// Legal Document — Data Privacy
1phwin Privacy Policy
This Privacy Policy explains how 1phwin collects, uses, stores, shares, and protects the personal information of players and visitors in compliance with applicable Philippine data privacy law. By accessing or using the 1phwin platform, you acknowledge that you have read and understood this policy and consent to the data practices described herein.
What This Privacy Policy Protects
A plain-language summary of your key data rights under the 1phwin Privacy Policy and the Republic Act No. 10173 (Data Privacy Act of 2012).
Right to Access Your Data
You have the right to request a copy of the personal data 1phwin holds about your account — including registration details, transaction records, and communication logs. Verified access requests are fulfilled within a reasonable timeframe.
Right to Correct Inaccurate Data
If any personal information held in your 1phwin account is inaccurate, outdated, or incomplete, you have the right to request a correction. Contact support with supporting documentation to initiate an update to your records.
Right to Erasure
Subject to applicable legal retention obligations, you may request the deletion of your personal data from 1phwin systems. Requests for erasure are reviewed against regulatory requirements before processing — some data may be retained as required by law.
Right to Object to Processing
You may object to specific types of personal data processing — particularly direct marketing communications. Objections to processing for core account and compliance purposes may be limited by legal obligations 1phwin is subject to as an online gaming operator.
Right to Data Portability
Where technically feasible, you may request your personal data in a structured, machine-readable format for transfer to another service. 1phwin will assess such requests on a case-by-case basis within the constraints of applicable law.
Right to Withdraw Consent
Where data processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal, nor processing based on other legal grounds.
- 01 Scope & Application
- 02 Data Controller
- 03 Data We Collect
- 04 Purposes of Processing
- 05 Legal Basis for Processing
- 06 Data Sharing & Disclosure
- 07 Data Retention
- 08 Data Security
- 09 Cookies & Tracking
- 10 Minors & Age Restriction
- 11 Exercising Your Rights
- 12 Philippine DPA Compliance
- 13 Cross-Border Data Transfers
- 14 Policy Amendments
- 15 Contact & DPO
1. Scope & Application
This Privacy Policy applies to all personal data processed by 1phwin in connection with the operation of the online casino and sports betting platform accessible at https://1phwin.cam. It covers data collected from registered players, visitors who browse the platform without registering, and individuals who contact 1phwin through any support channel.
This policy applies regardless of the device or browser used to access 1phwin — desktop, mobile browser, or progressive web application. It covers all data collection mechanisms in use, including registration forms, payment processing, session tracking, and customer support communications.
This Privacy Policy should be read in conjunction with the 1phwin Terms & Conditions. Together, these documents form the complete legal framework governing your relationship with 1phwin. In the event of a conflict between the two documents on a data privacy matter, this Privacy Policy prevails.
2. Data Controller
For the purposes of applicable data privacy legislation — including the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations — 1phwin acts as the data controller with respect to all personal data collected through the platform.
As data controller, 1phwin determines the purposes for which personal data is collected and the means by which it is processed. 1phwin has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this policy and applicable privacy law. Contact details for the DPO are provided in Section 15 of this policy.
Where 1phwin engages third-party service providers to process data on its behalf — such as payment processors, identity verification services, and technology providers — those parties act as data processors operating under contractual obligations to 1phwin consistent with this policy.
3. Data We Collect
1phwin collects personal data through several channels. The categories of data collected depend on the nature of your interaction with the platform.
| Data Category | Examples | Collection Trigger |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government ID number | Registration, KYC verification |
| Contact Data | Mobile number (+63), email address, residential address | Registration, account updates |
| Financial Data | GCash number, bank account (masked), transaction history, deposit/withdrawal amounts in PHP | Deposit, withdrawal, KYC |
| Authentication Data | Hashed password, session tokens, OTP records (not raw OTP values) | Login, session management |
| Technical Data | IP address, device type, OS, browser, screen resolution, connection type | Platform access (automatic) |
| Gaming Activity Data | Game history, bet amounts, session duration, win/loss records | Active gameplay |
| Communications Data | Live chat transcripts, email content, support ticket records | Customer support contact |
| Marketing Preferences | Opt-in/opt-out status, preferred communication channel | Registration, account settings |
1phwin does not collect sensitive personal data — as defined under RA 10173 — beyond what is strictly necessary for identity verification and anti-money laundering compliance. Specifically, 1phwin does not collect health information, political affiliation, religious beliefs, or biometric data not required for ID verification.
