This policy explains what personal data phwim collects from you, why we collect it, how we use and protect it, and what rights you have under the Philippines' Data Privacy Act of 2012.
Your Rights Under RA 10173
phwim is transparent about what personal data we collect, why we collect it, how long we keep it, and who we share it with. This Privacy Policy is the primary document satisfying that obligation.
You may request a copy of the personal data phwim holds about you at any time. Requests are processed within 15 business days. Contact phwim support via live chat or email to make an access request.
If any personal data phwim holds about you is inaccurate or incomplete, you have the right to request correction. Update your account details directly from your phwim profile settings or contact support.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected. Note: phwim must retain certain data to comply with PAGCOR regulations and AML obligations for a minimum statutory period.
You may object to phwim processing your personal data for direct marketing purposes at any time. Opt out of marketing communications via your account notification settings or by contacting phwim support.
Where technically feasible, you may request your phwim personal data in a structured, commonly used, machine-readable format. Contact phwim support with a portability request and we will respond within 15 business days.
1.1 phwim ("phwim," "we," "us," "our") is an online casino and sports betting platform operating at phwim.co and serving players in the Philippines. We take the privacy and security of our players' personal data extremely seriously, and we are committed to handling all personal information in a manner that is lawful, transparent, and proportionate.
1.2 This Privacy Policy describes in detail: (a) what categories of personal data phwim collects; (b) the purposes for which that data is processed; (c) the legal bases for processing; (d) how and with whom phwim may share your data; (e) how long phwim retains your data; (f) the security measures phwim applies to protect your data; and (g) the rights available to you as a data subject under Philippine law.
1.3 phwim's gaming services are intended exclusively for individuals aged 21 years or older, in accordance with PAGCOR regulations. The collection and processing of personal data described in this policy relates only to eligible adult users. phwim does not knowingly collect personal data from individuals under the age of 21.
1.4 This policy should be read alongside phwim's Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your use of phwim Services.
2.1 For the purposes of the Data Privacy Act of 2012 and its implementing regulations, phwim is the personal information controller (PIC) in respect of the personal data processed under this Privacy Policy. phwim determines the purposes and means by which your personal data is processed.
2.2 phwim has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with RA 10173, monitoring data processing activities, and serving as the primary point of contact for data subject inquiries. Contact details for the phwim DPO are provided in Section 17 of this policy.
2.3 Where phwim engages third-party service providers to process personal data on phwim's behalf — such as payment processors, KYC verification providers, and fraud detection services — those providers act as personal information processors (PIPs) under phwim's instructions and are contractually required to maintain data protection standards consistent with RA 10173.
3.1 phwim collects the following categories of personal data from players:
| Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID type and number, photograph | Registration; KYC verification |
| Contact Data | Philippine mobile number, email address | Registration |
| Account Data | Username, encrypted password, account creation date, account status | Registration |
| Financial Data | GCash/Maya account reference, BPI/BDO account name, deposit and withdrawal history, wallet balance, transaction IDs | First deposit; ongoing transactions |
| Gaming Activity Data | Games played, bet amounts, win/loss records, session times, bonus usage, responsible gaming limits | Ongoing platform use |
| Technical Data | IP address, device type, operating system, browser type and version, time zone | Each platform visit |
| Usage Data | Pages visited, game lobby interactions, clickstream data, session duration | Ongoing platform use |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | When you contact phwim support |
| Compliance Data | KYC documentation images, AML screening results, source of funds declarations | KYC; regulatory requests |
3.2 phwim does not collect sensitive personal information as defined under RA 10173 (including racial or ethnic origin, political opinions, religious beliefs, or health data) except where strictly necessary for responsible gaming assessments or where required by applicable law.
4.1 phwim collects personal data through the following channels:
5.1 phwim processes your personal data for the following specific, legitimate purposes:
6.1 phwim relies on the following legal bases for processing your personal data:
7.1 phwim does not sell your personal data to any third party. phwim does not share your personal data with third parties for their own independent marketing purposes.
7.2 phwim may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the specified purpose:
7.3 All third parties with whom phwim shares personal data are required to handle that data in accordance with applicable data protection law and phwim's data processing instructions. phwim conducts due diligence on its key data processors before engagement.
8.1 phwim's primary data processing infrastructure is located within the Philippines. However, some third-party service providers — including game platform providers, KYC verification partners, and cloud hosting services — may process data in jurisdictions outside the Philippines.
8.2 Where personal data is transferred outside the Philippines, phwim ensures that appropriate safeguards are in place consistent with the requirements of RA 10173 and National Privacy Commission (NPC) guidelines, including contractual data processing agreements that require overseas recipients to apply protection standards equivalent to Philippine law.
