26phwin Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how 26phwin ("the Platform," "we," "us," "our"), operator of the website https://26phwin.vip, collects, processes, uses, stores, discloses, and protects personal information obtained from players, registered users, and visitors in the course of operating the 26phwin online gaming platform and related services.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines ("NPC").

This Policy applies to all personal information collected through the 26phwin website, mobile-optimized browser experience, live chat support channels, and any other touchpoint through which 26phwin interacts with players and visitors. It does not apply to third-party game providers or payment processors who operate under their own privacy frameworks.

2. Data Controller Identity

For the purposes of the Data Privacy Act of 2012, the personal information controller responsible for the processing of personal data collected through the 26phwin platform is:

26phwin has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with the DPA and this Policy. The DPO can be contacted through the email address listed above for privacy-related inquiries, rights requests, and complaints.

3. Categories of Personal Data We Collect

26phwin collects the following categories of personal information, depending on the nature of your interaction with the platform:

Identity and Contact Data:

• Full legal name as it appears on your Philippine government-issued identification.
• Date of birth (for age verification purposes — players must be 21 years or older).
• Philippine mobile number (used as primary account identifier and for OTP authentication).
• Email address (if provided at registration or through support channels).
• Residential address (collected during identity verification / KYC processes).

Identity Verification (KYC) Data:

• Copies of government-issued Philippine identification documents (e.g., PhilSys ID, UMID, driver's license, passport, voter's ID).
• Selfie or facial verification image where required for document matching.
• Payment method ownership verification documentation.

Financial Data:

• GCash account number, Maya account number, BPI/BDO/Metrobank account details used for deposit and withdrawal transactions.
• Transaction records including deposit amounts, withdrawal amounts, dates, and payment method references.
• Account balance history.

Gaming Activity Data:

• Game session logs including games played, bet amounts, win/loss outcomes, and session duration.
• Bonus and promotion participation records.
• VIP tier status and wagering history.

Technical and Device Data:

• IP address at the time of login and gaming sessions.
• Device type, operating system, and browser type.
• Session timestamps and activity logs.
• Cookie identifiers (see Section 7).

Communications Data:

• Records of live chat conversations, email correspondence, and SMS communications with 26phwin support.
• Customer satisfaction and feedback submissions.

4. How We Collect Personal Data

26phwin collects personal information through the following channels and mechanisms:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically through your browser or device when you access the 26phwin platform, including IP address, device identifiers, and session activity logs.
• Payment processors: Transaction confirmation data received from Philippine payment providers (GCash, Maya, BPI, BDO, etc.) following the completion of deposit or withdrawal transactions.
• Third-party game providers: Game session data transmitted from licensed game studios operating within the 26phwin platform in connection with your gameplay activity.
• KYC verification services: Identity verification outcomes and fraud screening results received from third-party identity verification services engaged by 26phwin.

5. Purposes and Legal Basis for Processing

26phwin processes personal information only for specified, legitimate purposes and on at least one valid legal basis under the Data Privacy Act of 2012. The following table summarizes our primary processing activities:

26phwin does not process personal data for any purpose incompatible with the purposes listed above without obtaining your prior consent or as otherwise required by law.

6. Disclosure and Data Sharing

26phwin does not sell, rent, or trade your personal information. We disclose personal data only in the following circumstances:

• Service providers: Third-party providers engaged to deliver services on behalf of 26phwin — including payment processors (GCash, Maya, BPI, BDO), identity verification services, game providers, and IT infrastructure providers. All service providers are contractually required to process data only as instructed by 26phwin and to maintain adequate security standards.
• Regulatory compliance: Philippine gaming regulators, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other government agencies where 26phwin is legally required to disclose information.
• Legal proceedings: Courts, law enforcement agencies, and legal counsel in connection with legal proceedings, investigations, or the enforcement of 26phwin's legal rights.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 26phwin's business, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

7. Cookies and Tracking Technologies

The 26phwin platform uses cookies and similar technologies to provide a functional, secure, and personalized user experience. The cookies we use fall into the following categories:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking platform functionality.
• Functional cookies: Enable personalized features such as remembering your language preference, display settings, and saved login state (when "Remember me" is selected). These persist between sessions on your registered device.
• Analytics cookies: Used to collect aggregated, anonymized data about how players navigate and interact with the platform. This data is used solely to improve the 26phwin user experience. Individual player behavior is not identifiable from analytics reports.

26phwin does not use advertising cookies, cross-site tracking pixels, or cookies that profile individual players for commercial advertising purposes. You may manage or delete cookies through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the platform.

8. Data Retention

26phwin retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to applicable legal retention obligations. The following retention periods apply:

• Account data: Retained for the duration of the active account relationship and for a period of five (5) years following account closure, as required by Philippine anti-money laundering regulations.
• KYC and identity verification documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Financial and transaction records: Retained for ten (10) years in accordance with applicable Philippine accounting and AML requirements.
• Gaming activity logs: Retained for three (3) years following the relevant gaming session.
• Support communications: Retained for three (3) years from the date of the relevant communication.
• Marketing consent records: Retained until withdrawal of consent plus an additional three (3) years as evidence of the consent history.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.

9. Data Security

26phwin implements appropriate technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and the 26phwin platform.
• AES-256 encryption for personal and financial data stored in our databases.
• Multi-factor authentication (OTP) for all player account logins, with IP-based session monitoring for anomaly detection.
• Role-based access controls limiting employee access to personal data strictly on a need-to-know basis.
• Regular security assessments and penetration testing of platform infrastructure.
• Incident response procedures in accordance with the NPC's breach notification requirements.

While 26phwin implements comprehensive security measures, no platform can guarantee absolute security. Players are encouraged to use strong, unique passwords, enable OTP verification, and report any suspected unauthorized account access to support immediately.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal information held by 26phwin:

• Right to be Informed: The right to know whether 26phwin holds personal data about you and to receive information about how it is processed.
• Right to Access: The right to obtain a copy of your personal data and information about how it is processed.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected or updated.
• Right to Erasure / Right to be Forgotten: The right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (privacy.gov.ph) if you believe your data rights have been violated.

To exercise any of the above rights, submit a written request to the 26phwin Data Protection Officer at the contact details in Section 15. 26phwin will respond to all valid rights requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. We may request reasonable verification of your identity before processing a data subject rights request.

11. Marketing Communications

26phwin may send you promotional communications about bonuses, new games, seasonal promotions, and platform updates through your registered Philippine mobile number (SMS) or email address, where you have given your consent to receive such communications.

You may withdraw your consent to marketing communications at any time by:

• Updating your notification preferences in the 26phwin account settings dashboard.
• Replying "STOP" to any marketing SMS received from 26phwin.
• Contacting 26phwin support with an explicit opt-out request.

Withdrawal of marketing consent does not affect your ability to use the 26phwin platform or receive transactional communications (e.g., deposit confirmations, withdrawal receipts, OTP messages, and security alerts), which are necessary for the operation of your account.

12. Children and Minors

If 26phwin discovers that personal data has been collected from an individual under the age of 21 without verifiable consent, we will immediately suspend the relevant account and delete the personal data as promptly as possible, subject to any applicable legal retention obligations.

If you believe that a person under 21 has registered a 26phwin account or has provided personal information to the platform, please contact the 26phwin Data Protection Officer immediately at the contact details in Section 15.

13. Cross-Border Data Transfers

Some of 26phwin's service providers, including game platform infrastructure providers and certain payment technology vendors, may process personal data outside of the Republic of the Philippines. Where personal data is transferred to a third country, 26phwin ensures that:

• The recipient country provides an adequate level of protection for personal data as recognized by the NPC, or
• Appropriate contractual safeguards (e.g., Standard Contractual Clauses) are in place between 26phwin and the recipient entity to ensure that the data subject's rights are protected to a standard equivalent to that provided under the DPA.

Information about the specific countries to which data may be transferred and the safeguards applied is available upon written request to the 26phwin Data Protection Officer.

14. Changes to This Privacy Policy

26phwin reserves the right to update or modify this Privacy Policy at any time. When material changes are made, 26phwin will:

• Post the revised Policy on this page at https://26phwin.vip/privacy-policy with an updated "Last Updated" date.
• Display a prominent notice on the platform homepage for a minimum of 14 days following the change.
• Where practicable, notify registered players via SMS to their registered Philippine mobile number.

Your continued use of the 26phwin platform following the effective date of any revised Policy constitutes your acceptance of the revised terms. If you do not agree to any modification, you must cease using the platform and may request account closure in accordance with the 26phwin Terms & Conditions.

15. Contact Us / Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 26phwin, please contact:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe that 26phwin has processed your personal data in violation of the Data Privacy Act of 2012. The NPC can be reached at privacy.gov.ph (external government website, not affiliated with 26phwin).

26phwin is committed to resolving all privacy-related inquiries promptly and transparently. We aim to acknowledge all Data Protection Officer inquiries within two (2) business days and to provide a substantive response within fifteen (15) business days.