phwil Privacy Policy
phwil is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and what rights you have as a data subject under Philippine law. Please read this document carefully — it forms part of your agreement with phwil.
How phwil Protects Your Data
A quick summary of the six pillars of phwil's approach to player data privacy. Full legal details follow below.
Philippine Data Privacy Act Compliant
phwil processes personal data in compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and the regulations of the National Privacy Commission (NPC). Your data is treated with the full protections afforded under Philippine law.
End-to-End Encryption
All data transmitted between your browser and phwil's servers is protected by 256-bit SSL/TLS encryption. Stored personal data and payment information is encrypted at rest using industry-standard cryptographic protocols.
No Sale of Personal Data
phwil does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data is shared only where strictly necessary for service delivery, legal compliance, or fraud prevention — and never for commercial exploitation by unrelated parties.
Full Data Subject Rights
As a phwil player, you hold the right to access, correct, delete, object to, and port your personal data. You may withdraw consent at any time. All requests are handled within 15 business days in line with NPC guidelines.
Data Collected for Specific Purposes Only
phwil collects only the data necessary for the purposes declared in this Policy. We do not collect personal data speculatively or in excess of what is needed for account management, KYC compliance, payment processing, and platform security.
KYC Data Held Securely
Identity documents submitted for KYC verification are stored in an isolated, access-controlled environment separate from the main platform database. Access to KYC documents is strictly limited to authorised compliance personnel on a need-to-know basis.
1. Introduction & Scope
This Privacy Policy applies to all personal data collected, processed, stored, and used by phwil in connection with your use of the phwil online gaming platform at https://phwil.vip and all related services, features, and communications (collectively, the "Platform").
phwil is committed to handling personal data responsibly, transparently, and in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations as promulgated by the National Privacy Commission of the Philippines.
By registering an account, depositing funds, participating in games, or otherwise interacting with the phwil Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.
This Privacy Policy should be read alongside phwil's Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and phwil.
2. Data Controller
For the purposes of the Data Privacy Act of 2012, phwil acts as the Personal Information Controller (PIC) in respect of all personal data collected through the Platform. phwil determines the purpose and means of processing your personal data, and is accountable for ensuring that all processing activities comply with the DPA.
phwil has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data protection law, handling data subject rights requests, and serving as the primary contact for all privacy-related matters. The DPO may be contacted via the support channels set out in Section 14 of this Policy.
3. Personal Data We Collect
phwil collects personal data in the following categories. The data collected depends on how you interact with the Platform and the stage of your account lifecycle.
3.1 Registration Data
When you create a phwil account, we collect the following information you provide directly:
- Full legal name
- Date of birth (for age verification — 21+ requirement)
- Email address
- Mobile phone number
- Username and encrypted password
- Region or city of residence (e.g., Metro Manila, Cebu, Davao)
3.2 KYC and Identity Verification Data
To comply with anti-money laundering regulations and to verify player identity prior to withdrawal, phwil collects:
- Government-issued ID documents (PhilSys, UMID, passport, driver's licence, PRC ID, or equivalent)
- Selfie photograph for facial comparison
- Proof of address documentation (e.g., utility bill or bank statement)
- Proof of payment method ownership (e.g., GCash account screenshot)
3.3 Financial and Transaction Data
- Deposit and withdrawal amounts, dates, and methods (GCash, Maya, BPI, BDO, UnionBank, Metrobank, 7-Eleven Cliqq, USDT TRC20, Coins.ph)
- Payment account identifiers (e.g., GCash-registered mobile number — not full account credentials)
- Bonus credit allocation and wagering progress
- Transaction history and balance statements
3.4 Gaming and Behavioural Data
- Game sessions, wager amounts, results, and durations
- Game preferences and most-played titles
- Sports betting selections and odds accepted
- Session time and frequency of play patterns
- Responsible gaming tool usage (e.g., deposit limits set, self-exclusion periods)
3.5 Technical and Device Data
- IP address and approximate geolocation
- Device type, operating system, and browser version
- Cookie identifiers and session tokens
- Platform access logs, including login timestamps and session durations
3.6 Communications Data
- Live chat transcripts with phwil support agents
- Email correspondence with phwil
- Survey or feedback responses where voluntarily submitted
| Data Category | Source | Mandatory? |
|---|---|---|
| Registration Data | Provided by you at sign-up | Yes — required to create an account |
| KYC & ID Documents | Provided by you before first withdrawal | Yes — required to withdraw funds |
| Financial & Transaction Data | Generated automatically on transactions | Yes — generated by platform use |
| Gaming & Behavioural Data | Generated automatically during play | Yes — generated by platform use |
| Technical & Device Data | Collected via cookies and server logs | Partially — see Cookie Policy (§6) |
| Communications Data | Provided by you via support channels | No — only when you contact us |
4. Legal Bases for Processing
phwil processes personal data on the following lawful bases under the Data Privacy Act of 2012:
- Contractual Necessity: Processing is necessary for the performance of the contract between you and phwil — specifically, to provide account management, gaming services, payment processing, and customer support.
