2winph Privacy Policy

01 Introduction

2winph ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered members, prospective members, and visitors to the 2winph website. This Privacy Policy has been prepared in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines (DPA), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC).

This Privacy Policy applies to all personal data collected, processed, stored, and shared by 2winph in connection with the operation of the 2winph online casino and sports betting platform, including all games, services, promotions, and customer support interactions offered through the platform.

By registering an account on 2winph or by continuing to use the platform after this Privacy Policy has been made available to you, you acknowledge that you have read and understood this policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not register an account or use the 2winph platform.

02 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, 2winph acts as the personal information controller (PIC) in respect of the personal data it collects and processes in connection with the operation of the 2winph platform.

As the personal information controller, 2winph determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable Philippine data privacy law and the principles of transparency, legitimate purpose, and proportionality.

03 Data We Collect

2winph collects the following categories of personal data in connection with the operation of the platform and the provision of services to members:

3.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you meet the 21+ age requirement)
• Residential address, including barangay, city or municipality, province, and postal code
• Email address
• Philippine mobile number
• Government-issued identification document number (e.g., PhilSys ID, passport, driver's licence, SSS/GSIS ID)

3.2 Financial and Transaction Data

• GCash or PayMaya mobile wallet number
• Bank account details (BPI, BDO, Metrobank) where provided for withdrawal purposes
• Deposit and withdrawal transaction history
• Account balance and bonus credit history

3.3 Gaming Activity Data

• Betting and wagering history across all games and sports markets
• Game session duration and frequency data
• Bonus and promotion usage records
• Responsible gaming tool settings and self-exclusion records

3.4 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session identifiers and authentication tokens
• Platform access logs and timestamps

3.5 Communications Data

• Records of communications between you and the 2winph support team, including live chat transcripts, email correspondence, and support ticket history
• Feedback, complaints, and dispute records

04 How We Collect Data

2winph collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Data collected automatically when you access and use the 2winph platform, including through cookies, session tracking, and server logs. See Section 8 for details on cookies and tracking technologies.
• Third-party sources: Data received from payment processors (GCash, PayMaya, BPI, BDO, Metrobank) in connection with transaction processing, and from identity verification service providers used to conduct KYC checks.
• Regulatory sources: Data received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine regulatory bodies in connection with compliance obligations.

05 How We Use Your Data

2winph processes your personal data for the following purposes:

• Account management: Creating, maintaining, and managing your 2 winph account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Service delivery: Processing deposits and withdrawals, crediting winnings, applying bonuses, and providing access to all games and betting markets available on the 2winph platform.
• Identity verification (KYC): Verifying that you meet the 21+ age requirement and confirming your identity in accordance with PAGCOR compliance requirements and anti-money laundering regulations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, bonus abuse, and other security threats to the platform and its members.
• Regulatory compliance: Meeting our obligations under Philippine gaming law, the Data Privacy Act of 2012, the Anti-Money Laundering Act, and PAGCOR regulatory directives, including mandatory reporting of suspicious transactions to the AMLC.
• Responsible gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling, administering responsible gaming tools such as deposit limits and self-exclusion, and complying with PAGCOR responsible gaming requirements.
• Customer support: Responding to your enquiries, resolving disputes, and providing assistance through the 2winph support team.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, features, and user experience of the 2winph platform.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may withdraw this consent at any time.

06 Legal Basis for Processing

Under the Data Privacy Act of 2012, 2winph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 2winph, including account registration, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with applicable Philippine law, including KYC verification, AML reporting obligations, PAGCOR regulatory requirements, and data retention mandates.
• Legitimate interests: Processing carried out for the legitimate interests of 2winph, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

07 Data Sharing

2winph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank receive transaction data necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.
• Identity verification providers: Third-party KYC service providers receive identity documents and personal data necessary to conduct identity verification checks on behalf of 2winph.
• Regulatory authorities: PAGCOR, the AMLC, the National Privacy Commission, and other Philippine regulatory and law enforcement bodies may receive personal data where required by applicable law, court order, or regulatory directive.
• Technology service providers: Cloud hosting, platform infrastructure, and cybersecurity service providers who process data on behalf of 2winph under data processing agreements that require them to maintain appropriate security and confidentiality standards.
• Professional advisers: Legal, accounting, and compliance advisers who require access to personal data in connection with the provision of professional services to 2winph, subject to professional confidentiality obligations.

08 Cookies & Tracking Technologies

The 2winph platform uses cookies and similar tracking technologies to operate the platform, enhance your experience, and support security and fraud prevention functions. The following types of cookies are used:

• Strictly necessary cookies: Essential for the operation of the platform, including session management, authentication, and security functions. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations, to provide a more personalised experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how members use the platform, enabling 2winph to identify areas for improvement. Individual users are not identified through analytics data.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorised access attempts, and bot activity on the platform.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the 2winph platform. 2winph does not use third-party advertising cookies or cross-site tracking technologies for behavioural advertising purposes.

09 Data Retention

2winph retains personal data for the periods required to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory retention obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and AML regulations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Gaming activity data: Retained for the duration of your account and for a minimum of three (3) years following account closure.
• Communications data: Support communications and dispute records are retained for a minimum of three (3) years from the date of the communication.
• Technical and access log data: Retained for a minimum of one (1) year for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 2winph's data disposal procedures, unless further retention is required by law or ongoing legal proceedings.

10 Data Security

2winph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 2winph platform
• Encryption of sensitive personal data and financial information stored on 2winph servers
• Multi-factor authentication options for member accounts
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security assessments, penetration testing, and vulnerability scanning of platform infrastructure
• Incident response procedures for detecting, reporting, and responding to personal data breaches in accordance with NPC notification requirements

11 Your Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by 2winph. To exercise any of these rights, please contact the 2winph support team as described in Section 15.

12 Children's Privacy

The 2winph platform is strictly intended for individuals who are at least twenty-one (21) years of age. 2winph does not knowingly collect personal data from persons under the age of 21. If 2winph becomes aware that personal data has been collected from a person under 21, such data will be deleted immediately and the associated account will be suspended in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that a minor has registered an account on 2winph or provided personal data to the platform, please contact the 2winph support team immediately so that appropriate action can be taken.

13 Cross-Border Data Transfers

In the course of operating the 2winph platform, your personal data may be transferred to, stored on, or processed by servers or service providers located outside the Republic of the Philippines. Where such cross-border transfers occur, 2winph ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers.

Such safeguards may include contractual data transfer agreements with receiving parties that impose data protection obligations equivalent to those applicable under Philippine law, or transfers to jurisdictions that have been assessed as providing an adequate level of data protection.

By using the 2winph platform and consenting to this Privacy Policy, you acknowledge and agree to the transfer of your personal data as described in this section.

14 Policy Updates

2winph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made to this Privacy Policy, 2winph will notify registered members by posting a notice on the platform or by sending an email to the address associated with your account.

The updated Privacy Policy will take effect on the date specified in the notice. Your continued use of the 2winph platform after the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. The date of the most recent revision is displayed at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how 2winph protects your personal data.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 2winph, please contact our Data Protection Officer and support team through the following channel:

For complaints that have not been resolved to your satisfaction through our internal process, you may escalate your complaint to the National Privacy Commission of the Philippines.