48phwin Privacy Policy

01 Introduction

48phwin ("the Platform," "we," "us," "our") is committed to protecting the privacy and personal data of all users who access or register on the 48phwin platform. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy applies to all personal data collected through the 48phwin website, mobile platform, customer support channels, and any other touchpoint through which you interact with 48phwin. By registering an account or using the 48phwin platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

If you do not agree with any part of this Privacy Policy, you must not use the 48phwin platform. For questions or concerns about how your data is handled, please refer to Section 13 (Contact & DPO) of this policy.

02 Personal Data We Collect

48phwin collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include:

Category	Examples	Purpose
Identity Data	Full name, date of birth, gender, nationality	Account registration, age verification, KYC compliance
Contact Data	Email address, mobile number, residential address	Account communication, OTP delivery, support
Verification Data	Government ID (passport, PhilSys ID, driver's license), selfie/photo	Identity verification, AML compliance, fraud prevention
Financial Data	GCash number, PayMaya account, bank account details, transaction history	Payment processing, withdrawal verification, AML monitoring
Gaming Data	Game history, wager amounts, win/loss records, session duration	Platform operation, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, browser, operating system, login timestamps	Security, fraud detection, platform optimization
Communications Data	Support chat logs, email correspondence, feedback submissions	Customer support, quality assurance, dispute resolution

We do not collect sensitive personal information (as defined under the Data Privacy Act) unless strictly required for regulatory compliance purposes, in which case we will obtain your explicit consent and apply heightened security measures.

03 How We Collect Your Data

48phwin collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the platform, including IP address, device identifiers, browser type, and session activity logs, via cookies and similar tracking technologies.
• Third-party sources: Identity verification data from KYC service providers; payment data from GCash, PayMaya, and banking partners; fraud signals from security service providers.
• Regulatory sources: Information received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other competent Philippine authorities in connection with regulatory compliance obligations.

04 How We Use Your Personal Data

48phwin uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your 48phwin account; verifying your identity and age; processing login and authentication.
• Service delivery: Processing deposits and withdrawals; providing access to games; crediting bonuses and promotional rewards; resolving disputes.
• Legal and regulatory compliance: Fulfilling obligations under the Data Privacy Act, PAGCOR regulations, Anti-Money Laundering Act (AMLA), and other applicable Philippine laws; responding to lawful requests from regulatory and law enforcement authorities.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, underage gambling, and other prohibited conduct.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behavior; administering self-exclusion and deposit limit tools; complying with PAGCOR responsible gaming requirements.
• Customer support: Responding to your enquiries, complaints, and feedback; maintaining records of support interactions.
• Platform improvement: Analyzing usage data to improve platform performance, game selection, and user experience — using aggregated, anonymized data where possible.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.

05 Legal Basis for Processing

Under the Data Privacy Act of 2012, 48phwin processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AMLA obligations, and NPC data protection requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing and Disclosure

48phwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: GCash, PayMaya, and Philippine banking partners, for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Third-party services that assist with identity verification and document authentication.
• Game providers: Software providers whose games are hosted on the 48phwin platform, to the extent necessary for game operation and dispute resolution.
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection service providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or regulatory direction.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

Where personal data is transferred to service providers located outside the Philippines, 48phwin ensures that appropriate safeguards are in place in accordance with NPC guidelines on cross-border data transfers.

07 Cookies and Tracking Technologies

48phwin uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that help us recognize you, maintain your session, and analyze platform usage.

The types of cookies we use include:

• Strictly necessary cookies: Essential for platform operation — including session management, login authentication, and security functions. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences (e.g., language, display settings) to provide a more personalized experience.
• Analytics cookies: Collect aggregated, anonymized data about how players use the platform, helping us identify areas for improvement. Used only with your consent.
• Marketing cookies: Used to deliver relevant promotional content to players who have opted in to marketing communications. Used only with your consent.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to use the 48phwin platform.

08 Data Retention

48phwin retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. Our general retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• Transaction and gaming records: Retained for a minimum of five (5) years from the date of the transaction, as required by PAGCOR and AMLA regulations.
• Support communications: Retained for three (3) years from the date of the interaction, or longer if relevant to an ongoing dispute or regulatory matter.
• Marketing data: Retained until you withdraw consent or request deletion, subject to any overriding legal retention obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC guidelines.

09 Data Security

48phwin implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the 48phwin platform
• Encryption of sensitive data at rest, including financial data and identity documents
• Multi-factor authentication (MFA) for account access and administrative systems
• Regular security audits, vulnerability assessments, and penetration testing
• Strict access controls limiting personal data access to authorized personnel on a need-to-know basis
• Staff training on data protection obligations and security best practices

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 48phwin will notify the National Privacy Commission and affected players in accordance with NPC Circular No. 16-03 on Personal Data Breach Management.

10 Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 48phwin:

• Right to be informed: The right to know what personal data we collect, how we use it, and with whom we share it — as described in this Privacy Policy.
• Right to access: The right to request a copy of the personal data we hold about you, including information on how it has been processed.
• Right to correction: The right to request correction of inaccurate, incomplete, or outdated personal data in your 48phwin account.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format, where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13. We will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

11 Children's Privacy

The 48phwin platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from an underage individual, we will immediately suspend the associated account and delete the personal data in question.

If you are a parent or guardian and believe that a minor has registered on the 48phwin platform, please contact our support team immediately so that we can take appropriate action.

12 Changes to This Privacy Policy

48phwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via the email address or mobile number on file, or by prominent notice on the platform, at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how 48phwin protects your personal data. Your continued use of the platform following any amendment constitutes your acceptance of the revised Privacy Policy.

13 Contact and Data Protection Officer

48phwin has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact us:

• Data Protection Officer: 48phwin DPO Office
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the 48phwin platform
• Response Time: Within 15 business days for data subject requests; within 24 hours for general enquiries

If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.