Privacy Policy — lawinph

1. Who We Are and How to Contact Us

lawinph is an online gaming platform operated in accordance with Philippine gaming regulations, providing Filipino players with access to sports betting, live casino games, slots, bingo, sabong, and specialty games including Multi Bet and Dragon Fortune. lawinph is the data controller responsible for the personal data of all registered players and visitors to the lawinph Platform.

For all privacy-related inquiries, requests, or complaints, you may contact our Data Privacy Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 on the lawinph Platform (Philippine Standard Time)

lawinph is committed to responding to all privacy-related inquiries within fifteen (15) business days of receipt.

2. Personal Data We Collect

In the course of providing the lawinph Platform and its associated services to Filipino players, we collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., Philippine passport, SSS, UMID, or driver's licence number) as required for identity and age verification.
• Contact Data: Philippine mobile number, email address, and residential address (including city, province, and postal code).
• Account Data: Username, encrypted password, account preferences, communication preferences, and responsible gaming settings.
• Financial Data: Payment method details (e.g., GCash account number, PayMaya account, BPI, BDO, or Metrobank account details), transaction history, deposit and withdrawal records, and account balance information.
• Gaming Data: Betting history, game participation records, wagering patterns, bonus usage, and session duration data.
• Technical Data: IP address, device type, operating system, browser type and version, time zone, and other technical identifiers collected automatically when you access the lawinph Platform.
• Usage Data: Information about how you navigate and interact with the lawinph Platform, including pages visited, features used, links clicked, and time spent on each section.
• Communications Data: Records of your communications with lawinph's customer support team, including live chat transcripts, email correspondence, and any feedback or complaints submitted.
• Verification Data: Copies of identity documents, selfies, or other materials submitted to lawinph for the purpose of Know Your Customer (KYC) verification.

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required by applicable Philippine law or regulation (for example, in the context of responsible gaming assessments).

3. How We Collect Your Data

lawinph collects personal data through the following means:

• Direct Interactions: Data you provide when registering a lawinph account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technologies: Data collected automatically through cookies, web beacons, pixel tags, and similar tracking technologies when you access or use the lawinph Platform. See Section 7 for more details on our use of cookies.
• Third-Party Sources: Data received from identity verification service providers, payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), fraud prevention agencies, and Philippine regulatory authorities where permitted by law.
• Gaming Activity: Data generated automatically as a result of your participation in games, sports betting, and other activities on the lawinph Platform.

4. How We Use Your Personal Data

lawinph uses the personal data we collect for the following purposes:

• Account Management: To register and maintain your lawinph account, verify your identity and age, and manage your account preferences and settings.
• Service Delivery: To provide you with access to all games, betting markets, and features available on the lawinph Platform, and to process your deposits, withdrawals, and bonus claims.
• Legal and Regulatory Compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and reporting obligations to Philippine gaming regulatory authorities.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling, to enforce responsible gaming limits you have set, and to administer self-exclusion requests in accordance with our Responsible Gaming Policy.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the lawinph Platform.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through lawinph's 24/7 support channels.
• Marketing and Promotions: To send you information about lawinph promotions, bonuses, and new features that may be of interest to you, where you have consented to receive such communications. You may opt out of marketing communications at any time through your account settings.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the features, performance, and user experience of the lawinph Platform.
• Legal Claims: To establish, exercise, or defend legal claims arising in connection with your use of the lawinph Platform.

5. Legal Bases for Processing

lawinph processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and lawinph (i.e., the Terms & Conditions), including account registration, game participation, and payment processing.
• Legal Obligation: Processing is necessary for lawinph to comply with applicable Philippine laws and regulations, including AML, KYC, and gaming regulatory requirements.
• Legitimate Interests: Processing is necessary for lawinph's legitimate interests, including fraud prevention, platform security, and service improvement, provided that such interests are not overridden by your rights and interests.
• Consent: Where lawinph relies on your consent as the legal basis for processing (for example, for direct marketing communications), you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing and Disclosure of Personal Data

lawinph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors, solely for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged by lawinph to verify the identity and age of registered players.
• Fraud Prevention and Security Agencies: Third-party fraud detection and prevention service providers who assist lawinph in identifying and preventing fraudulent activity on the Platform.
• Technology and Infrastructure Providers: Cloud hosting, data storage, and IT service providers who process data on lawinph's behalf under strict data processing agreements.
• Philippine Regulatory Authorities: Government agencies and regulatory bodies, including Philippine gaming regulators and law enforcement authorities, where disclosure is required by law, court order, or regulatory directive.
• Professional Advisers: Lawyers, auditors, and other professional advisers engaged by lawinph in connection with legal, compliance, or financial matters, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of lawinph's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third parties with whom lawinph shares personal data are required to maintain the confidentiality and security of that data and to use it only for the specific purposes for which it was shared.