- Legal Obligation: Processing is required to comply with applicable legal obligations, including anti-money laundering (AML) obligations under Republic Act No. 9160, age verification requirements, and PAGCOR context regulatory requirements.
- Legitimate Interests: phwil processes certain data in furtherance of its legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your fundamental rights.
- Consent: Where processing is not covered by the above bases — for example, for direct marketing communications or optional cookies — phwil will seek your explicit consent before processing. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5. How We Use Your Personal Data
phwil uses the personal data it collects for the following purposes:
- Account Creation and Management: To register your account, verify your identity, maintain your balance, and communicate with you regarding your account.
- KYC and Regulatory Compliance: To verify your age (21+ requirement) and identity in compliance with Philippine AML and gaming regulations.
- Payment Processing: To process deposits and withdrawals via your chosen payment method (GCash, Maya, BPI, BDO, etc.) and to maintain accurate financial records.
- Game and Service Delivery: To provide access to the phwil game lobby, live casino, bingo rooms, slots, and sports betting, and to record game results and calculate winnings accurately.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as described in the phwil Terms & Conditions.
- Responsible Gaming Monitoring: To monitor gaming behaviour for indicators of problem gambling and to apply any responsible gaming limits you have voluntarily set. This may include automated pattern detection to identify at-risk players.
- Customer Support: To respond to your queries, complaints, and dispute submissions via live chat and email.
- Platform Improvement: To analyse aggregated, anonymised usage data to improve platform performance, game selection, and user experience.
- Marketing Communications: With your consent, to send promotional communications about phwil bonuses, new game releases, and special events. You may opt out of marketing communications at any time via your Account Settings or by contacting support.
- Legal Proceedings: To exercise or defend phwil's legal rights in any dispute, and to comply with court orders, regulatory directives, and lawful requests from Philippine law enforcement agencies.
6. Cookies & Tracking Technologies
phwil uses cookies and similar tracking technologies to enable platform functionality, remember your preferences, maintain your session, and — where you have consented — to analyse usage patterns for service improvement purposes.
6.1 Types of Cookies Used
- Strictly Necessary Cookies: Required for the platform to function. These include session cookies that maintain your logged-in state. These cookies cannot be disabled without impacting platform functionality.
- Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gaming limit configurations.
- Analytics Cookies: Used to collect anonymised data about how players use the platform — pages visited, game categories accessed, and session durations — for internal service improvement. These are only placed with your consent.
- Security Cookies: Used for fraud detection and account security purposes, including detecting login anomalies and identifying suspicious access patterns.
6.2 Managing Cookies
You may manage or disable non-essential cookies through your browser settings or through the phwil cookie preference centre, accessible from the platform footer. Please note that disabling certain cookies may affect the functionality of some platform features. Strictly necessary and security cookies cannot be disabled.
