phwil Privacy Policy

1. About This Policy

1.1 This Privacy Policy ("Policy") is issued by phwil ("the Company," "we," "us," or "our") and applies to all personal data collected through the phwil platform, including the website available at phwil.net, any mobile interface, and all related services (collectively, "the Platform").

1.2 phwil is committed to protecting the privacy and personal data of all users. This Policy is designed to help you understand what information we collect, how we use it, and the choices available to you regarding your personal data.

1.3 By registering for a phwil account or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform.

1.4 This Policy was last updated in June 2026. The current version will always be accessible at phwil.net/privacy-policy.

2. Personal Data We Collect

2.1 Identity and Contact Data. When you register a phwil account, we collect your full legal name, date of birth (to verify that you are 21 years of age or older), residential address, Philippine mobile number, and email address. We may also collect a copy of a government-issued identification document (such as a Philippine National ID, Passport, or Driver's License) for identity verification purposes.

2.2 Financial Data. We collect the identifiers of payment accounts used to deposit funds into or withdraw funds from your phwil account — for example, the mobile number associated with your GCash or Maya account, or the account number and bank name for bank transfer instructions. We do not store full card numbers or payment account passwords.

2.3 Transaction Data. We retain records of all deposits, withdrawals, bonus activations, and wagering activity associated with your phwil account. This data is required for financial record-keeping, dispute resolution, and compliance with anti-money laundering obligations.

2.4 Technical and Usage Data. We automatically collect certain technical information when you access phwil, including your IP address, device type and operating system, browser type and version, session duration, pages visited, and in-game actions. This data helps us operate the Platform securely, detect fraud, and improve the player experience.

2.5 Communications Data. If you contact phwil support via email, we retain records of that correspondence, including timestamps, subject matter, and the content of messages exchanged.

2.6 Responsible Gaming Data. If you use phwil's responsible gaming tools — such as deposit limits, session limits, cooling-off periods, or self-exclusion — we record the settings you have applied and the dates of any changes. This data is used to enforce your chosen restrictions and is not shared with third parties for marketing purposes.

3. How We Collect Your Data

phwil collects personal data through the following means:

• Direct Provision: Data you provide during account registration, identity verification, payment processing, or when you contact phwil support;
• Automated Collection: Technical and usage data collected automatically when you access and interact with the Platform through cookies, server logs, and analytics tools;
• Third-Party Verification Providers: Identity and age verification data received from third-party KYC (Know Your Customer) service providers engaged by phwil;
• Payment Processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, and other payment processing partners when you make a deposit or withdrawal.

4. Purposes of Processing

phwil uses your personal data for the following purposes:

• To create, maintain, and administer your phwil account;
• To verify your identity and confirm that you meet the 21-year minimum age requirement;
• To process deposits and withdrawals in Philippine Pesos via your chosen payment method;
• To operate games, settle bets, and maintain accurate wagering records;
• To administer bonuses, promotions, and loyalty programme rewards;
• To enforce phwil's responsible gaming tools and honour your self-exclusion or limit settings;
• To detect, investigate, and prevent fraud, money laundering, and other illegal activity;
• To respond to your support enquiries and resolve account disputes;
• To comply with applicable Philippine laws, regulations, and court orders;
• To send you promotional communications about phwil offers, where you have consented to receive them (you may unsubscribe at any time);
• To improve, test, and maintain the security and performance of the Platform.

5. Legal Basis for Processing

5.1 phwil processes your personal data on the following legal grounds under the Data Privacy Act of 2012 (Republic Act No. 10173):

• Consent: Where you have given explicit consent, including for marketing communications and for non-essential cookie deployment;
• Contractual Necessity: Where processing is necessary to perform our contract with you (i.e., operating your phwil account, processing payments, and delivering gaming services);
• Legal Obligation: Where processing is required by Philippine law — including anti-money laundering regulations, tax reporting obligations, and orders from regulatory bodies;
• Legitimate Interests: Where processing is necessary for the legitimate interests of phwil, such as fraud prevention, platform security, and responsible gaming enforcement, provided such interests are not overridden by your rights and freedoms.

6. Sharing Your Personal Data

6.1 phwil does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances.

