Data Protection Officer, Metro Manila, Philippines

We aim to respond to all privacy-related inquiries within thirty (30) days. For urgent matters related to data breaches or security concerns, please mark your communication as "URGENT" in the subject line.