Cookies do not contain your password, payment details, or any full KYC document data. They are used only for session management, preference memory, and anonymised analytics.
7. Data Sharing & Disclosure
phwil does not sell, rent, or commercially disclose your personal data to third parties. We share data only in the following limited and necessary circumstances:
- Payment Processors: Your financial data is shared with the relevant payment service providers (e.g., GCash, Maya, BPI, BDO) solely to process your deposit or withdrawal transaction. Each provider operates under their own privacy policy and applicable financial regulations.
- KYC and Identity Verification Partners: Identity documents may be processed by our accredited KYC verification partner to assist in identity and age verification. These partners are bound by strict data processing agreements and may not use your data for any purpose other than identity verification on phwil's behalf.
- Fraud Prevention and Security Services: Anonymised or pseudonymised technical data may be shared with security service providers for the purpose of detecting and preventing fraud, account takeovers, and other prohibited activities.
- Regulatory and Law Enforcement Authorities: phwil will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or any other competent Philippine authority where required by law, court order, or legitimate regulatory directive.
- Corporate Transactions: In the event of a merger, acquisition, or restructuring of phwil's business, your personal data may be disclosed to prospective or actual acquiring parties, subject to confidentiality obligations and continuity of this Privacy Policy.
We do not sell your data. phwil will never sell, lease, or commercially provide your personal data to advertisers, data brokers, or unrelated third parties. Any sharing is strictly limited to the necessary operational, legal, and security purposes listed above.
8. Data Retention
phwil retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Registration Data | Duration of account + 5 years post-closure | AML obligations, legal disputes |
| KYC Identity Documents | Duration of account + 5 years post-closure | RA 9160 AML obligations |
| Financial and Transaction Records | 10 years from transaction date | RA 9160, BIR regulations |
| Gaming and Behavioural Logs | 3 years from session date | Responsible gaming, dispute resolution |
| Support Communications | 3 years from last communication | Dispute resolution, service improvement |
| Technical and Session Logs | 12 months from generation | Security monitoring, fraud prevention |
| Analytics Cookie Data | 13 months from placement | Platform improvement (consent-based) |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual. Data retained for legal obligation purposes may be held beyond the above periods where a specific legal requirement mandates longer retention.
9. Data Security
phwil implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- Encryption in Transit: All data transmitted between your browser and phwil servers is protected by 256-bit SSL/TLS encryption. HTTPS is enforced across the entire platform.
- Encryption at Rest: Sensitive stored data, including passwords (which are hashed using a one-way cryptographic algorithm) and KYC documents, is encrypted at rest in isolated storage environments.
- Access Controls: Access to personal data is restricted to authorised phwil personnel on a strict need-to-know basis. All data access by staff is logged and auditable.
- Two-Factor Authentication: phwil offers two-factor authentication (2FA) for player accounts, providing an additional layer of access security beyond the password.
- Regular Security Audits: phwil undergoes regular internal and third-party security assessments, including penetration testing, to identify and remediate vulnerabilities.
- Incident Response: phwil maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify you and the National Privacy Commission within the timeframes required under the DPA.
While phwil takes all reasonable and proportionate steps to protect your personal data, no data transmission or storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your phwil account credentials and for notifying phwil immediately if you suspect unauthorised access to your account.
10. Your Data Subject Rights
Under the Data Privacy Act of 2012, you hold the following rights with respect to the personal data phwil holds about you. You may exercise any of these rights by contacting our Data Protection Officer via the channels set out in Section 14.
Right to Be Informed
You have the right to be informed of the existence, nature, purpose, and extent of the processing of your personal data — which is the primary purpose of this Privacy Policy.
Right of Access
You have the right to request a copy of the personal data phwil holds about you, including information about how it is being processed, the categories of data held, and recipients to whom it has been disclosed.
Right to Correction / Rectification
If any personal data phwil holds about you is inaccurate or incomplete, you have the right to request its correction. You may update basic account information directly from your phwil Account Settings at any time.