6.2 phwil may share your personal data with the following categories of third parties, only to the extent necessary for the stated purpose:

• Payment Processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other payment partners require your payment account identifiers to process transactions;
• Identity Verification (KYC) Providers: Third-party providers engaged to verify government-issued IDs and confirm age eligibility;
• Game Providers: Licensed game studios that supply games to phwil may receive anonymised session data necessary to deliver gameplay;
• Fraud Prevention and Security Providers: Services that help phwil detect and prevent account fraud, collusion, and bonus abuse;
• Regulatory Authorities: Philippine government bodies, law enforcement agencies, or courts where disclosure is required by applicable law or by order;
• IT and Hosting Providers: Infrastructure and cloud hosting partners that store and process phwil's data under strict data processing agreements.

6.3 All third-party service providers engaged by phwil are bound by contractual data protection obligations consistent with the Data Privacy Act of 2012. They are prohibited from using your data for any purpose beyond the specific service they provide to phwil.

7. Cookies & Tracking Technologies

7.1 phwil uses cookies — small text files stored in your browser — and similar tracking technologies to operate the Platform and improve your experience. Cookies are used for the following purposes:

• Strictly Necessary Cookies: Essential for account authentication, session management, and security. These cannot be disabled without breaking core Platform functionality;
• Functional Cookies: Store your preferences such as game lobby settings, responsible gaming limits, and language preferences;
• Analytics Cookies: Collect anonymised data about how users interact with phwil (pages visited, click paths, session duration) to help us improve the Platform. No personally identifiable information is transmitted in analytics data;
• Performance Cookies: Monitor Platform stability, load times, and error rates to assist our technical team in maintaining service quality.

7.2 You can manage or delete non-essential cookies through your browser settings at any time. Disabling analytics or functional cookies will not prevent you from accessing your phwil account or playing games, but may affect some personalization features. phwil does not use third-party advertising cookies or retargeting pixels.

8. Data Retention

8.1 phwil retains your personal data for as long as your account remains active and for a minimum period of five (5) years following account closure. This retention period is required to satisfy anti-money laundering record-keeping obligations under Philippine law and to resolve any post-closure disputes.

8.2 Support correspondence is retained for a minimum of three (3) years from the date of the last message in the thread.

8.3 Technical and usage data (server logs, IP addresses) is retained for twelve (12) months from collection, after which it is aggregated, anonymised, or deleted.

8.4 Where you have submitted a verified erasure request and no legal obligation to retain the data exists, phwil will delete or irreversibly anonymise the relevant data within 30 business days of confirming the request.

9. Data Security

9.1 phwil implements a combination of technical, administrative, and physical security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption at rest for sensitive account and payment data stored on phwil's servers;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Multi-factor authentication requirements for phwil staff accessing administrative systems;
• Regular security assessments and penetration testing by independent third parties;
• Incident response procedures for detecting, containing, and reporting data breaches.

9.2 In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, phwil will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights as a data subject:

• Right to Information: The right to be informed of what personal data phwil holds about you and how it is processed;
• Right to Access: The right to obtain a copy of your personal data in a commonly used electronic format;
• Right to Rectification: The right to correct inaccurate or incomplete personal data held by phwil;
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data, subject to legal retention obligations;
• Right to Object: The right to object to processing of your personal data for direct marketing or where processing is based on legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, machine-readable format and to transmit it to another controller;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, contact phwil's Data Protection Officer at [email protected] with the subject line corresponding to your request. We will acknowledge your request within 5 business days and complete processing within 15 business days.

11. Children's Privacy

11.1 phwil is strictly for users aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. If we discover that a user under 21 has created an account and provided personal data, we will immediately close that account and delete all associated personal data.

11.2 If you are a parent or guardian and believe that a minor has registered on phwil, please contact us immediately at [email protected]. We take underage access seriously and will act without delay.

12. Third-Party Links

12.1 The phwil Platform may contain links to the websites or services of third parties (such as payment provider portals). phwil is not responsible for the privacy practices of those third-party sites. We encourage you to review the privacy policies of any external website you visit before providing personal data. phwil's Privacy Policy applies only to data collected through the phwil Platform itself.

13. Changes to This Privacy Policy

13.1 phwil reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via their registered email address or mobile number, and by a prominent notice on the phwil Platform, at least seven (7) days before the changes take effect.

13.2 Continued use of phwil following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you may close your account before the effective date of the changes.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a privacy concern, please contact phwil's Data Protection Officer:

Email: [email protected]
Subject line for data requests: Data Access Request / Data Erasure Request / Privacy Complaint

Our Data Protection Officer will acknowledge your request within five (5) business days. Please include your registered mobile number or email address in all privacy-related correspondence so we can verify your identity and locate your account. Do not include your account password in any communication — our team will never ask for it.