This Privacy Policy explains how phwagi ("we", "us", "our") collects, uses, stores, and protects the personal information you provide when using phwagi.net and all associated services. By creating a phwagi account or using any part of the platform, you agree to the practices described here. Please read this alongside our Terms and Conditions.
Section 01
1. Overview – Why Privacy Matters to phwagi
Filipinos share a lot of personal information online every day — with banks, e-wallets, delivery apps, and gaming platforms. We get it. Trusting a platform with your name, your mobile number, your GCash details — that's not something you do casually. At phwagi, we take that trust seriously.
This Privacy Policy is not just a legal requirement for phwagi — it's a commitment. We collect only what we actually need, we protect it properly, and we never sell it to third parties. Your data exists on phwagi to make your gaming experience safer, more personalised, and compliant with Philippine regulations. That's it.
phwagi operates in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. We are registered with the National Privacy Commission (NPC) as required by Philippine law.
phwagi protects your personal data at every step.
Section 02
2. What Personal Information We Collect
phwagi collects personal information in several ways — directly from you when you register and use the platform, and automatically as you interact with our services. Here's a breakdown of the specific data we collect.
| Category | Specific Data Points | How Collected |
|---|---|---|
| Identity Data | Full name, date of birth, government ID type and number | Registration form, KYC verification |
| Contact Data | Mobile number, email address, residential address | Registration form |
| Financial Data | GCash/Maya account reference, bank account details (for payouts), transaction history | Deposit/withdrawal process |
| Gaming Data | Game history, bets placed, wins and losses, session duration | Automatically during gameplay |
| Technical Data | IP address, device type, browser, operating system, session logs | Automatically via cookies and server logs |
| Communications Data | Live chat transcripts, support emails, feedback submissions | When you contact phwagi support |
We do not collect: Biometric data (face scans, fingerprints), sensitive personal information beyond what is required for identity verification, or any data from minors. phwagi never collects your full credit/debit card number — payment processing is handled by your e-wallet or bank directly.
Section 03
3. How phwagi Uses Your Personal Data
We use the data we collect for specific, legitimate purposes. Here is a plain-language explanation of what each type of data is actually used for on phwagi.
Account Management
Your identity and contact data are used to create and manage your phwagi account, verify your age and identity, process login and security requests, and communicate important account updates to you.
Processing Transactions
Financial data is used to process your deposits and withdrawals securely, reconcile transactions, investigate payment disputes, and comply with anti-money laundering (AML) obligations under Philippine law.
Improving the Platform
Gaming data and technical data help phwagi understand how players use the platform, identify bugs and performance issues, and develop features that actually matter to Filipino players — not generic global audiences.
Responsible Gaming
phwagi analyses gaming behaviour data to identify patterns that may indicate problem gambling. This allows us to proactively reach out to players who may benefit from responsible gaming tools, in line with our duty of care.
Security and Fraud Prevention
Technical data, financial data, and gaming data are used to detect suspicious activity, prevent unauthorised account access, investigate fraud, and comply with regulatory reporting requirements.
Marketing Communications
With your consent, phwagi may send you promotional offers, event notifications, and bonus alerts via email or SMS. You can opt out of marketing communications at any time through your account settings or by contacting support.
phwagi does not use your personal data to make automated decisions that significantly affect you without human review. Responsible gaming flags are reviewed by our support team, not actioned by algorithm alone.
Section 04
4. Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, phwagi processes your personal data based on the following legal grounds:
- Contractual necessity: Processing your identity, contact, and financial data is necessary to create and maintain your phwagi account, process bets, and pay out winnings. Without this, we simply can't provide the service.
- Legal obligation: Philippine gaming regulations and anti-money laundering laws require phwagi to collect and verify identity information, maintain transaction records, and report suspicious activity to the relevant authorities.
- Legitimate interests: phwagi processes technical and gaming data to keep the platform secure, prevent fraud, and improve service quality. These interests do not override your rights.
- Consent: Where we send marketing communications or use cookies beyond what is strictly necessary, we rely on your explicit consent. You can withdraw consent at any time.
Section 05
5. Who We Share Your Data With
phwagi does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Full stop. Here are the limited circumstances where your data may be shared:
- Payment processors: GCash, Maya, GrabPay, Coins.ph, InstaPay/PESONet, and partner banks receive transaction-level data necessary to process your deposits and withdrawals. These providers have their own privacy policies.
- Identity verification providers: Third-party KYC (Know Your Customer) service providers may receive your ID documents and personal details for verification purposes. These partners are contractually bound to handle your data securely.
- Gaming and technology providers: Software providers powering specific game categories on phwagi may receive anonymised game performance data for technical purposes.
- Regulatory and law enforcement authorities: phwagi is required to share data with the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), and law enforcement agencies when legally required to do so.
- Professional advisers: phwagi's legal, audit, and compliance advisers may access account and transaction data under strict confidentiality obligations.
Your data stays within phwagi's trusted circle only.
Section 06
6. How Long We Keep Your Data
phwagi does not keep your data longer than necessary. Here is our standard retention schedule:
- Account and identity data: Kept for the duration of your account's active status, plus five (5) years after account closure. This is required by Philippine AML regulations.
- Transaction records: Retained for five (5) years from the date of each transaction, as required by law.
- Gaming history: Retained for three (3) years from the date of gameplay. Anonymised, aggregated data may be kept longer for analytics purposes.
- Support communications: Kept for two (2) years from the date of the interaction.
- Marketing consent records: Kept until you withdraw consent or close your account, whichever comes first.