8.3 phwim will not transfer your personal data to any jurisdiction or recipient that cannot provide an adequate level of data protection without your consent or a lawful legal basis for doing so.
9.1 phwim retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law, whichever is longer.
9.2 The following general retention periods apply:
9.3 Where phwim retains data beyond the minimum periods above, it is solely for the purposes of defending, establishing, or exercising legal rights in connection with known or anticipated disputes or regulatory investigations.
9.4 At the expiry of the applicable retention period, phwim will securely delete or irreversibly anonymize your personal data.
10.1 phwim uses cookies and similar tracking technologies on phwim.co for the following purposes:
10.2 phwim does not use third-party advertising cookies or enable behavioral retargeting advertising based on your phwim activity.
10.3 You may control cookies through your browser settings. Blocking strictly necessary cookies will impair platform functionality. You can delete cookies at any time through your browser, though this will log you out of any active phwim session.
11.1 phwim implements technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
12.1 phwim's services are exclusively available to persons who are at least 21 years of age, in accordance with PAGCOR regulations. phwim does not knowingly collect, process, or retain personal data from individuals under the age of 21.
12.2 Date of birth is collected at registration and is verified during KYC. Where phwim discovers, at any point, that personal data belonging to a person under 21 has been collected, phwim will immediately: (a) suspend the relevant account; (b) initiate secure deletion of the personal data; and (c) return any deposited funds to the originating payment method where technically possible.
12.3 Account holders are responsible for ensuring that minors do not access phwim through their registered account, device, or login credentials.
13.1 As a data subject under RA 10173, you have the rights described in the feature section above this policy. To exercise any of these rights, you may:
13.2 phwim will respond to all verified data subject requests within fifteen (15) business days of receipt. Complex or high-volume requests may require up to thirty (30) business days; phwim will notify you of any extension within the initial 15-day window.
13.3 To protect your data security, phwim may require verification of your identity before processing any data subject request. We may request a copy of your KYC-verified government ID for this purpose.
13.4 Right to Lodge a Complaint. If you believe phwim has not handled your personal data in accordance with RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information about the NPC complaint process is available through official Philippine government channels.
14.1 phwim may send you promotional communications — including bonus offers, new game announcements, and platform updates — via SMS to your registered Philippine mobile number, email, or in-platform notifications.
14.2 Where phwim relies on consent as the legal basis for marketing, you may withdraw that consent at any time by:
14.3 Opting out of marketing communications does not affect your ability to receive transactional communications — such as deposit confirmations, withdrawal notifications, security alerts, and account status updates — which are sent on the basis of contractual necessity and cannot be unsubscribed from while your phwim account is active.
15.1 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, phwim will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required under RA 10173.
15.2 Where a breach is likely to result in a high risk to affected individuals, phwim will also notify the affected data subjects without undue delay, providing: (a) a description of the nature of the breach; (b) the categories and approximate number of records affected; (c) the likely consequences; and (d) the measures phwim has taken or proposes to take to address the breach.
15.3 phwim maintains a documented Incident Response Plan that is reviewed and tested regularly to ensure phwim's preparedness to contain, investigate, and report data security incidents effectively.
16.1 phwim may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, phwim's data processing activities, or best practices in data protection.
16.2 When material changes are made, phwim will notify registered players by email to their registered address and via an in-platform notification. Minor editorial or clarificatory changes may be made without direct notification.
16.3 The date at the top of this Privacy Policy reflects when it was last updated. We encourage you to review this policy periodically. Continued use of phwim Services after the effective date of an updated policy constitutes acceptance of the updated terms.
17.1 For any questions, concerns, or requests relating to this Privacy Policy or phwim's data processing practices, please contact phwim's Data Protection Officer through the following channels:
17.2 When submitting a data privacy inquiry, please provide your registered phwim username or mobile number, a clear description of your request or concern, and any relevant reference numbers (e.g., transaction IDs or support ticket numbers) to assist in resolving your query promptly.
17.3 phwim aims to acknowledge all privacy inquiries within 24 hours and to provide a substantive response within 15 business days. Requests requiring complex investigation may take longer; phwim will keep you informed of progress in such cases.
17.4 If you are not satisfied with phwim's response to a privacy complaint, you have the right to escalate your concern to the National Privacy Commission of the Philippines. Information on how to file a complaint with the NPC is available through official Philippine government channels.
Play with Confidence
phwim is built on transparency, security, and respect for Filipino players' data rights. Confident about how your data is handled? Join phwim and start playing today. 21+ only — play responsibly.
TLS 1.3 Encrypted · RA 10173 Compliant · PAGCOR Regulated · 🔞 21+ only · Philippines