Your personal data belongs to you. This Privacy Policy explains exactly what information 2winph collects when you use our platform, why we collect it, how we protect it, and what rights you have over it under Philippine law.
2winph ("we," "us," or "the Company") is committed to protecting the privacy and security of the personal data of all individuals who use the 2winph online gaming platform accessible at 2winph.org ("the Platform"). This commitment is not simply a legal obligation — it is a foundational value of how 2winph operates.
This Privacy Policy has been prepared in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC) of the Philippines. It sets out the terms under which 2winph collects, processes, stores, shares, and otherwise handles the personal data of Members and Platform visitors.
2winph also operates under the oversight of the Philippine Amusement and Gaming Corporation (PAGCOR), and our data handling practices are additionally informed by PAGCOR's requirements regarding player records, anti-money laundering obligations, and responsible gaming monitoring. Where those regulatory requirements necessitate the processing of personal data, this Policy explains the specific basis and scope of such processing.
This Privacy Policy applies to all personal data collected through the Platform, including data collected during account registration, identity verification, payment processing, gameplay, customer support interactions, and marketing communications. It covers all devices and channels through which you access 2winph, including mobile browsers and desktop browsers.
The following definitions apply throughout this Privacy Policy:
2winph collects Personal Data that is necessary for the lawful and effective operation of the Platform, fulfilment of regulatory obligations, and delivery of a secure and personalised gaming experience. The categories of data we collect are described below.
| Category | Specific Data Points | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID type and number | Account registration, KYC/AML compliance, age verification |
| Contact Data | Philippine mobile number, email address, province or city of residence | Account communications, OTP delivery, support, marketing (with consent) |
| Financial Data | GCash number, Maya number, bank account details, transaction amounts and timestamps | Payment processing, withdrawal fulfilment, AML monitoring |
| Technical Data | IP address, browser type and version, device type, operating system, session IDs | Security monitoring, fraud prevention, platform optimisation |
| Gaming Activity Data | Game sessions, wager amounts, win/loss records, game types accessed, bonus usage | Account management, responsible gaming monitoring, regulatory reporting |
| Communications Data | Live chat transcripts, support ticket content, survey responses | Customer service delivery, dispute resolution, service improvement |
| Verification Documents | Copies of government-issued IDs, proof of address, source of funds documentation | KYC compliance, AML obligations, PAGCOR reporting requirements |
2winph does not knowingly collect Personal Data from individuals below the age of 21. Where we discover that Personal Data has been collected from an ineligible individual, we will take immediate steps to delete such data and close the associated Account.
2winph collects Personal Data through the following channels and mechanisms:
Information you provide directly when you register an Account, complete identity verification, make a deposit or withdrawal request, contact our support team, respond to surveys, or interact with any form or input interface on the Platform.
Technical Data collected automatically when you access the Platform, including through cookies, server logs, session tracking tools, and similar technologies. This data is collected each time you visit or interact with the Platform, regardless of whether you are logged in to your Account.
Personal Data received from third-party service providers in the course of delivering our Services, including KYC verification agencies who validate your identity documents, payment processors who confirm the status of financial transactions, and fraud prevention services that provide risk scoring based on publicly available or commercially licensed data sets.
In certain circumstances, 2winph may receive information about a Data Subject from PAGCOR or other Philippine government authorities as part of regulatory cooperation obligations, including information relevant to sanctions screening, problem gambling registers, or law enforcement requests.
Under the Data Privacy Act of 2012, 2winph is required to identify a lawful basis for each purpose for which Personal Data is processed. The table below summarises the primary processing purposes and their corresponding legal bases.
| Processing Purpose | Legal Basis under DPA |
|---|---|
| Account creation and management | Performance of a contract (your Account agreement with 2winph) |
| Processing deposits and withdrawals | Performance of a contract; Compliance with legal obligation |
| KYC identity and age verification | Compliance with legal obligation (PAGCOR, Anti-Money Laundering Act) |
| Anti-money laundering monitoring | Compliance with legal obligation (RA 9160 as amended) |
| Responsible gaming monitoring | Compliance with legal obligation; Legitimate interest (player protection) |
| Fraud detection and prevention | Legitimate interest (security of the Platform and Members) |
| Customer support delivery | Performance of a contract; Legitimate interest |
| Platform analytics and improvement | Legitimate interest (improving the Member experience) |
| Marketing communications | Consent (you may withdraw at any time) |
| Compliance with court orders or regulatory requests | Compliance with legal obligation |
2winph retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory requirements, and to resolve any disputes or enforce our agreements.
Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual. Where anonymised data is retained for aggregate analytics purposes, it is no longer subject to this Privacy Policy.
2winph does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share Personal Data only in the circumstances described below, and only to the extent necessary for the relevant purpose.
2winph engages trusted third-party service providers to assist in delivering the Platform's services. These providers act as Personal Information Processors under binding data processing agreements and may only process Personal Data in accordance with 2winph's instructions. Categories of PIPs include: payment gateway operators (e.g., GCash, Maya, BPI, BDO integrators); KYC and identity verification service providers; cloud hosting and infrastructure providers; fraud detection and risk management services; and customer support platform providers.
2winph is required by law to disclose certain Personal Data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other government authorities where required by applicable Philippine law. We may also disclose Personal Data in response to valid court orders, subpoenas, or legal processes issued by Philippine courts of competent jurisdiction.
In the event of a merger, acquisition, restructuring, or sale of 2winph's business or assets, Personal Data held by 2winph may be transferred to the acquiring entity as part of that transaction. Where such a transfer occurs, 2winph will take reasonable steps to ensure the acquiring entity is bound to honour the terms of this Privacy Policy, or to notify affected Members of any material change to how their data will be handled.
We may share your Personal Data with third parties not covered by the categories above if you have given your explicit, informed, and documented consent to that specific sharing arrangement.
Some of 2winph's third-party Personal Information Processors may operate servers or processing facilities outside the Philippines. Where Personal Data is transferred to a recipient in a foreign jurisdiction, 2winph takes the following measures to ensure that your data remains protected to a standard consistent with the Data Privacy Act of 2012:
Where technically and practically feasible, 2winph prefers to use infrastructure operated within or primarily serving the Philippines and the Asia-Pacific region to minimise cross-border data transfer exposure.
2winph uses cookies and similar tracking technologies on the Platform to deliver a functional, personalised, and secure user experience. A cookie is a small text file placed on your device by a website you visit; it enables the website to remember your preferences, maintain your session, and gather analytical data about how the site is used.
You may configure your browser to refuse all or certain types of cookies, or to alert you when a cookie is being set. Please note that disabling Strictly Necessary Cookies will prevent you from accessing your 2winph Account. For all other cookie types, browser-level controls allow you to manage your preferences without affecting Account access. Instructions for managing cookies in major browsers are available through each browser's Help documentation.
2winph implements a comprehensive set of technical and organisational measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
Under the Data Privacy Act of 2012, as a Data Subject, you have the following rights in relation to your Personal Data held by 2winph. 2winph is committed to honouring these rights promptly and without unreasonable restriction.
You have the right to be informed of how 2winph collects, uses, stores, and shares your Personal Data — which is the primary purpose of this Privacy Policy. This right is continuous: if 2winph materially changes how it handles your data, you will be notified.
You have the right to request a copy of the Personal Data that 2winph holds about you, including the specific data points, the purposes for which they are processed, and the third parties to whom they have been disclosed. Access requests will be fulfilled within thirty (30) days of receipt.
If any Personal Data held by 2winph is inaccurate, incomplete, or outdated, you have the right to request correction. 2winph will update the relevant data and notify any third parties to whom the inaccurate data has been disclosed, where practicable.
You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, you withdraw consent and no other legal basis applies, or the processing is unlawful. Erasure requests are subject to 2winph's legal and regulatory retention obligations, which may require certain data to be retained even after Account closure.
You have the right to object to the processing of your Personal Data on the basis of legitimate interests, including processing for direct marketing purposes. An objection to marketing communications can be exercised at any time by contacting our support team or using the unsubscribe mechanism in any marketing email.
Where technically feasible, you may request a structured, machine-readable copy of the Personal Data you have provided to 2winph. This right applies to data processed on the basis of consent or contract performance, not to data processed for legal compliance purposes.
If you believe 2winph has mishandled your Personal Data, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC). We encourage you to contact 2winph's Data Protection Officer first so we have an opportunity to address your concerns directly.
Under the DPA, you have the right to be indemnified for damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your Personal Data, subject to applicable procedural requirements.