Right to Erasure / Blocking
You have the right to request the deletion or blocking of your personal data where: it is no longer necessary for the purpose it was collected; you withdraw your consent and no other legal basis applies; or processing is unlawful. Note that data subject to legal retention obligations under AML law cannot be deleted during the mandatory retention period.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes, profiling, or processing based on legitimate interests. Where you object, phwil will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have it transmitted to another data controller where technically feasible and where processing is based on consent or contract.
Right to Damages
Where phwil's processing of your personal data causes you damage, you have the right to seek compensation in accordance with the provisions of the Data Privacy Act of 2012 and applicable Philippine law.
Right to Complain to the NPC
If you believe your data privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. We encourage you to contact phwil first so that we may attempt to resolve the matter directly.
To exercise any of the above rights, please contact our Data Protection Officer via the contact details in Section 14. We will respond to all data subject rights requests within 15 business days of receipt, in accordance with NPC guidelines.
11. Children & Minors
The phwil platform is strictly restricted to persons aged 21 years and above in accordance with Philippine gaming law. phwil does not knowingly collect personal data from any person under the age of 21. If phwil discovers that personal data has been collected from a minor, the relevant account will be immediately suspended, the data will be deleted, and any deposited funds will be returned.
If you are a parent or guardian and believe that a minor has registered an account or provided personal data to phwil, please contact us immediately via the channels in Section 14 so that we can take prompt action.
21+ Age Restriction. phwil collects date of birth as a mandatory field during registration and verifies player age through KYC documentation. The collection of personal data from any individual under 21 years of age is prohibited and will result in immediate account action.
12. Cross-Border Data Transfers
Where phwil engages third-party service providers located outside the Philippines for the purposes of KYC verification, fraud prevention, or analytics, personal data may be transferred to jurisdictions outside the Philippines. Such transfers are made only where:
- The recipient country provides an adequate level of data protection as assessed by the National Privacy Commission; or
- Appropriate safeguards are in place, such as contractual data processing agreements incorporating standard contractual clauses consistent with the DPA and NPC regulations; or
- The transfer is necessary for the performance of the contract between you and phwil (e.g., processing your GCash payment).
You may request further information about the safeguards applicable to cross-border transfers of your personal data by contacting our Data Protection Officer.
13. Changes to This Privacy Policy
phwil reserves the right to update or amend this Privacy Policy at any time to reflect changes in our processing activities, applicable law, or regulatory guidance from the National Privacy Commission. Material changes will be communicated to registered players via email to the address on their account prior to the changes taking effect, and a notice will be displayed on the phwil platform.
The effective date at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically. Your continued use of the phwil platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.
14. Contact & Complaints
For all matters relating to this Privacy Policy, your personal data, or the exercise of your data subject rights, please contact phwil's Data Protection Officer through the following channels:
- Email: [email protected] — Please include "Privacy Request" or "Data Subject Rights" in the subject line for priority routing.
- Live Chat: Available 24/7 on the phwil platform. For data rights requests, ask to be connected to a Compliance team member.
All requests will be acknowledged within 3 business days and responded to substantively within 15 business days, in accordance with NPC guidelines. If we require additional information to process your request or verify your identity, we will contact you promptly.
If you are not satisfied with phwil's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines at https://www.privacy.gov.ph.
End of Privacy Policy. By using phwil, you confirm that you have read and understood this Privacy Policy. This Policy was last updated on 1 January 2026. For the full Terms of Service, please visit our Terms & Conditions page.
Your Data is Safe at phwil
phwil is built for Filipino players who deserve a platform they can trust — with fast GCash payouts, fair games, and privacy protection that complies with Philippine law. Register today and start with a 100% welcome bonus up to ₱10,000. You must be 21 or older.
21+ Only. Gambling involves financial risk. Please play responsibly. · Responsible Gaming · Terms & Conditions