Summary: Phlawin only collects personal data we actually need. We don't sell your information to anyone. You have full rights to access, correct, or delete your data under the Philippine Data Privacy Act of 2012 (Republic Act 10173). Read on for the full details.
1. Overview
This Privacy Policy ("Policy") describes how Phlawin ("we," "us," or "our") collects, processes, stores, and protects the personal information of users ("you," "Member," or "Player") who access or use our online betting platform at phlawin.com.
Phlawin is committed to safeguarding your privacy in full compliance with the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC) of the Philippines. By creating a Phlawin account or using any part of our platform, you acknowledge that you have read and understood this Privacy Policy.
This Policy applies to all personal data processed in connection with the Phlawin platform, including data collected through the website, mobile experience, customer support interactions, and marketing communications.
2. Personal Data We Collect
Phlawin collects the following categories of personal data:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full name, date of birth, gender, nationality | Yes – for KYC |
| Contact Data | Email address, mobile number, home address | Yes – for account |
| Government ID Data | PhilSys ID, passport, UMID, driver's license number | Yes – for KYC |
| Financial Data | GCash number, Maya account, bank account name/number, transaction history | Yes – for payments |
| Betting Data | Wagers placed, game history, win/loss records | Automatically collected |
| Technical Data | IP address, device type, browser, operating system, session data | Automatically collected |
| Usage Data | Pages visited, features used, click patterns, time on site | Automatically collected |
| Communication Data | Support chat logs, email correspondence, feedback submissions | When you contact us |
We do not collect sensitive personal information such as religious beliefs, political affiliations, or health data unless strictly required for regulatory compliance (e.g., self-exclusion programs under responsible gaming).
3. How We Collect Your Data
Phlawin gathers personal data through several means:
- Direct collection: When you register an account, complete your profile, submit KYC documents, make deposits or withdrawals, or contact support.
- Automated collection: Through cookies, log files, and analytics tools as you browse and use our platform.
- Third-party verification: From identity verification services and payment processors (such as GCash, Maya, and bank partners) to confirm your identity and facilitate transactions.
- Fraud prevention partners: Data shared with anti-fraud and AML compliance services for the purpose of protecting all players and maintaining regulatory compliance.
4. How We Use Your Personal Data
Phlawin processes your personal data strictly for the following legitimate purposes:
- Account management: Creating, verifying, and managing your Phlawin account
- Identity verification (KYC): Confirming your age and identity as required by Philippine gaming regulations
- Payment processing: Handling deposits and withdrawals through GCash, Maya, GrabPay, bank transfers, and card payments
- Service delivery: Providing access to betting markets, casino games, promotions, and VIP features
- Fraud prevention and AML: Detecting and preventing money laundering, fraud, and other illegal activities
- Customer support: Responding to your inquiries, complaints, and requests
- Legal compliance: Meeting obligations under PAGCOR regulations, RA 10173, and Anti-Money Laundering Act (AMLA)
- Marketing communications: Sending you promotions, offers, and updates — only with your consent, and you can opt out anytime
- Platform improvement: Analyzing usage patterns to enhance our services and user experience
- Responsible gaming: Monitoring betting patterns to support player welfare tools and intervention programs
We will never use your personal data for purposes not listed here without obtaining your prior consent.
5. Data Sharing and Disclosure
Phlawin does not sell, rent, or trade your personal data to any third party. We may share your data only in the following limited circumstances:
Service Providers
We engage trusted third-party service providers — such as payment processors, identity verification companies, cloud hosting providers, and analytics platforms — who process data on our behalf and under strict data processing agreements. They are only permitted to use your data for the specific services they provide to Phlawin.
Regulatory and Legal Obligations
We may disclose your personal data to government authorities, law enforcement agencies, PAGCOR, the Anti-Money Laundering Council (AMLC), or the National Privacy Commission when required by law or in response to valid legal process.
Business Transfers
In the event of a merger, acquisition, or asset sale, your personal data may be transferred to the acquiring entity. We will notify you before your data is transferred and becomes subject to a different privacy policy.
Clear commitment: Phlawin will never share your personal data with advertisers, data brokers, or unrelated third parties for their own marketing purposes. Your data stays within the Phlawin ecosystem.