To exercise any of the rights described above, please submit a request through 2winph's live chat support or by emailing our Data Protection Officer at the address provided in Section 16. We will respond to all data subject requests within the timelines prescribed by the DPA — generally within fifteen (15) to thirty (30) days of receipt of a complete and valid request.
If 2winph becomes aware that it holds Personal Data of a person below the age of 21, it will take immediate action to delete all such data and permanently close any associated Account. Where a deposit has been made by an underage individual, 2winph will work with the relevant payment provider to arrange the return of funds, net of any applicable processing costs.
Parents, guardians, and responsible adults who believe a person under their care has accessed 2winph should contact our support team immediately. 2winph will treat such notifications with the highest priority and confidentiality.
With your consent, 2winph may send you promotional communications via SMS to your registered Philippine mobile number, or via email to your registered email address. These communications may include information about new games, promotions, cashback offers, and platform updates. Consent to marketing is requested separately from consent to this Privacy Policy and may be given or withdrawn independently.
You may withdraw your consent to marketing communications at any time by: using the unsubscribe link included in any marketing email; adjusting your notification preferences in your Account settings; or contacting 2winph's support team via live chat. Withdrawal of marketing consent will be processed within five (5) business days and will not affect your ability to use any other part of the Platform.
Please note that withdrawal of marketing consent does not affect 2winph's ability to send you service-essential communications, such as OTP verification messages, account security alerts, deposit and withdrawal confirmations, and regulatory notifications — these are sent on the basis of contract performance and legal obligation, not on the basis of marketing consent.
The 2winph Platform may from time to time contain references to content or services provided by third parties — such as game providers, payment service providers, or Philippine gaming information resources. This Privacy Policy applies only to data processed by 2winph directly. 2winph is not responsible for the privacy practices of third-party websites, payment platforms, or services that are accessed via links from the Platform or through the process of completing payment transactions.
We encourage you to review the privacy policies of any third-party service provider you interact with through or alongside 2winph, including GCash, Maya, BPI, BDO, and other payment method providers. Their data collection and handling practices are governed by their own privacy documentation, not by this Policy.
2winph reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The revised policy will be posted on the Platform with an updated effective date.
Where a proposed change to this Privacy Policy materially affects how 2winph processes your Personal Data, we will notify you in advance — typically fourteen (14) days before the change takes effect — via email to your registered address. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the revised Privacy Policy.
If you do not agree to a material revision of this Privacy Policy, you should stop using the Platform and may request Account closure in accordance with 2winph's Terms & Conditions. Closing your Account does not affect 2winph's right to retain data where required by law for the retention periods described in Section 6.
2winph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. The DPO serves as the primary point of contact for all data privacy enquiries, data subject rights requests, and privacy-related complaints.
In addition to contacting 2winph's DPO, you retain the right to submit a complaint directly to the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated. Information about filing a complaint with the NPC is available through the NPC's official public resources.
Beyond legal compliance, these are the real technical and procedural commitments that keep your data safe on 2winph.
Every byte of data exchanged between your device and 2winph's servers is encrypted using industry-standard SSL/TLS protocols — the same encryption used by Philippine banks and GCash. Your credentials, payment data, and gameplay activity are protected in transit at all times.
2winph's identity verification process collects only the minimum data required by PAGCOR and anti-money laundering law. Verification documents are encrypted at rest, accessed only by authorised compliance staff, and retained only for the periods mandated by Philippine law.
2winph does not sell, rent, or trade your Personal Data to third parties for commercial gain. Your information is used exclusively to deliver our Platform services, meet regulatory obligations, and — with your consent — communicate relevant promotions to you directly.
2winph's DPO is a dedicated role — not an add-on responsibility. Our DPO monitors regulatory developments, conducts internal data privacy reviews, manages data subject rights requests, and serves as the direct liaison with the National Privacy Commission of the Philippines.
Marketing consent on 2winph is a genuine choice — you can opt in or opt out at any time through your Account settings or by contacting support. Your decision affects only promotional messages; essential account communications continue regardless of marketing preference.
Every right granted to you by the Philippine Data Privacy Act — access, correction, erasure, portability, objection, and complaint — is supported by 2winph with a defined process and committed response timeline. Your rights are not just listed here; they are operationally enforced.
Your data is secure, your rights are protected, and your privacy is a genuine priority — not a checkbox. Join over 500,000 Filipino players who trust 2winph for their online gaming.
DPA-Compliant · PAGCOR Regulated · 21+ Only · Philippines