phw999 Privacy Policy

Welcome to phw999. This Privacy Policy ("Policy") describes how phw999 ("phw999," "we," "our," or "us") collects, processes, uses, stores, and protects the personal information of individuals ("you," "your," or "Player") who access or use the phw999 online gaming platform available at phw999.com, including all games, features, services, and promotions offered therein.

phw999 is committed to safeguarding the privacy and personal data of all Filipino players and is fully compliant with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

This Policy is incorporated into and forms part of phw999's Terms & Conditions. By registering an account or using the phw999 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use of the platform and do not register an account.

For the purposes of the Philippine Data Privacy Act of 2012 and this Privacy Policy, the personal information controller responsible for your data is:

• Platform Name: phw999
• Website: phw999.com
• Data Protection Officer (DPO) Contact: [email protected]
• Regulatory Context: phw999 operates within the PAGCOR regulatory framework applicable to online gaming platforms serving the Philippine market.

phw999 has designated a Data Protection Officer (DPO) in accordance with RA 10173 and NPC regulations. The DPO is responsible for overseeing phw999's data protection practices and serving as the point of contact for all privacy-related inquiries, complaints, and data subject requests. You may contact the DPO directly at [email protected].

phw999 collects only the personal data necessary for the legitimate operation of its platform, the fulfilment of legal obligations, and the delivery of a high-quality gaming experience. The categories of personal data we collect are as follows:

phw999 collects personal data through the following channels and methods:

• Account Registration: When you complete the phw999 registration form, you provide identity, contact, and profile information directly to us.
• KYC Submission: When you undergo identity verification prior to withdrawal, you upload copies of your government ID, selfie, and supporting documents through our secure upload portal.
• Financial Transactions: When you make a deposit or withdrawal via GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, USDT TRC20, or Coins.ph, transaction details are captured and associated with your account.
• Platform Usage: As you browse and play on phw999, technical and gaming activity data is automatically recorded by our platform systems and analytics tools.
• Cookies and Tracking Technologies: Our website uses cookies, web beacons, and similar tracking technologies to recognize your device and improve your experience. Full details are in Section 09 of this Policy.
• Customer Support Interactions: When you contact our support team via live chat or email, we record the content of those communications for quality assurance and compliance purposes.
• Third-Party Verification Services: phw999 may receive data from identity verification and fraud prevention service providers as part of our KYC and AML compliance processes.

phw999 processes your personal data only for specific, legitimate purposes and on an established legal basis under the Philippine Data Privacy Act of 2012. The following table outlines our processing purposes and the applicable legal basis for each:

• Account Creation and Management: To create and maintain your phw999 player account, verify your identity, and provide access to the platform. Legal basis: Contractual necessity.
• Identity Verification (KYC): To verify that you meet the eligibility requirements under Philippine gaming regulations, including the 21+ age requirement and identity confirmation. Legal basis: Legal obligation and legitimate interest.
• Payment Processing: To process deposits, withdrawals, and related financial transactions via your chosen payment method. Legal basis: Contractual necessity.
• Anti-Money Laundering (AML) Compliance: To monitor transactions and player behaviour in accordance with the Philippine Anti-Money Laundering Act (AMLA) and PAGCOR guidelines. Legal basis: Legal obligation.
• Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent activity, account takeovers, collusion, and other prohibited conduct. Legal basis: Legitimate interest.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, administer self-exclusion and deposit limit tools, and fulfil our duty of care to players. Legal basis: Legal obligation and legitimate interest.
• Customer Support: To respond to your queries, resolve disputes, and manage complaints efficiently. Legal basis: Contractual necessity and legitimate interest.
• Marketing and Promotions: To send you personalised bonus offers, promotional newsletters, and platform updates — but only where you have opted in to receive marketing communications. Legal basis: Consent (opt-in only).
• Platform Improvement: To analyse aggregated usage data and improve the features, performance, and user experience of the phw999 platform. Legal basis: Legitimate interest.

