lawinph Privacy Policy

1 Scope & Data Controller

This Policy applies to all personal data processed by lawinph in connection with your use of the lawinph Platform, including the website at lawinph.vip, any related mobile-optimized interfaces, customer support channels, and marketing communications.

lawinph is the data controller responsible for determining the purposes and means by which your personal data are processed. For any data protection queries, you may contact lawinph through the details provided in Section 15 of this Policy.

2 Personal Data We Collect

lawinph collects the following categories of personal data in connection with account registration, platform usage, and regulatory compliance:

3 How We Collect Personal Data

lawinph collects personal data through the following means:

• Direct Input: Information you provide when registering an account, completing KYC verification, updating account settings, making deposits or withdrawals, or contacting customer support.
• Automated Collection: Technical data collected automatically when you access or interact with the lawinph Platform, including through cookies, log files, and session tracking technologies (see Section 10).
• Payment Processors: Transaction confirmation data received from payment processors (GCash, Maya, BPI, BDO, UnionBank, Metrobank, Coins.ph) following completion of deposit or withdrawal requests.
• Third-Party Verification Services: Identity verification data received from licensed KYC verification providers engaged by lawinph to authenticate player identities in compliance with regulatory requirements.
• Regulatory Authorities: In certain circumstances, lawinph may receive information from PAGCOR or other Philippine regulatory authorities in the course of compliance activities.

4 Purposes of Processing

lawinph processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your lawinph account, including processing your registration, verifying your identity, and enabling your login.
• Service Delivery: To enable you to access and use the games, features, and services available on the lawinph Platform, including processing deposits, recording wagers, crediting winnings, and processing withdrawal requests.
• Regulatory Compliance: To fulfill lawinph's legal obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA) of the Philippines, the Data Privacy Act, and any other applicable laws, including mandatory reporting of suspicious transactions to the Anti-Money Laundering Council (AMLC).
• Identity Verification (KYC): To verify that you meet the eligibility requirements for using the lawinph Platform, including the 21+ age requirement, and to authenticate your identity before processing significant withdrawals.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, collusion, multi-accounting, unauthorized access, and other conduct prohibited under the lawinph Terms and Conditions.
• Customer Support: To respond to your inquiries, resolve disputes, and provide assistance related to your account or gaming activity.
• Responsible Gaming: To implement and administer responsible gaming tools, including deposit limits, self-exclusion, and session reminders, and to monitor for patterns of at-risk gaming behavior.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw consent at any time.
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the performance, usability, and game selection of the lawinph Platform.

5 Legal Bases for Processing

Under the Data Privacy Act of 2012, lawinph processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the lawinph Terms and Conditions, including account management, game access, and payment processing.
• Legal Obligation: Processing necessary to comply with Philippine law, including PAGCOR regulatory requirements, AMLA obligations, and tax reporting requirements.
• Legitimate Interest: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where lawinph's legitimate interests do not override your fundamental data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where your consent has been expressly obtained. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

6 Data Sharing & Disclosure

lawinph does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Service Providers: GCash (G-Xchange Inc.), Maya (Paymaya Philippines Inc.), BPI, BDO, UnionBank, Metrobank, Coins.ph, and other payment processors, solely to process deposit and withdrawal transactions associated with your account.
• KYC & Identity Verification Providers: Licensed third-party identity verification services engaged by lawinph to perform document verification and age confirmation in compliance with PAGCOR and AMLA requirements.
• Game Content Providers: Game studios and technology providers (such as JILI, PG Soft, Pragmatic Play, and others) may receive technical session data necessary to deliver game content. These providers are contractually prohibited from using such data for independent marketing or profiling purposes.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other Philippine government authorities, where disclosure is required by law or a valid government order.
• Fraud Prevention Services: Specialist fraud detection and security service providers that help lawinph identify prohibited conduct, unauthorized account access, and multi-accounting.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, where disclosure is necessary for the provision of professional services to lawinph, subject to appropriate confidentiality obligations.

7 International Data Transfers

Some of lawinph's service providers and technology partners may be located outside the Philippines. Where personal data is transferred internationally, lawinph ensures that adequate safeguards are in place, consistent with the requirements of the Data Privacy Act and NPC regulations, including:

• Contractual clauses requiring the recipient to protect the data to a standard equivalent to Philippine data protection law;
• Assessments confirming that the recipient country provides an adequate level of data protection;
• Binding corporate rules where applicable within corporate groups.

By using the lawinph Platform, you consent to such transfers subject to the safeguards described above.

8 Data Retention

lawinph retains personal data for as long as necessary to fulfill the purposes described in this Policy, subject to the following retention standards:

After applicable retention periods expire, personal data is securely deleted or anonymized such that it can no longer be attributed to any identified or identifiable individual.

