phbwin Privacy Policy

phbwin ("phbwin," "we," "us," or "our") is the operator of the online gaming platform accessible at phbwin.asia. phbwin operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the laws of the Republic of the Philippines, including the Data Privacy Act of 2012.

For the purposes of the Data Privacy Act of 2012, phbwin acts as the Personal Information Controller (PIC) in respect of the personal data it collects from players and visitors to phbwin.asia. phbwin has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws.

This Privacy Policy applies to all personal data collected through phbwin.asia, the phbwin mobile application, customer support channels, and any other phbwin-operated service or platform.

phbwin collects the following categories of personal data from players and visitors:

• Identity data: Full legal name, date of birth, nationality, and government-issued ID number (e.g., Philippine passport, driver's license, SSS/UMID/PhilSys ID number).
• Contact data: Email address, mobile number, and residential address (including city, province, and postal code).
• Account data: Username, encrypted password, account registration date, account status, and communication preferences.
• Financial data: GCash or PayMaya account number (last four digits only), bank account details (for withdrawal processing), deposit and withdrawal history, and transaction amounts in Philippine Peso (₱).
• KYC verification data: Copies of government-issued photo ID, proof of address documents, selfie verification images, and any additional documents submitted during the identity verification process.
• Gaming activity data: Game history, bet amounts, win/loss records, session duration, bonus usage, and responsible gaming tool settings (deposit limits, self-exclusion status).
• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and approximate geolocation (country/region level).
• Usage data: Pages visited on phbwin.asia, navigation paths, time spent on pages, search queries within the platform, and feature interactions.
• Communications data: Records of live chat conversations, email correspondence, and support ticket history with phbwin's customer support team.

phbwin collects personal data through the following means:

• Direct collection: Information you provide when registering a phbwin account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access phbwin.asia or the phbwin mobile application, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from licensed KYC service providers; fraud prevention data from anti-money laundering screening services; payment confirmation data from GCash, PayMaya, and partner banks.
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with compliance obligations.

phbwin uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your phbwin account, including processing login authentication and account security.
• KYC and compliance: To verify your identity and age (21+), comply with PAGCOR licensing requirements, and meet obligations under the Anti-Money Laundering Act of 2001 (R.A. 9160) and its amendments.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, and partner banks, and to verify that payment accounts are registered in your name.
• Game delivery: To provide access to phbwin's games, record game outcomes, calculate winnings, and maintain accurate account balances.
• Responsible gaming: To monitor gaming activity for signs of problem gambling, enforce deposit limits and self-exclusion orders, and comply with PAGCOR's responsible gaming requirements.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised account access.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent. You may withdraw consent at any time through your account settings.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the phbwin platform experience for Filipino players.
• Legal compliance: To comply with applicable Philippine laws, respond to regulatory enquiries, and enforce phbwin's Terms & Conditions.

Under the Data Privacy Act of 2012, phbwin processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and phbwin (i.e., operating your account, processing payments, and delivering games).
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

phbwin does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your personal data with the following categories of recipients only where necessary and lawful:

• KYC and identity verification providers: Licensed third-party services that assist phbwin in verifying player identity and age in compliance with PAGCOR and AML requirements.
• Payment processors: GCash, PayMaya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing deposits and withdrawals.
• Fraud prevention and AML screening services: Third-party providers that assist phbwin in detecting and preventing money laundering, fraud, and other prohibited conduct.
• IT and platform service providers: Cloud hosting, data storage, and technical infrastructure providers who process data on phbwin's behalf under strict data processing agreements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law or regulatory obligation.
• Law enforcement: Philippine law enforcement agencies or courts of competent jurisdiction where disclosure is required by a valid legal order or warrant.

All third-party service providers who process personal data on phbwin's behalf are required to enter into data processing agreements that obligate them to process data only on phbwin's instructions, maintain appropriate security measures, and comply with the Data Privacy Act of 2012.

phbwin uses cookies and similar tracking technologies on phbwin.asia to enhance your browsing experience, maintain session security, and analyse platform usage. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the operation of phbwin.asia, including session authentication, security tokens, and load balancing. These cookies cannot be disabled without affecting core platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate phbwin.asia, which pages are most visited, and where technical errors occur. This data helps phbwin improve the platform experience.
• Marketing cookies: Used only where you have provided explicit consent, to deliver relevant phbwin promotional content. These cookies are not used to track your activity on third-party websites.

