lawinph Privacy Policy

1. Introduction and Data Controller

This Privacy Policy applies to all personal data processed by lawinph in connection with the lawinph online gaming platform available at lawinph.app (the "Platform"). For the purposes of the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, lawinph is the Personal Information Controller with respect to your personal data.

lawinph is a PAGCOR-regulated online gaming platform operating under Philippine law and subject to oversight by the Philippine Amusement and Gaming Corporation (PAGCOR) and the National Privacy Commission (NPC). By registering on or using the lawinph Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

If you do not agree to this Privacy Policy, you must not register on or use the lawinph Platform. Questions or concerns regarding this Policy may be directed to our Data Protection Officer at the contact details provided in Section 12.

2. Personal Data We Collect

lawinph collects the following categories of personal data in connection with your use of the Platform:

2.1 Identity and Contact Data

• Full legal name as it appears on government-issued identification;
• Date of birth and age verification documents;
• Philippine mobile number (used as primary account identifier);
• Email address;
• Residential address (province, city, barangay);
• Government-issued identification number (e.g., PhilSys ID, Passport, Driver's Licence, SSS/GSIS number).

2.2 Financial Data

• GCash or PayMaya account numbers linked to your lawinph wallet;
• Bank account details for BPI, BDO, Metrobank, or other linked banks;
• Transaction history including deposit and withdrawal records;
• Bonus and promotional activity records.

2.3 Technical and Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session logs including login times, game history, and betting activity;
• Cookies and similar tracking data (see Section 8).

2.4 Communications Data

• Records of your communications with lawinph customer support;
• Survey responses, feedback, and promotional opt-in preferences.

3. How We Collect Your Data

lawinph collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server logs;
• Third-party sources: Identity verification services, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection providers, and PAGCOR regulatory databases where applicable;
• Anti-Money Laundering monitoring: Transaction data processed through AMLA-mandated monitoring systems in compliance with Republic Act No. 9160, as amended.

4. Purposes and Legal Basis for Processing

lawinph processes your personal data for the following purposes and on the following legal bases under the Data Privacy Act of 2012:

• Account registration and management — necessary for the performance of the contract between you and lawinph;
• Age and identity verification (KYC) — compliance with PAGCOR licensing conditions and Philippine law;
• Processing deposits and withdrawals — necessary for performance of the contract;
• Anti-money laundering monitoring — compliance with Republic Act No. 9160 (AMLA) and PAGCOR regulations;
• Fraud prevention and security — legitimate interests of lawinph and protection of other players;
• Responsible gaming monitoring — PAGCOR regulatory obligation and lawinph's legitimate interests in player welfare;
• Customer support — necessary for performance of the contract;
• Marketing and promotions — with your consent, where required; legitimate interests otherwise;
• Platform analytics and improvement — legitimate interests of lawinph.

5. Disclosure of Personal Data

lawinph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. lawinph may share your personal data with the following categories of recipients:

• PAGCOR and regulatory authorities: lawinph is legally required to share certain data with PAGCOR and other Philippine government agencies including the AMLC (Anti-Money Laundering Council) and the NPC upon lawful request;
• Payment processors: GCash (Mynt), PayMaya (Voyager), BPI, BDO, Metrobank, and other payment service providers, solely to process your transactions;
• Identity verification providers: Third-party KYC and age verification services that assist lawinph in fulfilling its legal obligations;
• Technology service providers: Cloud hosting, platform infrastructure, and game software providers who process data on lawinph's behalf under appropriate data processing agreements;
• Law enforcement: Where required by court order, subpoena, or applicable Philippine law.

All third parties who receive personal data from lawinph are contractually required to maintain the confidentiality and security of that data and to process it only for the purposes specified by lawinph.

6. International Data Transfers

Some of lawinph's technology service providers, including cloud infrastructure and game software vendors, may be located outside the Philippines. Where personal data is transferred internationally, lawinph ensures that appropriate safeguards are in place in accordance with NPC guidelines, including contractual data protection clauses or reliance on the adequacy of the recipient country's data protection laws.

lawinph will not transfer your personal data internationally in a manner that reduces the protections you are entitled to under the Philippine Data Privacy Act of 2012.

7. Data Retention

lawinph retains personal data for the following periods:

• Account data: For the duration of your active account and for five (5) years following account closure, or longer if required by PAGCOR regulations or AMLA obligations;
• Financial and transaction data: For ten (10) years from the date of the transaction, in compliance with AMLA record-keeping requirements;
• KYC documentation: For five (5) years following account closure or the end of the relevant business relationship;
• Customer support communications: For three (3) years from the date of the communication;
• Marketing data: Until you withdraw consent or opt out, or for two (2) years from last interaction, whichever is earlier.

Upon expiry of the applicable retention period, lawinph will securely delete or anonymise your personal data in accordance with NPC-approved data disposal procedures.

8. Cookies and Tracking Technologies

lawinph uses cookies and similar technologies to operate and improve the Platform. The categories of cookies we use include:

• Strictly necessary cookies: Required for the Platform to function, including session management and security. These cannot be disabled.
• Analytics cookies: Collect aggregated, anonymised data about how players use the Platform to help lawinph improve performance and user experience.
• Preferences cookies: Remember your settings and preferences (e.g., language, game lobby layout) across sessions.
• Marketing cookies: Used with your consent to measure the effectiveness of lawinph promotional campaigns.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the lawinph Platform.

9. Security of Personal Data

lawinph implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the lawinph Platform;
• Encryption of sensitive data at rest, including financial and identity data;
• Two-factor authentication (2FA) available for all player accounts;
• Access controls limiting data access to authorised lawinph personnel on a need-to-know basis;
• Regular security audits and penetration testing;
• Data breach response procedures in compliance with NPC notification requirements.

While lawinph takes all reasonable steps to protect your data, no system is completely immune to security risks. Players are encouraged to use strong, unique passwords and to enable 2FA on their lawinph account.

10. Your Rights Under the Data Privacy Act

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by lawinph:

• Right to be Informed: The right to know what personal data lawinph collects, how it is used, and with whom it is shared;
• Right of Access: The right to request a copy of the personal data lawinph holds about you;
• Right to Rectification: The right to have inaccurate or incomplete data corrected;
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary or was unlawfully processed, subject to lawinph's legal retention obligations;
• Right to Object: The right to object to processing based on lawinph's legitimate interests;
• Right to Data Portability: The right to receive your data in a commonly used electronic format;
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data has been mishandled.

To exercise any of these rights, contact lawinph's Data Protection Officer. Email: [email protected] (plain text — not a clickable link). lawinph will respond to verified data subject requests within fifteen (15) business days.

11. Children's Privacy

The lawinph Platform is strictly for persons aged 21 years and older in accordance with PAGCOR regulations and Philippine law. lawinph does not knowingly collect personal data from anyone under the age of 21. If lawinph becomes aware that a person under 21 has provided personal data, that account will be immediately suspended and the data deleted in accordance with NPC requirements. If you are a parent or guardian and believe your child has registered on the lawinph Platform, please contact our Data Protection Officer immediately.

12. Changes to This Policy and Contact

12.1 Amendments. lawinph reserves the right to update this Privacy Policy from time to time. Material changes will be communicated to registered players via email or in-platform notification at least seven (7) days before taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the Platform after the effective date constitutes acceptance of the revised Policy.

12.2 Data Protection Officer. For all privacy-related enquiries, complaints, or data subject requests, contact lawinph's Data Protection Officer:

Email: [email protected]  (plain text — not a clickable link)
Support available 24 hours a day, 7 days a week.

12.3 National Privacy Commission. If you are not satisfied with lawinph's response to a privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.