9 Security Measures

lawinph implements technical and organizational security measures appropriate to the risk profile of your personal data, including:

• Transport Encryption: All data transmitted between your browser or device and the lawinph Platform is protected by 256-bit TLS/SSL encryption — the same standard used by Philippine commercial banks.
• Data Encryption at Rest: Sensitive personal data, including KYC documents and financial information, is stored in encrypted form on lawinph's servers.
• Password Hashing: Account passwords are stored exclusively as cryptographic hashes using a strong hashing algorithm. lawinph staff cannot read or retrieve your plain-text password.
• Access Controls: Access to personal data within lawinph's systems is restricted on a need-to-know basis. All staff with data access are subject to confidentiality obligations.
• Two-Factor Authentication: OTP-based two-factor authentication is available to all players for account login, and is mandatory for certain high-risk account actions.
• Security Monitoring: lawinph continuously monitors platform systems for unauthorized access, anomalous activity, and security vulnerabilities.
• Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, lawinph will notify the National Privacy Commission and affected players in accordance with NPC Circular 16-03 requirements.

10 Cookies & Tracking Technologies

lawinph uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies may be used:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including maintaining your login session and remembering your account preferences. These cannot be disabled without impairing Platform functionality.
• Performance Cookies: Collect anonymized data about how players interact with the Platform to help lawinph identify technical issues and improve user experience. No personally identifiable information is collected by performance cookies.
• Functional Cookies: Remember your preferences (such as language settings, last-visited game category, or responsible gaming settings display) to provide a personalized experience.
• Analytics Cookies: Track aggregated usage patterns to inform game library curation, UI improvements, and promotional strategy. Analytics data is processed in aggregated and anonymized form.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of parts of the lawinph Platform. lawinph does not use cookies to serve advertisements on third-party platforms or to track your activity outside of lawinph.vip.

11 Your Data Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by lawinph:

• Right to Information: The right to be informed of the identity of lawinph as data controller, the types of personal data collected, the purposes for which they are processed, and the parties to whom they may be disclosed — all of which are set out in this Policy.
• Right to Access: The right to obtain a copy of the personal data lawinph holds about you. To request access, contact lawinph's Data Protection Officer at the details in Section 15. lawinph will respond within 15 business days.
• Right to Correction: The right to request correction of inaccurate, incomplete, or outdated personal data in your lawinph account. Some corrections (e.g., name or date of birth) may require documentary evidence.
• Right to Erasure or Blocking: The right to request deletion or blocking of personal data that is unlawfully processed or no longer necessary for the purposes stated. Note that certain data must be retained for legally mandated periods (see Section 8) and cannot be deleted upon request during that period.
• Right to Object: The right to object to the processing of your personal data, particularly for direct marketing purposes. Objection to marketing will be implemented immediately. Objection to other processing will be assessed against lawinph's legal obligations and legitimate interests.
• Right to Data Portability: The right to receive personal data you have provided to lawinph in a structured, commonly used, machine-readable format and to have that data transmitted to another data controller where technically feasible.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated. NPC contact details are available at the NPC's official website.

12 Children's and Minors' Privacy

The lawinph Platform is strictly restricted to individuals aged 21 years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. lawinph does not knowingly collect personal data from persons under the age of 21.

If lawinph becomes aware that personal data has been collected from a person below the required age, the Account will be immediately closed, any data collected will be deleted to the extent not required for regulatory retention purposes, and any deposited funds will be returned to the payment method used.

If you have reason to believe that a minor has accessed or created a lawinph account, please notify us immediately at the contact details in Section 15.

13 Third-Party Platforms and Links

The lawinph Platform may contain references to third-party services (such as payment processors) that are operated under their own privacy policies. lawinph's Privacy Policy does not apply to the practices of third-party services, and lawinph is not responsible for the privacy practices of any third-party operator.

When you use GCash, Maya, BPI, BDO, or any other payment service to deposit or withdraw funds, your interaction with that service is subject to that provider's own privacy policy and terms of service. lawinph encourages you to review those policies before sharing personal information with any third-party service provider.

14 Updates to This Privacy Policy

lawinph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or the services we offer. When material changes are made, lawinph will provide notice through one or more of the following channels:

• A notification displayed upon your next login to the lawinph Platform;
• An SMS notification to your registered mobile number;
• Publication of the revised Policy at lawinph.vip/privacy-policy with an updated "Last Updated" date.

Your continued use of the lawinph Platform following notification of a material change constitutes acceptance of the revised Policy. If you do not agree with the revised Policy, you must cease using the Platform and may request Account closure. Previous versions of this Policy are available upon request to the Data Protection Officer.

15 Contact & Data Protection Officer

lawinph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection laws. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by lawinph, please contact the DPO:

Data Protection Officer — lawinph
Email (plain text — not a link):
[email protected]

lawinph's customer support and data privacy team is available 24 hours a day, 7 days a week. Responses to data subject requests are provided within 15 business days of receipt and identity verification. For complaints that are not resolved to your satisfaction through lawinph's internal process, you have the right to file a complaint with the National Privacy Commission of the Philippines.

If you have a concern specifically about a suspected data breach or unauthorized disclosure of your personal information, please mark your communication as urgent. lawinph will prioritize the investigation and respond as promptly as possible given the circumstances.