phw999 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: We share necessary financial and identity data with payment service providers such as GCash (Mynt), Maya (Voyager), BPI, BDO, and UnionBank to facilitate transaction processing. These providers handle your data in accordance with their own privacy policies and applicable Philippine financial regulations.
• Identity Verification Providers: We engage accredited KYC and identity verification service providers to assist in validating your identity and documents. These providers are contractually bound to process data solely for the purposes of identity verification and fraud prevention.
• Regulatory Authorities: phw999 is legally obligated to disclose certain player information and transaction records to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities upon lawful request or as mandated by applicable law.
• Fraud Prevention and Security Partners: We may share limited technical data (such as device fingerprints and IP addresses) with fraud detection and cybersecurity service providers for the purpose of protecting the platform and its players from fraudulent activity.
• Game Software Providers: Our third-party game suppliers may receive anonymised or pseudonymised gameplay data for the purpose of game performance monitoring, RNG certification, and audit compliance. No directly identifiable personal information is shared with game providers without a clear legal basis.
• Professional Advisors: phw999 may share data with legal, financial, or compliance advisors under strict confidentiality obligations, where necessary to obtain professional advice or to manage legal proceedings.

phw999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply:

• Active Account Data: Retained for the duration of your account's active status, plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Philippine Anti-Money Laundering Act and PAGCOR guidelines.
• KYC and Identity Verification Documents: Retained for the duration of the account relationship plus five (5) years, or longer if required by a regulatory directive.
• Customer Support Records: Retained for a period of two (2) years from the date of the last interaction, unless the subject matter is related to an ongoing dispute or legal proceeding, in which case records are retained until resolution.
• Marketing Consent Records: Retained for as long as you hold an active account, or until you withdraw consent, whichever occurs first. Proof of consent is retained for the period required by applicable data protection regulations.
• Technical and Log Data: Retained for a rolling period of twelve (12) months, after which it is anonymised or deleted, unless required for ongoing fraud investigations or legal proceedings.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual. phw999 maintains a data retention schedule that is reviewed and updated periodically in line with applicable law.

phw999 implements a comprehensive suite of technical, organisational, and physical security measures designed to protect your personal data against unauthorised access, disclosure, alteration, destruction, or accidental loss. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and phw999's servers is protected using TLS 1.3 (Transport Layer Security), ensuring that your personal and financial data cannot be intercepted during transmission.
• Encryption at Rest: Personal data stored on phw999 servers is encrypted using AES-256 encryption. KYC documents and financial records receive additional encryption layers.
• Access Controls: Access to personal data is strictly limited to phw999 personnel and authorised third parties who have a legitimate need for access. All access is role-based, logged, and subject to regular review.
• Two-Factor Authentication (2FA): phw999 offers SMS OTP-based 2FA for all player accounts and mandates 2FA for all internal staff access to systems containing personal data.
• Penetration Testing: phw999's platform undergoes regular security audits and penetration tests conducted by independent cybersecurity professionals to identify and remediate vulnerabilities.
• Intrusion Detection: Our infrastructure is protected by 24/7 automated intrusion detection and prevention systems that monitor for suspicious access patterns and anomalous activity.
• Staff Training: All phw999 employees who handle personal data receive regular data privacy and security training in accordance with NPC requirements under RA 10173.
• Vendor Due Diligence: All third-party processors and service providers engaged by phw999 are subject to rigorous data privacy assessments and are contractually bound by data processing agreements that require them to maintain equivalent security standards.

phw999 uses cookies and similar tracking technologies on the phw999.com website to enhance functionality, improve user experience, support security measures, and — where you have consented — analyse platform usage patterns. A cookie is a small text file placed on your device when you visit a website.

You can manage your cookie preferences at any time through the cookie settings panel accessible from the footer of phw999.com, or by adjusting your browser settings to block or delete cookies. Please note that disabling strictly necessary cookies may impair the functionality of the platform and prevent you from logging in or completing transactions.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by phw999. phw999 is committed to honouring these rights promptly and without undue bureaucracy:

To exercise any of the above rights, submit a written request to phw999's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." phw999 will acknowledge your request within three (3) business days and aim to fulfil it within fifteen (15) business days, or within the timeframe prescribed by the NPC where a longer period is permitted.

phw999 strictly prohibits access to and use of its online gaming platform by individuals under the age of 21 years old, in accordance with Philippine gaming regulations applicable to casino-style gambling. This age restriction is a non-negotiable condition of platform access.