6. Data Retention
We retain your personal data for as long as your Phlawin account is active and for a period of five (5) years after account closure, as required by Philippine AML regulations and gaming compliance requirements. Specific retention periods include:
- Account and identity data: 5 years post-closure
- Financial transaction records: 5 years as mandated by AMLA
- Betting history: 3 years for dispute resolution purposes
- Support communications: 2 years
- Marketing consent records: Duration of consent plus 1 year
After the applicable retention period, data is securely deleted or anonymized in a manner that prevents re-identification.
7. Security Measures
Protecting your personal data is a top priority for Phlawin. We implement a layered security approach that includes:
- TLS/SSL encryption for all data in transit between your browser and our servers
- AES-256 encryption for sensitive data stored in our databases
- Two-factor authentication (2FA) available for all player accounts
- Access controls: Only authorized Phlawin personnel with a need to know can access personal data
- Regular security audits and vulnerability assessments
- Intrusion detection systems monitoring for unusual access patterns
- Data breach response plan — in the unlikely event of a breach, we will notify affected users and the NPC within 72 hours as required by law
While we take every reasonable precaution, no system is 100% impenetrable. We encourage you to use a strong, unique password and enable 2FA for your Phlawin account.
8. Cookies and Tracking Technologies
Phlawin uses cookies and similar tracking technologies to enhance your experience on our platform. Here's what we use and why:
Types of Cookies We Use
- Essential cookies: Required for the platform to function (login sessions, security tokens, language preferences). Cannot be disabled.
- Analytics cookies: Help us understand how players use the platform so we can improve it. Data is aggregated and anonymized.
- Preference cookies: Remember your settings and personalization choices for a smoother experience.
- Security cookies: Used for fraud detection and to protect against unauthorized access.
You can manage cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Phlawin platform. We do not use third-party advertising cookies or tracking pixels for behavioral advertising.
9. Your Rights Under the Data Privacy Act
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by Phlawin:
- Right to be informed: Know what personal data we collect and how it is used — which is the purpose of this Privacy Policy
- Right to access: Request a copy of the personal data we hold about you
- Right to correction: Ask us to correct inaccurate or incomplete personal data
- Right to erasure: Request deletion of your personal data, subject to legal retention requirements
- Right to object: Opt out of specific processing activities, such as direct marketing
- Right to data portability: Request your data in a structured, machine-readable format
- Right to damages: Seek compensation for any damage caused by a violation of your privacy rights
- Right to lodge a complaint: File a complaint with the National Privacy Commission (NPC) of the Philippines
To exercise any of these rights, send a written request to privacy@phlawin.com. We will respond within 15 business days. Please include your registered email address and a description of your request. We may need to verify your identity before processing your request.
10. Privacy of Minors
Phlawin's services are strictly for individuals aged 21 and above in compliance with Philippine gaming laws. We do not knowingly collect personal data from anyone under 21 years of age. If we discover that a minor has provided us with personal data, we will promptly delete that data and close the account. If you believe a minor has registered on our platform, please contact us immediately at privacy@phlawin.com.
11. Third-Party Links and Integrations
The Phlawin platform may contain integrations with payment services (GCash, Maya, etc.) and other tools. These third-party services have their own privacy policies that govern how they handle your data. Phlawin is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service you interact with through our platform.
12. Changes to This Privacy Policy
Phlawin may update this Privacy Policy from time to time to reflect changes in our data practices, Philippine regulatory requirements, or platform features. When we make significant changes, we will notify registered players via email and/or a prominent notice on the platform at least 7 days before the changes take effect.
The most current version of this Privacy Policy is always available on this page, with the effective date clearly indicated at the top. Your continued use of Phlawin after any updates means you accept the revised Policy.
13. Contact Us and Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or how Phlawin handles your personal data, you may reach our Data Protection Officer (DPO):
- Email: privacy@phlawin.com
- General Support: support@phlawin.com
- Live Chat: Available on-site during operating hours
If you believe your data privacy rights have been violated and we have not resolved your concern satisfactorily, you may file a complaint directly with the National Privacy Commission (NPC) of the Philippines.
Your privacy is important to us — and to every kabayan player on the Phlawin platform. We're committed to being transparent, responsible, and accountable in everything we do with your personal data.
