ph2win Privacy Policy

1. About This Privacy Policy

This Privacy Policy ("Policy") describes how ph2win ("we," "us," "the Company") collects, processes, stores, and protects personal data in connection with the operation of the ph2win Platform at ph2win.app. It applies to all registered players, visitors to the Platform, and any individual whose personal data is processed in connection with ph2win services.

ph2win operates in full compliance with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). Where applicable, ph2win also aligns its data handling practices with the principles of the EU General Data Protection Regulation (GDPR) as a standard of international best practice.

By accessing the ph2win Platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the ph2win Terms & Conditions.

2. Personal Data We Collect

ph2win collects personal data through several channels, including account registration, identity verification, gameplay, financial transactions, and your interactions with our support team. The categories of data we collect include:

2.1 Identity & Contact Data

• Full legal name as appearing on a government-issued Philippine ID;
• Date of birth (to verify the mandatory 21+ age requirement);
• Residential address in the Philippines;
• Philippine mobile number and email address;
• Government-issued ID number and document scans (for KYC).

2.2 Financial Data

• GCash account name and masked mobile number;
• PayMaya account details;
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where applicable;
• Transaction history: deposits, withdrawals, bonus credits, and wagering records.

2.3 Technical & Usage Data

• IP address and approximate geolocation (city/region level);
• Device type, operating system, browser version;
• Login timestamps and session duration;
• Pages visited on ph2win.app, game sessions played, and in-game activity logs;
• Cookie identifiers and similar tracking data (see Section 6).

2.4 Communications Data

• Records of live chat conversations with ph2win support;
• Email correspondence with ph2win;
• Feedback, complaints, and dispute records.

3. How We Use Your Personal Data

ph2win processes your personal data for the following purposes:

4. Legal Basis for Processing

ph2win processes your personal data on the following legal bases under Republic Act No. 10173:

• Contractual necessity: Processing required to fulfill our obligations under the ph2win Terms & Conditions, including account management and payment processing;
• Legal obligation: Processing required to comply with PAGCOR regulations, Anti-Money Laundering Act (AMLA), and other applicable Philippine laws;
• Legitimate interest: Processing for fraud prevention, platform security, and improving our services, where such interests do not override your rights;
• Consent: Processing for marketing communications and optional features, which you may withdraw at any time.

5. Data Sharing & Disclosure

ph2win does not sell, rent, or share your personal data with third parties for their independent marketing purposes. We share data only in the following limited circumstances:

5.1 Service Providers

ph2win engages third-party service providers to support platform operations, including payment processors (GCash, PayMaya, bank APIs), KYC verification providers, game content providers (Pragmatic Play, PG Soft, Jili, and others), cloud infrastructure providers, and customer support tools. These providers are contractually bound to process data only as instructed by ph2win and in accordance with applicable data privacy law.

5.2 Regulatory & Legal Disclosure

ph2win will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, or courts of competent jurisdiction where required by law, court order, or applicable regulation. ph2win will, where legally permitted, notify affected players of such disclosures.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of ph2win's assets, player data may be transferred to the successor entity, subject to the same data protection obligations described in this Policy. Affected players will be notified prior to any such transfer where practicable.

6. Cookies & Tracking Technologies

ph2win uses cookies and similar technologies to operate and improve the Platform. Cookies are small data files stored on your device by your browser. ph2win uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function, including session management, login state, and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences (e.g., language settings, recently played games) to improve your experience.
• Analytics cookies: Collect anonymized data on how players use the Platform, which pages are visited most frequently, and where technical issues occur. This data is used in aggregate form to improve ph2win.
• Marketing cookies: Used only with your consent to deliver relevant promotional content. You may withdraw consent at any time via your browser settings.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the ph2win Platform.

7. Data Retention

ph2win retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to applicable legal retention requirements. Specific retention periods include:

• Account and identity data: Retained for the duration of your account plus a minimum of five (5) years following account closure, as required by AMLA and PAGCOR regulations;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Customer support records: Retained for two (2) years from the date of the last interaction;
• Technical and usage logs: Retained for up to twelve (12) months, after which they are anonymized or deleted;
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter for compliance purposes.

Upon expiry of the applicable retention period, ph2win will securely delete or anonymize your personal data unless a longer period is required by law.

8. Data Security

ph2win implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS 256-bit encryption for all data transmitted between your device and ph2win servers;
• Encryption of sensitive data at rest, including identity documents and financial account details;
• Access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits and vulnerability assessments;
• Two-factor authentication (2FA) available for all player accounts;
• Incident response procedures for detecting, containing, and notifying affected parties of any data breaches in accordance with NPC requirements.

While ph2win takes all reasonable precautions, no method of electronic transmission or storage is 100% secure. Players are encouraged to use strong, unique passwords and enable 2FA on their ph2win accounts to minimize personal risk.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by ph2win:

To exercise any of the above rights, contact ph2win's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We will respond within fifteen (15) working days as required by RA 10173.

10. Children's Privacy

ph2win's services are strictly intended for individuals aged 21 years and above in accordance with PAGCOR's minimum age requirement for Philippine online gambling. ph2win does not knowingly collect personal data from anyone under the age of 21. If ph2win becomes aware that personal data has been collected from an individual under 21, the account will be immediately suspended, the data will be deleted, and any funds will be handled in accordance with PAGCOR guidelines.

If you are a parent or guardian and believe your child has registered on ph2win, please contact our support team immediately at [email protected].

11. International Data Transfers

ph2win primarily processes player data within the Philippines. In limited circumstances — for example, when using cloud infrastructure or game content providers with servers located abroad — data may be transferred to jurisdictions outside the Philippines. In such cases, ph2win ensures that appropriate safeguards are in place, including contractual data processing agreements that require recipients to provide a comparable level of protection to that afforded by Philippine law.

12. Updates to This Privacy Policy

ph2win may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated to registered players via email notification and/or a prominent notice on the Platform prior to the change taking effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the ph2win Platform following the effective date of any update constitutes your acceptance of the revised Policy.

13. Contact & Data Protection Officer

ph2win has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. For any privacy-related inquiries, access requests, or complaints, please contact: