pw99 Privacy Policy
At pw99, your privacy is not an afterthought — it's built into everything we do. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you hold as a player on the Philippines' trusted online casino platform.
How pw99 Handles Your Privacy
Six core principles that define our approach to data protection and your personal information.
pw99 collects only the personal data that is strictly necessary to deliver our services, verify your identity, process transactions, and comply with Philippine regulations. We do not collect data for its own sake.
pw99 will never sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes. Your information stays within the pw99 ecosystem and regulated service partners only.
All personal data stored and transmitted by pw99 is protected using industry-standard encryption (SSL/TLS). Our servers are housed in access-controlled environments with continuous security monitoring and regular third-party audits.
As a pw99 player, you have genuine rights over your personal data — including the right to access, correct, restrict, and in certain circumstances delete your information. We process all data rights requests promptly and free of charge.
pw99 keeps your personal data only for as long as it is needed to fulfill the purposes it was collected for, or as required by Philippine law. When data is no longer needed, it is securely deleted or anonymized.
Whenever pw99 makes material changes to this Privacy Policy, we notify registered players by email and via in-platform notification before the changes take effect. You'll never be surprised by a policy change you didn't know about.
Table of Contents
pw99 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of every player and visitor who interacts with our platform. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of your personal information in connection with your use of the pw99 service.
pw99 operates as an online gaming platform serving players across the Philippines — including Metro Manila, Cebu, Davao, Quezon City, Makati, and all other regions. As a platform that processes financial transactions and verifies player identities, we are subject to obligations under Philippine data protection law, specifically the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations enforced by the National Privacy Commission (NPC).
This Privacy Policy is incorporated by reference into pw99's Terms & Conditions. By using our platform, you confirm your acceptance of both documents. If you do not agree with this Privacy Policy, please discontinue use of the pw99 platform and contact support to arrange account closure.
This policy applies to:
- Registered pw99 players and account holders.
- Visitors to the pw99 website who have not yet registered an account.
- Individuals who contact pw99 via live chat, email, or any other support channel.
- Any individual whose personal data is processed by pw99 in connection with the delivery of its services.
pw99 collects personal data through several channels, including account registration forms, KYC verification processes, financial transactions, gameplay activity, customer support interactions, and automatic technical collection via your device and browser. The categories of personal data we collect include:
2.1 Identity & Contact Data
- Full legal name as it appears on your government-issued ID.
- Date of birth (used to verify the 21+ age requirement).
- Residential address, including barangay, city, province, and postal code.
- Email address (used as your primary account identifier and communication channel).
- Mobile number (used for account security, OTP authentication, and support).
2.2 Identity Verification (KYC) Documents
- Scanned or photographed copies of valid Philippine government-issued IDs (SSS, GSIS, PhilHealth card, Passport, Driver's License, PRC ID, Voter's ID, or equivalent).
- Proof of residential address (utility bill, bank statement, or barangay certificate issued within the last three months).
- Selfie photograph for liveness verification where required.
2.3 Financial Data
- GCash mobile number or registered PayMaya account details.
- Bank account name, account number, and bank name for BPI, BDO, Metrobank, and UnionBank transactions.
- Deposit and withdrawal transaction records, including amounts (in PHP / ₱), timestamps, and transaction reference numbers.
- Running account balance history.
2.4 Gameplay & Platform Activity Data
- Game history, bet amounts, win/loss records, and session durations.
- Bonus claims, wagering activity related to promotional offers, and loyalty program points where applicable.
- Responsible gaming tool configurations (deposit limits, session reminders, self-exclusion status).
2.5 Technical & Device Data
- IP address and approximate geographic location derived from IP.
- Device type, operating system, and browser version.
- Session timestamps, page views, and navigation behavior on pw99.app.
- Cookies and similar tracking technologies (see Section 6).
2.6 Communications Data
- Records of live chat conversations with pw99 support agents.
- Email correspondence sent to or received from [email protected].
- Feedback, complaints, and dispute records.
pw99 uses the personal data we collect for the following purposes:
- Account Management: To create, maintain, and secure your pw99 account, including verifying your identity, authenticating logins, and managing account settings.
- Age Verification: To confirm that you meet the mandatory minimum age of 21 years required to participate in online gaming under Philippine law.
- KYC Compliance: To fulfill our obligations under applicable Know Your Customer regulations, including verifying your identity before processing withdrawal requests.
- Financial Transactions: To process deposits and withdrawals accurately, reconcile accounts, and maintain transaction records as required by Philippine financial regulations.
- Service Delivery: To provide access to pw99's gaming library, promotional offers, live dealer games, sports betting, bingo, and all other platform features.
- Customer Support: To respond to your inquiries, resolve account issues, investigate complaints, and communicate account-relevant updates.
- Fraud Prevention & AML Compliance: To monitor for and detect suspicious activity, prevent money laundering, and comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under Philippine law.