7. Cookies and Tracking Technologies

lawinph uses cookies and similar tracking technologies to enhance your experience on the Platform, to remember your preferences, and to collect usage data for analytics and security purposes. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the operation of the lawinph Platform, including session management, authentication, and security. These cookies cannot be disabled.
• Functional Cookies: Used to remember your preferences and settings, such as your preferred language, display settings, and responsible gaming limits.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the lawinph Platform, helping us identify areas for improvement and optimise the user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and other security threats on the lawinph Platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the lawinph Platform. For more information on managing cookies, refer to your browser's help documentation.

8. Data Retention

lawinph retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. Specifically:

• Account Data: Retained for the duration of your lawinph account and for a period of at least five (5) years following account closure, in accordance with Philippine AML and gaming regulatory requirements.
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine financial regulations.
• KYC and Verification Data: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification process.
• Gaming Activity Data: Retained for a minimum of three (3) years from the date of the relevant gaming activity.
• Communications Data: Retained for a period of two (2) years from the date of the communication, unless a longer retention period is required for legal or dispute resolution purposes.
• Self-Exclusion Records: Retained indefinitely to ensure that self-exclusion requests are honoured and to prevent re-registration by excluded players.

When personal data is no longer required for the purposes described above, lawinph will securely delete or anonymise it in accordance with our data retention and disposal procedures.

9. Data Security

lawinph implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Industry-standard SSL/TLS encryption for all data transmitted between your device and the lawinph Platform.
• Encryption of sensitive data at rest, including financial data and identity verification documents.
• Multi-factor authentication options for player accounts to prevent unauthorised access.
• Regular security audits, vulnerability assessments, and penetration testing of the lawinph Platform and infrastructure.
• Strict access controls limiting employee access to personal data on a need-to-know basis.
• Comprehensive staff training on data protection and information security best practices.
• Incident response procedures to detect, contain, and report data breaches in accordance with applicable Philippine law.

While lawinph takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your lawinph account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

10. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by lawinph:

• Right to Be Informed: You have the right to be informed of how your personal data is being collected, processed, and used by lawinph, as described in this Privacy Policy.
• Right to Access: You have the right to request a copy of the personal data that lawinph holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request the correction of any inaccurate, incomplete, or outdated personal data that lawinph holds about you.
• Right to Erasure or Blocking: You have the right to request the deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, or where processing is unlawful, subject to lawinph's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on lawinph's legitimate interests, on grounds relating to your particular situation.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that lawinph has processed your personal data in violation of the Data Privacy Act.

To exercise any of the rights described above, please contact lawinph's Data Privacy Officer at [email protected]. We will respond to all verified data subject requests within fifteen (15) business days. lawinph may request proof of identity before processing any data subject request to ensure the security of your personal data.

11. Children's Privacy and Age Restriction

The lawinph Platform is strictly intended for use by individuals who are 21 years of age or older, in accordance with Philippine gaming regulations applicable to casino-style online gaming. lawinph does not knowingly collect, process, or retain personal data from individuals under the age of 21.

During the registration process, all applicants are required to confirm their date of birth and to submit government-issued identity documents for age verification. Any account found to belong to a person under 21 years of age will be immediately suspended, all associated data will be securely deleted, and any deposits made will be returned to the originating payment method.

If you believe that lawinph has inadvertently collected personal data from a person under the age of 21, please contact our Data Privacy Officer immediately at [email protected] so that we can take prompt corrective action.

12. Cross-Border Data Transfers

lawinph primarily stores and processes personal data within the Philippines. In certain circumstances, it may be necessary to transfer your personal data to service providers or partners located outside the Philippines — for example, cloud infrastructure providers or international fraud prevention agencies.

Where such cross-border transfers occur, lawinph ensures that appropriate safeguards are in place to protect your personal data in accordance with the requirements of the Philippine Data Privacy Act and the regulations of the National Privacy Commission. These safeguards may include contractual data protection clauses, adequacy assessments, or other mechanisms recognised under Philippine law.

By using the lawinph Platform, you acknowledge and consent to the transfer of your personal data outside the Philippines where necessary for the purposes described in this Privacy Policy, subject to the safeguards described above.

13. Changes to This Privacy Policy

lawinph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When we make material changes to this Policy, we will notify registered players by posting a prominent notice on the lawinph Platform and, where practicable, by sending a notification to your registered email address or Philippine mobile number.

The updated Privacy Policy will take effect on the date specified in the notice. Your continued use of the lawinph Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment and acceptance of the updated terms. We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this page reflects the most recent revision.

14. Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way lawinph handles your personal data, please contact our Data Privacy Officer:

• Email: [email protected]
• Live Chat: Available 24/7 on the lawinph Platform (Philippine Standard Time)

If you are not satisfied with lawinph's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012. Information about how to file a complaint with the NPC is available through official Philippine government channels.

lawinph is committed to working constructively with all players and with the NPC to resolve any privacy concerns promptly and fairly.