You may manage your cookie preferences through your browser settings or through the cookie consent tool displayed when you first visit phbwin.asia. Disabling strictly necessary cookies may impair your ability to log in or use certain platform features.

phbwin retains your personal data for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and resolve disputes. The following retention periods apply:

• Account data: Retained for the duration of your active phbwin account, plus five (5) years following account closure, in compliance with PAGCOR record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Financial transaction records: Retained for a minimum of five (5) years following the date of each transaction, in compliance with AML and tax record-keeping obligations.
• Gaming activity data: Retained for five (5) years following account closure for regulatory audit and dispute resolution purposes.
• Customer support records: Retained for three (3) years following the resolution of each support interaction.
• Marketing consent records: Retained for the duration of your consent, plus three (3) years following withdrawal of consent, as evidence of lawful processing.
• Technical and usage data: Retained in anonymised, aggregated form for up to two (2) years for platform analytics purposes.

Upon expiry of the applicable retention period, phbwin will securely delete or anonymise your personal data in accordance with its data disposal procedures.

phbwin implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and phbwin.asia is encrypted using TLS 1.2 or higher.
• Encryption at rest: Sensitive personal data stored in phbwin's databases is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to phbwin personnel and authorised service providers who require it to perform their duties, on a strict need-to-know basis.
• Multi-factor authentication: phbwin's internal systems require multi-factor authentication for all staff accessing player data.
• Regular security audits: phbwin conducts regular penetration testing and security audits of its platform and data infrastructure.
• Incident response: phbwin maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, phbwin will notify the National Privacy Commission and affected players within the timeframes required by the Data Privacy Act of 2012.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by phbwin:

• Right to be informed: The right to be notified of how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data phbwin holds about you, including information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held by phbwin.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phbwin's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to restrict processing: The right to request that phbwin restricts the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe phbwin has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact phbwin's Data Protection Officer using the contact details in Section 14 of this Privacy Policy. phbwin will respond to all data subject requests within thirty (30) days of receipt, in accordance with the Data Privacy Act of 2012.

phbwin's platform is strictly intended for adults aged twenty-one (21) years and above, in compliance with PAGCOR regulations governing casino-style online gambling in the Philippines. phbwin does not knowingly collect personal data from individuals under the age of 21.

phbwin employs age verification technology and manual KYC review processes to prevent underage access. If phbwin discovers that personal data has been collected from a person under 21 years of age, the account will be immediately closed, all funds will be returned to the depositing payment method, and the personal data will be securely deleted.

If you are a parent or guardian and believe that a minor in your care has registered a phbwin account, please contact our support team immediately so that we can take appropriate action.

phbwin's primary data processing infrastructure is located within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international KYC verification services.

Where personal data is transferred outside the Philippines, phbwin ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses that require the recipient to apply data protection standards equivalent to those required under the Data Privacy Act of 2012.
• Transfers only to countries or organisations that the National Privacy Commission has determined provide an adequate level of data protection.
• Your explicit consent, where required by applicable law.

phbwin will not transfer your personal data to jurisdictions that do not provide adequate data protection safeguards without your prior informed consent.

phbwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or PAGCOR regulatory requirements. Where changes are material, phbwin will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The "Last updated" date at the top of this page reflects the date of the most recent revision. Your continued use of phbwin following the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how phbwin protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or phbwin's data practices, please contact our Data Protection Officer (DPO) through the following channels:

• Email (plain text — not a link): [email protected]
• Live Chat: Available 24/7 within the phbwin platform. Select "Privacy & Data" as the enquiry category.
• Response time: phbwin's DPO will acknowledge all privacy enquiries within five (5) business days and provide a substantive response within thirty (30) days.

If you are not satisfied with phbwin's response to your privacy enquiry, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.