- Responsible Gaming: To enforce player-set deposit limits, session reminders, self-exclusion periods, and other responsible gaming tools that protect player welfare.
- Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent to receive such communications. You may withdraw this consent at any time.
- Platform Improvement: To analyze aggregated, anonymized usage data that helps pw99 improve its website performance, game offering, and user experience.
- Legal Compliance: To comply with applicable Philippine laws, regulatory requirements, court orders, and lawful requests from government authorities.
pw99 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for processing.
Under the Philippine Data Privacy Act of 2012, pw99 must establish a lawful basis for processing each category of personal data. The following table summarizes the processing activities and their corresponding legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and identity verification | Performance of contract; Legal obligation (KYC) |
| Age verification (21+ check) | Legal obligation; Legitimate interests |
| Processing deposits and withdrawals | Performance of contract |
| Fraud detection and AML monitoring | Legal obligation; Legitimate interests |
| Customer support communications | Performance of contract; Legitimate interests |
| Responsible gaming tool enforcement | Legal obligation; Legitimate interests |
| Sending marketing and promotional communications | Consent (freely given and withdrawable) |
| Platform analytics and performance improvement | Legitimate interests (using anonymized data) |
| Compliance with regulatory and legal requests | Legal obligation |
Where pw99 relies on legitimate interests as the basis for processing, we have conducted a balancing assessment to confirm that our interests do not override your fundamental privacy rights. You may request a copy of these assessments by contacting [email protected].
pw99 does not sell, rent, or trade your personal data to third parties for their own commercial gain. We share personal data only in the following limited and controlled circumstances:
- Payment Processors: We share the minimum necessary financial data with our payment partners (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank) to process your deposit and withdrawal transactions. These partners are contractually bound to handle your data securely and only for the purpose of transaction processing.
- Identity Verification Providers: pw99 uses regulated third-party KYC and identity verification service providers to validate the authenticity of government-issued IDs and confirm player age. These providers are subject to strict data processing agreements.
- Fraud Prevention & Security Services: Aggregated or pseudonymized data may be shared with fraud detection platforms to identify and prevent suspicious account activity, money laundering, and technical abuse.
- Regulatory and Government Authorities: pw99 is required by Philippine law to disclose certain player information to regulatory bodies, law enforcement agencies, or courts upon receipt of a valid and lawful request. This includes compliance with PAGCOR oversight requirements and AMLC reporting obligations.
- Legal and Professional Advisors: In connection with legal proceedings, regulatory investigations, or corporate transactions, pw99 may share data with its legal counsel, auditors, or other professional advisors under strict confidentiality obligations.
- Group Companies: pw99 may share data within its corporate group for internal administrative purposes, such as consolidated compliance reporting, subject to the same data protection standards applied to external processors.
pw99 uses cookies and similar tracking technologies to operate the platform, maintain session security, and analyze usage patterns. A cookie is a small text file placed on your device when you visit pw99.app. We use the following categories of cookies:
- Strictly Necessary Cookies: These are essential for the platform to function and cannot be disabled. They include session authentication tokens, CSRF protection cookies, and load balancing identifiers. These cookies do not collect personal data beyond what is required for platform security.
- Functional Cookies: These cookies remember your preferences, such as your language setting and responsible gaming configurations, to improve your experience on return visits.
- Analytics Cookies: pw99 uses analytics to understand how players navigate the platform, which pages are most visited, and where technical issues arise. This data is aggregated and anonymized wherever possible.
- Security Cookies: Used to detect and prevent fraudulent logins, bot activity, and other technical abuse attempts.
You can configure your browser to refuse cookies or to alert you when cookies are being placed. Note that disabling strictly necessary cookies may prevent you from logging in to your pw99 account or using core platform features.
pw99 retains your personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required or permitted by applicable Philippine law. Our standard retention periods are as follows:
- Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years after account closure, in compliance with AML record-keeping requirements under Philippine law.
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLC regulations.
- KYC Verification Documents: Retained for the duration of the account relationship plus five (5) years, or longer if required by a regulatory investigation or legal proceeding.
- Customer Support Records: Retained for three (3) years from the date of the support interaction, or longer if the matter involves an unresolved dispute or legal claim.
- Marketing Consent Records: Retained until you withdraw consent, plus a reasonable period thereafter as evidence of the consent having been given.
- Technical and Device Data: Aggregated analytics data is retained for up to twelve (12) months. Fraud-prevention logs may be retained for up to three (3) years.
When the applicable retention period expires, pw99 will securely delete or irreversibly anonymize your personal data. Anonymized data that can no longer be linked to you is not subject to this Privacy Policy and may be retained indefinitely for statistical or research purposes.
pw99 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
- Transport Encryption: All data transmitted between your device and pw99's servers is encrypted using TLS 1.2 or higher. Our website operates exclusively over HTTPS.
