phw99 Privacy Policy

1 Scope & Application

This Privacy Policy applies to all personal data collected, processed, stored, or shared by phw99 in connection with your access to and use of the phw99 platform, including the website at phw99.app, all associated game interfaces, mobile browser sessions, customer support interactions, and any promotional communications issued by phw99.

This Policy applies to all registered phw99 players, prospective players who have initiated but not completed registration, and any individual who contacts phw99 customer support or submits a query through the platform. By accessing the phw99 platform or completing registration, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, phw99 is the personal information controller in respect of all personal data collected through the phw99 platform.

phw99 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with data privacy obligations and responding to data subject requests. The DPO may be contacted using the details provided in Section 15 of this Policy.

3 Data We Collect

phw99 collects the following categories of personal data in connection with the operation of the platform:

3.1 Identity & Registration Data

• Full legal name as it appears on a government-issued identification document.
• Date of birth (used to verify the 21-year minimum age requirement).
• Gender (where voluntarily provided during registration).
• Username and account credentials (password is stored in encrypted, non-reversible form).
• Government-issued ID type and number (collected during KYC verification).

3.2 Contact Data

• Mobile number (Philippine-registered, used for account verification and notifications).
• Email address (used for account communication and promotional messages where consented).
• Residential address in the Philippines (used for identity verification and regulatory compliance).

3.3 Financial & Transaction Data

• GCash or Maya account number or registered mobile number associated with payment.
• Bank account details (BPI, BDO, Metrobank) where used as a deposit or withdrawal method.
• USDT wallet address where applicable.
• Deposit and withdrawal transaction history, including amounts, timestamps, and payment references.
• Gaming transaction history, including wager amounts, game types, outcomes, and session duration.

3.4 Technical & Usage Data

• IP address and approximate geographic location at the time of access.
• Device type, operating system, and browser information.
• Session timestamps, login and logout records.
• Pages visited within the phw99 platform, click patterns, and feature usage data.
• Error logs and platform performance data associated with your session.

3.5 Communications Data

• Records of correspondence with phw99 customer support, including chat transcripts, emails, and support ticket submissions.
• Feedback and survey responses voluntarily submitted through the platform.

4 How We Collect Your Data

phw99 collects personal data through the following channels:

• Direct collection: Information you provide when completing the phw99 registration form, submitting KYC documents, initiating a deposit or withdrawal, or contacting customer support.
• Automated collection: Technical and usage data collected automatically when you access the phw99 platform, including through cookies, server logs, and session tracking technologies described in Section 8.
• Third-party payment providers: Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, and cryptocurrency processors when you initiate a financial transaction on the platform.
• Identity verification providers: Where phw99 engages a third-party KYC or identity verification service, that provider may return verification results and extracted identity data to phw99 in connection with your account verification.
• Fraud prevention and anti-money laundering (AML) services: phw99 may receive risk signals and screening results from third-party compliance service providers as part of its regulatory obligations under the Philippine AMLA framework.

5 Purposes of Processing

phw99 processes your personal data for the following purposes:

• Account creation and management: To register your phw99 account, verify your identity and age, maintain your account profile, and provide access to all platform features.
• Gaming services: To operate, record, and settle gaming transactions, calculate payouts, and maintain an accurate account balance history.
• Payment processing: To facilitate deposits and withdrawals through your chosen payment method, verify payment ownership, and maintain transaction records.
• Regulatory compliance: To fulfil phw99's obligations under applicable Philippine laws including the Anti-Money Laundering Act (AMLA), data privacy regulations, and gaming regulatory requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other security threats to the phw99 platform.
• Customer support: To respond to your support queries, resolve disputes, and maintain records of communications for quality assurance purposes.
• Responsible gaming: To monitor gaming patterns, administer deposit limits, cooling-off periods, and self-exclusion requests, and to identify players who may require responsible gaming intervention.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the phw99 platform features and user experience.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to players who have provided consent to receive such communications. You may opt out at any time.

6 Legal Basis for Processing

phw99 processes personal data on the following legal bases as recognised under the Philippine Data Privacy Act of 2012:

• Performance of a contract: Processing necessary to register your account, provide gaming services, process transactions, and fulfil the obligations set out in the phw99 Terms & Conditions.
• Compliance with a legal obligation: Processing required to satisfy phw99's obligations under Philippine law, including identity verification, AML reporting, and gaming regulatory compliance.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and platform analytics, where such processing does not override your fundamental privacy rights.
• Consent: Processing of personal data for marketing communications and non-essential cookies, where phw99 has obtained your explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Sharing of Personal Data

phw99 does not sell your personal data. phw99 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements or legal obligations:

7.1 Payment Service Providers

phw99 shares the minimum personal and financial data necessary to process your deposits and withdrawals with payment service providers including GCash, Maya, BPI, BDO, Metrobank, and approved cryptocurrency processors. These providers act as independent data controllers with respect to the processing of their own financial transaction data.