4. Purposes of Processing
1phwin processes personal data for the following purposes:
- Account creation and management: To register your account, maintain your profile, and provide access to all platform features;
- Identity verification (KYC): To verify your identity and age in compliance with responsible gaming requirements and applicable regulations before processing withdrawals;
- Payment processing: To facilitate deposits and withdrawals in Philippine Peso via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard;
- Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, and other prohibited activities;
- Regulatory compliance: To comply with anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gaming obligations applicable to online gaming operators in the Philippines;
- Customer support: To respond to inquiries, resolve disputes, and assist with account-related issues;
- Platform improvement: To analyze usage patterns, identify technical issues, and improve the functionality and performance of the 1phwin platform;
- Responsible gaming monitoring: To identify patterns suggesting problematic gambling behavior and intervene proactively where appropriate;
- Marketing communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications.
Marketing opt-out: If you no longer wish to receive marketing communications from 1phwin, you may withdraw your consent at any time through your account settings or by contacting support. Opting out of marketing does not affect transactional communications related to your account or payments.
5. Legal Basis for Processing
1phwin processes personal data on one or more of the following legal bases under RA 10173 and its Implementing Rules and Regulations:
- Consent: Where you have expressly consented to specific processing — such as marketing communications — at registration or through account settings;
- Contractual necessity: Where processing is necessary to perform the contract between you and 1phwin — including account management, payment processing, and game delivery;
- Legal obligation: Where processing is required to comply with a legal requirement applicable to 1phwin as an online gaming operator — including KYC, AML reporting, and record-keeping obligations;
- Legitimate interests: Where processing is necessary for 1phwin's legitimate business interests — such as fraud prevention, platform security, and responsible gaming monitoring — provided those interests are not overridden by your rights and interests.
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted before the withdrawal. Where processing is based on legitimate interests, 1phwin has conducted a balancing assessment to confirm that the processing does not unduly prejudice your rights and interests as a data subject.
6. Data Sharing & Disclosure
1phwin does not sell, rent, or commercially trade your personal data to third parties for their own marketing purposes. Personal data is shared only in the following circumstances:
- Payment service providers: Financial data necessary to process deposits and withdrawals is shared with your chosen payment provider (e.g., GCash, PayMaya, BPI, BDO) under their respective privacy frameworks;
- Identity verification services: Identity documents submitted for KYC are shared with licensed identity verification partners who process them solely on 1phwin's behalf under data processing agreements;
- Game content providers: Minimal technical identifiers are shared with game studios and live casino providers to deliver game sessions — these providers do not receive your financial or identity data;
- Regulatory and law enforcement authorities: 1phwin will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, and courts where required or legally compelled to do so;
- Fraud prevention networks: Technical and transactional data may be shared with industry fraud prevention services to identify and block known fraudulent actors;
- Professional advisors: Legal, audit, and compliance professionals engaged by 1phwin may access personal data subject to strict confidentiality obligations.
All third parties with whom 1phwin shares personal data are contractually required to maintain appropriate security measures and process the data only for the specified purpose. 1phwin does not authorize any third-party data processor to sub-process your data without 1phwin's prior written consent and the implementation of equivalent data protection measures.