• Age Verification: phw999 collects date of birth at registration and verifies age through our mandatory KYC process. Accounts where the holder cannot be confirmed as aged 21 or above will be suspended pending verification, and permanently closed if verification fails.
• No Data Collection from Minors: phw999 does not knowingly collect personal data from individuals under the age of 21. If we discover that a minor has registered or provided personal data, we will immediately suspend the account, delete the associated data to the extent permitted by law, and report the matter to the appropriate authorities where required.
• Parental Controls: Parents or guardians who believe a minor is accessing phw999 should contact us immediately at [email protected]. phw999 will investigate and take appropriate action as a matter of urgency.

In some circumstances, the operation of the phw999 platform may require the transfer of your personal data to countries or jurisdictions outside the Philippines — for example, in connection with cloud infrastructure, game software providers, or fraud prevention services with international operations.

Where such cross-border transfers occur, phw999 ensures that your personal data receives an equivalent level of protection to that required under RA 10173 by applying the following safeguards:

• Adequacy Assessment: Before transferring data to a third country, phw999 assesses whether that country offers an adequate level of data protection under NPC guidelines.
• Contractual Protections: Where adequacy cannot be confirmed, phw999 enters into data processing agreements that include standard contractual clauses approved by the NPC or equivalent authorities, binding the recipient to appropriate data protection obligations.
• Minimisation: Cross-border data transfers are limited to the minimum data necessary for the stated purpose, and personal data is anonymised or pseudonymised where technically feasible prior to transfer.
• Notification: Where required by RA 10173, phw999 will inform you of any cross-border transfer of your personal data and the safeguards in place, upon your request.

Despite phw999's comprehensive security measures, no system is entirely immune to security incidents. In the event of a personal data breach that poses a real risk of serious harm to affected players, phw999 has established a formal breach response protocol:

• Internal Detection and Containment: Upon discovery of a potential breach, phw999's security team immediately initiates containment procedures to limit the scope and impact of the incident and to preserve evidence for investigation.
• NPC Notification: In accordance with NPC Circular No. 16-03, phw999 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of a notifiable breach, providing details of the nature of the breach, the data affected, and the remedial measures taken.
• Player Notification: Where a breach is likely to result in a real risk of harm to affected players, phw999 will notify those players as soon as practicable, providing clear information about what happened, what data was affected, and what steps they should take to protect themselves.
• Post-Incident Review: Following resolution of any breach incident, phw999 conducts a thorough post-incident review to identify root causes, assess the effectiveness of the response, and implement any necessary improvements to prevent recurrence.

phw999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC regulations, PAGCOR guidelines, our data processing practices, or improvements to our platform. All amendments will be effective from the date the revised Policy is published on phw999.com.

• Notification of Material Changes: When we make material changes to this Policy — for example, changes that expand the categories of data we collect or introduce new purposes of processing — we will notify registered players by email and/or a prominent notice on the phw999.com homepage at least seven (7) days before the changes take effect.
• Continued Use Constitutes Acceptance: Your continued use of the phw999 platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not accept the revised Policy, you must cease using the platform and may request account closure.
• Version History: The "Last Updated" date at the top of this page indicates the most recent revision. We encourage you to review this Policy periodically to stay informed about how phw999 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way phw999 processes your personal data, you are welcome to reach out to our team at any time. Our Data Protection Officer (DPO) is available to assist with all data privacy matters.

• DPO Email: [email protected] (use subject line "Data Privacy Request" for formal requests)
• Support Availability: 24 hours a day, 7 days a week — including Philippine public holidays
• Live Chat: Available directly within the phw999 platform after login — look for the chat icon in the bottom-right corner
• Languages Supported: English and Filipino (Tagalog) — our team serves players from Manila, Cebu, Davao, Quezon City, Makati, and all across the Philippines
• National Privacy Commission (NPC): If you are not satisfied with phw999's response to your privacy concern, you have the right to lodge a complaint directly with the NPC of the Philippines at privacy.gov.ph