- Technical/log data: Retained for up to twelve (12) months, then deleted or anonymised.
When data reaches the end of its retention period, phwagi securely deletes or anonymises it so it can no longer be linked back to you.
Section 07
7. How We Protect Your Data
phwagi takes data security seriously — not just because the law requires it, but because Filipino players deserve a platform they can trust. Here is what we actually do to protect your information.
End-to-End Encryption
All data transmitted between your device and phwagi servers is encrypted using TLS 1.2 or higher. Your payment details never travel in plain text.
Secure Data Storage
Personal data is stored on secured servers with restricted access. Database access is logged and audited. Sensitive fields such as passwords are hashed — even phwagi staff cannot read your password.
Access Controls
Only authorised phwagi personnel with a legitimate business need can access personal data. Access is role-based and logged. All staff with data access undergo privacy training.
Regular Security Audits
phwagi conducts periodic vulnerability assessments and penetration tests. Any identified risks are addressed promptly according to a prioritised remediation process.
Your role in security: phwagi's security measures protect the platform, but your account security also depends on you. Use a strong, unique password. Never share your login details. Contact phwagi support immediately if you suspect unauthorised access to your account.
Section 08
8. Cookies and Tracking Technologies
phwagi uses cookies to deliver a smooth, personalised experience.
phwagi uses cookies and similar technologies (like local storage) to make the platform work properly and to understand how players use it. Here's what we use and why.
-
Strictly necessary cookies: These are required for the platform to function. They manage your login session, remember your preferences within a session, and keep your account secure. You cannot opt out of these without breaking the site.
-
Functional cookies: These remember your language settings, preferred game categories, and display preferences so you don't have to reset them every time you visit phwagi.
-
Analytics cookies: phwagi uses anonymised analytics to understand which pages and features players find most useful. This data is aggregated and never tied to individual identities.
-
Session security tokens: Short-lived tokens that protect your session from CSRF (Cross-Site Request Forgery) attacks. These expire automatically when you log out or close your browser.
You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent phwagi from functioning correctly. For analytics cookies, you can withdraw consent at any time by contacting phwagi support.
Section 09
9. Your Data Rights Under Philippine Law
Under the Data Privacy Act of 2012, you have the following rights regarding your personal data held by phwagi. These are real rights — not just buzzwords — and phwagi will action them promptly upon verified request.
Right to Be Informed
You have the right to know what personal data phwagi holds about you, how it is used, and who it is shared with. This Privacy Policy is part of how we fulfil that right.
Right to Access
You can request a copy of the personal data phwagi holds about you. We will provide it in a readable format within 30 days of a verified request.
Right to Rectification
If any of your personal data is inaccurate or outdated, you have the right to have it corrected. Contact phwagi support to request an update.
Right to Erasure
You may request deletion of your personal data in certain circumstances — for example, if it is no longer necessary for the purpose it was collected. Note that legal retention requirements may limit this right.
Right to Object
You can object to phwagi processing your data for direct marketing purposes at any time. You can also object to processing based on legitimate interests, though phwagi may have overriding grounds.
Right to Data Portability
You have the right to receive a copy of your personal data in a structured, commonly used format and to transmit it to another controller where technically feasible.
Right to Restrict Processing
In certain situations — such as while a complaint is being investigated — you can request that phwagi restrict how your data is processed.
Right to Complain
If you believe phwagi has mishandled your personal data, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
To exercise any of these rights, contact phwagi's Data Protection Officer at privacy@phwagi.net. We may need to verify your identity before processing the request. We will respond within 30 days.
Section 10
10. Minors and Age Restrictions
phwagi is strictly an adults-only platform. Registration is limited to individuals aged 21 and above, in accordance with Philippine gaming regulations. phwagi does not knowingly collect personal data from anyone under the age of 21.
If phwagi becomes aware that a person under 21 has created an account or provided personal data, we will immediately suspend the account, delete the personal data, and, where required, report the incident to the relevant authorities. Parents or guardians who believe a minor may have accessed phwagi should contact us immediately at support@phwagi.net.
Section 11
11. Cross-Border Data Transfers
phwagi primarily stores and processes your personal data within the Philippines. In some cases — particularly with respect to cloud infrastructure and certain technology partners — data may be processed in servers located outside the Philippines.
Whenever phwagi transfers personal data outside the Philippines, we ensure that appropriate safeguards are in place, including data processing agreements with the receiving parties that impose equivalent data protection standards. We do not transfer personal data to countries or entities that do not provide adequate protection.
Section 12
12. Changes to This Privacy Policy
phwagi may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email or through a notice on the phwagi platform at least seven (7) days before the changes take effect.
The current version of the Privacy Policy is always accessible at phwagi.net/privacy-policy and includes the effective date of the most recent revision. Continuing to use phwagi after a policy update takes effect constitutes your acceptance of the revised policy.
If you disagree with any changes, you may close your account before the updated policy takes effect. Contact phwagi support to initiate account closure and arrange the return of any balance.
Section 13
13. Contact Our Data Protection Officer
phwagi has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. If you have any questions, concerns, or requests related to your personal data, you can reach us through the following channels.
Email the DPO
privacy@phwagi.net
For data subject rights requests and privacy complaints. We respond within 30 days.
Live Chat
Available 24/7 from your phwagi account. For general privacy questions, our support team can assist directly or escalate to the DPO as needed.
General Support
support@phwagi.net
For account-related queries or general platform concerns that may involve personal data.
If you are not satisfied with how phwagi handles your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the government authority responsible for administering and implementing the Data Privacy Act of 2012.