7. Data Retention
1phwin retains personal data only for as long as necessary to fulfill the purposes for which it was collected, including compliance with applicable legal retention obligations. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML / regulatory obligation |
| Financial Transaction Records | 5 years from transaction date | AMLC / tax record requirements |
| KYC Documents | 5 years post-account closure | RA 9160 (AMLA) compliance |
| Gaming Activity Logs | 3 years from session date | Responsible gaming / dispute resolution |
| Support Communications | 2 years from last contact | Dispute resolution / legal claims |
| Technical / Log Data | 90 days (rolling) | Security monitoring / fraud detection |
| Marketing Preferences | Until opt-out + 1 year | Consent record-keeping |
Upon expiry of the applicable retention period, personal data is securely deleted, anonymized, or pseudonymized so that it can no longer be attributed to any individual. Where data is anonymized, anonymized datasets may be retained for analytical purposes indefinitely.
8. Data Security
1phwin implements a range of technical and organizational security measures to protect personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:
- Encryption in transit: All data transmitted between your device and 1phwin servers is encrypted using TLS 1.2 or higher (256-bit SSL);
- Encryption at rest: Sensitive data stored on 1phwin servers — including financial information and identity documents — is encrypted using AES-256 or equivalent standards;
- Password security: Account passwords are stored as one-way cryptographic hashes — 1phwin staff cannot retrieve your raw password under any circumstances;
- Access controls: Access to personal data systems is restricted on a need-to-know basis and subject to multi-factor authentication for all internal staff;
- Penetration testing: 1phwin's platform infrastructure undergoes regular security assessments by independent cybersecurity professionals;
- Incident response: 1phwin maintains a documented data breach response procedure, including notification obligations to the National Privacy Commission where a breach meets the threshold for mandatory reporting.
While 1phwin takes extensive precautions, no internet-based system is entirely immune to security risks. You are responsible for maintaining the security of your own 1phwin login credentials and for notifying support immediately if you suspect unauthorized access to your account.
9. Cookies & Tracking Technologies
1phwin uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are in use:
- Strictly necessary cookies: Essential to the functioning of the platform — including session management, authentication, and load balancing. These cannot be disabled without severely impacting platform functionality;
- Analytical cookies: Used to collect aggregated, anonymized data about how visitors interact with the platform — page visits, session durations, navigation paths — to improve user experience;
- Functionality cookies: Store your preferences such as preferred language, game lobby filters, and display settings to personalize your experience across sessions;
- Security cookies: Assist in detecting fraudulent activity, identifying unusual login behavior, and protecting against cross-site request forgery (CSRF) attacks.
1phwin does not deploy third-party advertising cookies or behavioral tracking cookies for the purpose of serving targeted advertising on external websites. All cookies deployed by 1phwin are first-party or are set by explicitly named service providers identified in the data sharing section of this policy.
You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform performance and the availability of some features.
10. Minors & Age Restriction
1phwin is strictly restricted to individuals aged 21 and above. The platform does not knowingly collect personal data from persons under the age of 21. If 1phwin discovers or has reasonable cause to believe that personal data has been collected from an individual under the age of 21, the account will be immediately suspended and all associated personal data will be deleted, subject to any legal obligation to report underage gambling to relevant authorities.
Parents and guardians who believe a minor has accessed or registered on 1phwin are encouraged to contact support immediately. 1phwin takes underage gambling seriously and will act promptly on any credible report. The platform employs age verification checks at registration and requires government-issued identification confirming age before withdrawal processing.
11. Exercising Your Data Rights
To exercise any of the rights described in this Privacy Policy — including access, correction, erasure, portability, objection, or consent withdrawal — please contact the 1phwin Data Protection Officer using the contact details provided in Section 15.
Your request must:
- Include sufficient information to identify your account (registered mobile number or username);
- Specify clearly which right you are exercising and the scope of your request;
- Be submitted from your registered contact information to enable verification of your identity.
1phwin will acknowledge your request within five (5) business days and aim to fulfill it within thirty (30) calendar days. Complex requests or requests requiring third-party coordination may take up to sixty (60) days, with notice provided to you. We will not charge a fee for reasonable requests, though 1phwin reserves the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.