7.2 Identity Verification & KYC Providers

phw99 engages accredited identity verification service providers to assist with KYC compliance. Your identity documents and verification data may be shared with these providers solely for the purpose of completing account verification. Such providers are contractually bound to process your data only as directed by phw99.

7.3 Regulatory & Law Enforcement Authorities

phw99 may disclose personal data to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Philippine National Police (PNP), the National Bureau of Investigation (NBI), or other competent Philippine government authorities where required to do so by law, court order, or lawful regulatory request.

7.4 Service Providers & Technology Partners

phw99 engages third-party service providers to assist with platform hosting, fraud detection, customer support tooling, and data analytics. These providers process personal data only on phw99's instructions and are bound by data processing agreements that require them to maintain appropriate technical and organisational security measures.

7.5 Group Companies

phw99 may share personal data within its corporate group to the extent necessary for internal administrative, compliance, or operational purposes, subject to equivalent data protection standards.

8 Cookies & Tracking Technologies

phw99 uses cookies and similar tracking technologies to operate the platform, enhance your experience, and gather analytical data about how the platform is used. The following categories of cookies may be set when you access phw99:

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may impair the functionality of the phw99 platform, including your ability to log in and access your account.

9 Data Retention

phw99 retains personal data for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, subject to the following minimum retention periods required by Philippine law and regulatory obligations:

• Account and identity data: Retained for a minimum of five (5) years from the date of account closure, in compliance with the Philippine Anti-Money Laundering Act record-keeping requirements.
• Financial and transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLA and gaming regulatory requirements.
• KYC documentation: Retained for the duration of the account relationship and for five (5) years following account closure.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required by ongoing dispute resolution or regulatory inquiry.
• Marketing consent records: Retained for the duration of your registration and for three (3) years following account closure or withdrawal of consent, whichever is later.
• Technical and usage data: Retained for up to twelve (12) months from collection, after which it is aggregated and anonymised for analytical purposes.

Upon expiry of the applicable retention period, phw99 will securely delete or anonymise your personal data in a manner that prevents reconstruction or re-identification.

10 Data Security

phw99 implements and maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• Encryption: All data transmitted between your device and the phw99 platform is encrypted using 256-bit TLS/SSL protocols. Sensitive data at rest, including passwords and financial account references, is encrypted using industry-standard algorithms.
• Access controls: Access to personal data within phw99's systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for administrative access.
• Infrastructure security: phw99's platform is hosted on secure, regularly audited infrastructure with firewalls, intrusion detection systems, and automated threat monitoring in place.
• Penetration testing: phw99 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in the platform.
• Data breach response: phw99 maintains a documented data breach response plan. In the event of a personal data breach that is likely to prejudice the rights and freedoms of affected players, phw99 will notify the National Privacy Commission and affected individuals in accordance with the timelines prescribed by the Data Privacy Act and its implementing rules.

11 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by phw99. To exercise any of these rights, please contact phw99's Data Protection Officer using the contact details in Section 15.

phw99 will respond to verified data subject requests within fifteen (15) calendar days of receipt. Where a request is complex or phw99 receives a high volume of requests, this period may be extended by an additional thirty (30) days, of which you will be notified in writing.

12 Children's Privacy

phw99 strictly prohibits registration and Gaming Activity by individuals under the age of 21 years, in compliance with applicable Philippine gaming regulations. phw99 does not knowingly collect personal data from individuals under the age of 21.

If phw99 becomes aware that personal data has been collected from an individual who is under 21 years of age, phw99 will immediately suspend the associated account, delete the relevant personal data (subject to any mandatory legal retention requirements), and return any funds to the original payment source. If you believe phw99 may have inadvertently collected data from an underage individual, please contact [email protected] immediately.

13 Cross-Border Data Transfers

phw99 primarily stores and processes personal data within the Philippines and in jurisdictions that the National Privacy Commission has recognised as providing an adequate level of data protection. Where it is necessary to transfer personal data to a service provider or technology partner located outside the Philippines, phw99 ensures that such transfers are conducted only:

• To countries or organisations that provide an adequate level of data protection as recognised by the NPC, or
• Subject to appropriate contractual safeguards, including data processing agreements that incorporate the standard contractual clauses approved by the NPC, or
• Where the transfer is necessary for the performance of a contract between you and phw99 (for example, processing an international payment transaction).

You may request information about the specific safeguards in place for any cross-border data transfer by contacting phw99's Data Protection Officer.

14 Amendments to This Privacy Policy

phw99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or phw99's data processing practices. Where a material change is made to this Policy, phw99 will provide reasonable advance notice to registered players via email or a platform notification prior to the amendment taking effect.

The updated Privacy Policy will be published on this page with a revised effective date. Your continued use of the phw99 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should cease using the platform and may request account closure in accordance with the phw99 Terms & Conditions.

15 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to raise a concern about phw99's data processing practices, you may contact phw99's Data Protection Officer by writing to:

phw99 will acknowledge receipt of your request within three (3) business days and will aim to resolve all data privacy matters within fifteen (15) calendar days.

If you are not satisfied with phw99's response, or if you believe phw99 is processing your personal data in breach of the Philippine Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official government website.