- Data-at-Rest Encryption: Sensitive personal data and financial information stored in pw99's databases is encrypted at rest using AES-256 or equivalent standards.
- Access Controls: Access to personal data is restricted on a need-to-know basis. pw99 staff members are granted access only to the data required for their specific role, and all access is logged and auditable.
- Two-Factor Authentication: pw99 enforces multi-factor authentication for all internal administrative systems that handle player data. Players are strongly encouraged to enable 2FA on their own accounts.
- Penetration Testing: pw99's platform undergoes regular security assessments and penetration testing conducted by independent third-party security professionals.
- Incident Response: pw99 maintains a formal data breach response plan. In the event of a security incident that poses a risk to your rights, pw99 will notify affected players and the National Privacy Commission within the timeframes required by the Data Privacy Act.
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pw99. All requests are processed free of charge and within thirty (30) calendar days of receipt:
Request a copy of the personal data pw99 holds about you, including the purposes for which it is processed.
Request correction of inaccurate or incomplete personal data we hold about you at any time.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Object to processing of your personal data for direct marketing purposes. We will stop processing immediately upon receipt of a valid objection.
Request that pw99 restricts the processing of your data while a complaint or correction request is being resolved.
Receive a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Lodge a complaint with the National Privacy Commission (NPC) if you believe pw99 has mishandled your personal data.
To exercise any of the rights listed above, please contact pw99's Data Protection Officer by emailing [email protected] with the subject line "Data Rights Request." Please include your registered account username, the specific right you wish to exercise, and sufficient information to allow us to verify your identity. pw99 will acknowledge your request within five (5) business days and provide a full response within thirty (30) calendar days.
pw99 is an online gaming platform intended exclusively for adults. Under Philippine law, the minimum age to participate in casino-style online gaming is 21 years old. pw99 strictly enforces this age restriction through mandatory identity verification at account registration and again at the point of first withdrawal.
pw99 does not knowingly collect, store, or process personal data from individuals under the age of 21. If pw99 discovers or is notified that an account has been registered by a person below the minimum age, the following actions will be taken immediately:
- The account will be suspended and all access to the platform will be revoked.
- Any funds held in the account will be handled in accordance with applicable regulatory requirements.
- All personal data associated with the account will be deleted as soon as reasonably practicable, subject to any legal obligations to retain records.
- The matter will be escalated to pw99's compliance team for review.
If you are a parent or guardian and believe that a minor in your care has created a pw99 account, please contact our support team immediately at [email protected]. We treat all such reports as urgent and will act on them within 24 hours.
pw99 primarily stores and processes personal data within data center infrastructure located in the Asia-Pacific region. In limited circumstances, personal data may be transferred to, or accessed from, jurisdictions outside the Philippines — for example, in connection with third-party KYC verification providers or fraud detection services that operate internationally.
Where personal data is transferred outside the Philippines, pw99 ensures that adequate protections are in place, including:
- Executing data processing agreements with international service providers that incorporate the data protection standards required by Philippine law.
- Transferring data only to jurisdictions or service providers that offer an equivalent or higher level of data protection than that required under the Data Privacy Act of 2012.
- Implementing additional technical safeguards, such as pseudonymization or encryption, for data transferred across borders.
pw99 does not transfer your personal data to international third parties for marketing purposes. Any cross-border transfer is limited to the minimum data necessary for the specific processing purpose and is subject to the controls described above.
pw99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, platform features, or regulatory requirements. When we make material changes to this policy, we will:
- Update the "Last Updated" date at the top of this page.
- Send an email notification to all registered players at their address on file, at least fourteen (14) days before the changes take effect.
- Display a prominent notice on the pw99 platform for a minimum of fourteen (14) days following publication of the updated policy.
Your continued use of the pw99 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must stop using the platform and contact support to arrange account closure before the effective date of the changes.
Non-material changes — such as corrections of typographical errors, clarifications that do not alter the substance of the policy, or updates to contact information — may be made without advance notice. The "Last Updated" date will always reflect the most recent version of this document.
pw99 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests related to your personal data, please contact us through any of the following channels:
- Email: [email protected] — please use the subject line "Privacy Inquiry" or "Data Rights Request" for faster routing to our DPO team.
- Live Chat: Available 24/7 directly on the pw99 platform. For urgent privacy or account security concerns, live chat is the fastest channel.
- Response Times: pw99 acknowledges all privacy-related inquiries within five (5) business days and provides a substantive response within thirty (30) calendar days of receipt.
If you are not satisfied with pw99's response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC), which is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.
pw99 serves players across all regions of the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. We are committed to upholding the privacy rights of every player on our platform, regardless of their location within the Philippines.
Play with Confidence at pw99
Now that you know how pw99 protects your personal data, explore everything the platform has to offer — slots, live dealer, bingo, sports betting, and more. Must be 21+ to participate.
21+ Only | Play Responsibly | Your data is protected under pw99's Privacy Policy