If you believe that 1phwin has not adequately addressed your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at its registered office in Quezon City. The NPC is the Philippine supervisory authority responsible for enforcing RA 10173.
12. Philippine Data Privacy Act Compliance
1phwin processes personal data in compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations issued by the National Privacy Commission. The platform's data processing activities are governed by the principles of transparency, legitimate purpose, and proportionality as established under Philippine data privacy law.
1phwin maintains a Privacy Management Program (PMP) as required by NPC Circular No. 16-01. This program includes a designated Data Protection Officer, documented privacy impact assessments for high-risk processing activities, staff training on data privacy obligations, and a personal data breach management policy.
1phwin's data processing activities involving financial transactions and identity verification may also be subject to Republic Act No. 9160 (Anti-Money Laundering Act), as amended, and reporting obligations to the Anti-Money Laundering Council (AMLC). Compliance with these obligations may require 1phwin to retain and in some cases disclose personal data to regulatory authorities independent of your consent.
13. Cross-Border Data Transfers
Some of 1phwin's third-party service providers — including game content providers, live dealer studio operators, and certain technology infrastructure services — may process personal data outside of the Republic of the Philippines. Where such cross-border data transfers occur, 1phwin ensures that:
- The recipient country or organization provides an adequate level of protection for personal data consistent with Philippine standards;
- Appropriate contractual safeguards — such as standard contractual clauses or equivalent binding agreements — are in place between 1phwin and the receiving party;
- The transfer is limited to the minimum data necessary for the specific processing purpose.
Cross-border transfers are conducted in accordance with NPC guidelines on personal data protection in overseas processing. Financial data shared with Philippine payment providers (GCash, PayMaya, BPI, BDO, Metrobank) remains within the Philippines under those providers' respective data governance frameworks.
14. Policy Amendments
1phwin reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in platform operations, applicable law, or regulatory guidance. Material changes will be communicated to registered players via their registered mobile number or email address, or through a prominent notice on the platform, not less than fourteen (14) days before the revised policy takes effect.
Your continued use of the 1phwin platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised terms, you must cease using the platform and may request account closure in accordance with the Terms & Conditions. Earlier versions of this policy are available upon request from the Data Protection Officer.
The "Effective Date" displayed at the top of this document reflects the most recent revision date. We encourage you to review this policy periodically to stay informed of how 1phwin handles your personal data.
15. Contact & Data Protection Officer
For all data privacy inquiries, requests to exercise your rights, or concerns about 1phwin's handling of your personal data, please contact the 1phwin Data Protection Officer through the following channels:
- Live Chat Support: Available 24/7 through your logged-in 1phwin account dashboard — select the "Privacy / Data Request" topic when initiating the chat;
- Email: [email protected] — include "DATA PRIVACY REQUEST" in the subject line for priority routing;
- Written correspondence: Addressed to the Data Protection Officer, 1phwin Platform, Philippines — include your full registered name, account mobile number, and a clear description of your request.
The 1phwin DPO team acknowledges all data privacy requests within five (5) business days. Response and fulfillment timelines depend on request complexity. For urgent security matters — such as suspected unauthorized account access — contact live chat support immediately for fastest response. Support operates in both Filipino and English, 24 hours a day, 7 days a week.
Your Data Is Protected — Explore 1phwin with Confidence
1phwin is built with privacy and security as foundational priorities. Your personal data is handled in compliance with Philippine law, protected with industry-standard encryption, and never sold to third parties. Sign in or explore the casino lobby — knowing your information is in safe hands.
// 21+ only · All transactions in PHP · Responsible gaming tools available
21+ Age Requirement
1phwin does not knowingly collect or process personal data from individuals under the age of 21. All players are required to verify their age as part of the KYC process before withdrawals are permitted. If you are under 21, please do not register or submit any personal information on this platform.
Related Legal Documents
This Privacy Policy works together with the Terms & Conditions and Responsible Gaming policy. All three documents apply to your use of 1phwin. Reviewing all three gives you a complete picture of your rights and obligations as a registered player on the platform.