swinph Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. About This Privacy Policy

This Privacy Policy ("Policy") describes how swinph ("swinph", "we", "us", or "our") — the operator of the online gaming platform accessible at swinph.cam — collects, processes, stores, and protects the personal information of registered players and website visitors ("you", "your", "Player").

This Policy applies to all personal data collected through your use of the swinph Platform, including account registration, identity verification, payment transactions, gameplay activity, customer support interactions, and any other engagement with swinph's products and services.

By registering an account on swinph or by continuing to use the Platform after this Policy has been published or amended, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Data Controller

swinph is the personal information controller responsible for determining the purposes and means of processing personal data collected through the swinph Platform. As the controller, swinph is responsible for ensuring that all data processing activities comply with the Data Privacy Act of 2012 and other applicable Philippine data protection regulations.

swinph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection law. Players may contact the DPO for privacy-related inquiries, requests to exercise data subject rights, and complaints relating to data processing.

Contact details for swinph's Data Protection Officer are provided in Section 15 of this Policy.

3. Personal Data We Collect

swinph collects personal data from players through various touchpoints during the account lifecycle. The categories of personal data collected are described below:

swinph collects personal data directly from players at the point of registration and during ongoing platform use. We may also collect data from identity verification services and payment processors in order to validate the information you provide.

4. How We Use Your Personal Data

swinph processes personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your swinph player account, including authentication, password management, and account security.
• Identity Verification (KYC): Verifying your identity and age (minimum 21 years) as required by PAGCOR regulatory requirements and anti-money laundering obligations.
• Payment Processing: Facilitating deposits and withdrawals through GCash, Maya, BPI, BDO, Metrobank, and GrabPay. Verifying that payment methods belong to you and are not being used fraudulently.
• Game Delivery: Enabling your access to and participation in slots, live casino, bingo, fish games, and other titles on the swinph Platform.
• Responsible Gaming: Monitoring gaming activity to identify indicators of problem gambling behavior and to administer responsible gaming tools, including deposit limits, session timers, and self-exclusion programs.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, and other prohibited conduct on the Platform.
• Regulatory Compliance: Meeting our obligations under PAGCOR regulations, the Data Privacy Act of 2012, Anti-Money Laundering Act (AMLA), and other applicable Philippine legislation.
• Customer Support: Responding to inquiries, resolving disputes, and providing account assistance through live chat, email, and other support channels.
• Service Improvement: Analyzing platform usage, game performance, and player behavior (in anonymized or aggregated form) to improve the swinph product and user experience.
• Marketing Communications (with consent): Sending promotional offers, bonus notifications, new game announcements, and platform updates to players who have opted in to receive marketing communications.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, swinph processes personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you agreed to upon registration — including account creation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulations, AMLA obligations, and DPA 2012 requirements.
• Legitimate Interest: Processing necessary for swinph's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests do not override your privacy rights.
• Consent: Processing based on your explicit consent, including the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Third-Party Disclosure

swinph does not sell, rent, or trade your personal data to third parties for their own independent commercial purposes. Your data is shared only in the following limited circumstances:

• Payment Service Providers: GCash (GXI), Maya (Paymaya Philippines), BPI, BDO, Metrobank, and GrabPay require account and transaction details to process deposits and withdrawals. Data shared is limited to what is strictly necessary for transaction execution.
• Game Content Providers: Third-party game suppliers (such as Evolution Gaming, Pragmatic Play, JILI, and PG Soft) may receive technical session identifiers and bet data required for game functionality. These providers are contractually prohibited from using such data for any purpose other than game delivery.
• Identity Verification Services: swinph may use third-party KYC and identity verification services to validate player identity and age. Document data shared with these services is governed by the provider's own data handling terms, which swinph reviews for DPA 2012 compliance before engagement.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other relevant Philippine government authorities may require disclosure of player data in the exercise of their regulatory powers. swinph will comply with all lawful regulatory requests.
• Legal Proceedings: swinph may disclose personal data where required by court order, legal process, or to protect the legal rights of swinph or third parties.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving swinph, player data may be transferred as part of that transaction. Players will be notified of any such transfer that materially affects the terms of this Policy.

7. Cookies & Tracking Technologies

swinph uses cookies and similar tracking technologies to operate the Platform and improve the player experience. A cookie is a small text file stored on your device by your browser when you visit swinph.

swinph uses the following types of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your login state, security tokens, and preferences. These cookies cannot be disabled without affecting core Platform functionality.
• Performance Cookies: Used to collect anonymized analytics data about how players use the Platform — including pages visited, game sessions initiated, and load times. This data helps swinph identify and resolve performance issues.
• Functional Cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience on return visits.
• Security Cookies: Used for fraud detection and account security monitoring, including identifying login attempts from unfamiliar devices or geographic locations.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent your access to the swinph Platform. swinph does not use third-party advertising or cross-site tracking cookies.

8. Data Retention

swinph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations.

• Active Accounts: Personal data associated with active swinph accounts is retained for the duration of the account relationship and for a period thereafter as required for legal, regulatory, and dispute resolution purposes.
• KYC and AML Records: Identity verification documents and AML-related transaction records are retained for a minimum of five (5) years from the date of the last transaction, in accordance with the Anti-Money Laundering Act.
• Gaming Transaction Records: Bet, win/loss, and payment transaction records are retained for a minimum of five (5) years for regulatory compliance and dispute resolution.
• Support Records: Customer support interaction records are retained for three (3) years from the date of the last interaction.
• Marketing Data: Marketing preference records and consent logs are retained until consent is withdrawn, after which marketing activity ceases, though consent withdrawal records are retained for evidential purposes.
• Closed Accounts: Upon voluntary account closure or account termination, personal data is retained for the periods specified above, then securely deleted or anonymized.

9. Data Security Measures

swinph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, or disclosure:

• Encryption in Transit: All data transmitted between your device and the swinph Platform is encrypted using TLS (Transport Layer Security) with 256-bit encryption standards.
• Encryption at Rest: Sensitive personal data stored on swinph servers, including identity documents and financial data, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within swinph's internal systems is restricted on a need-to-know basis. All staff with data access undergo privacy and security training and are bound by confidentiality obligations.
• Two-Factor Authentication: Player accounts are protected by optional two-factor authentication via SMS OTP. swinph's administrative systems require multi-factor authentication for all staff access.
• Penetration Testing: swinph conducts regular security assessments, including vulnerability scans and penetration testing, to identify and remediate security weaknesses before they can be exploited.
• Incident Response: swinph maintains a documented data breach incident response plan, enabling rapid detection, containment, and notification in the event of a security incident.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, as a data subject you hold the following rights with respect to your personal data processed by swinph:

11. Children & Minors

If swinph becomes aware that personal data has been collected from an individual who is under 21 years of age, the associated account will be immediately suspended and the personal data will be deleted in accordance with our data retention and security procedures. Any funds held in an underage account will be handled in accordance with applicable regulatory guidance.

Parents or guardians who believe their child's information may have been collected by swinph should contact support at [email protected] immediately to request account investigation and data deletion.

12. Cross-Border Data Transfers

swinph is a Philippines-based platform and processes player data primarily within Philippine jurisdiction. Where data is processed or stored by third-party service providers whose infrastructure is located outside the Philippines — such as international game content providers or cloud infrastructure services — swinph ensures that appropriate safeguards are in place to protect the transferred data.

These safeguards include contractual clauses that require overseas processors to provide a standard of data protection equivalent to that required by the Philippine Data Privacy Act of 2012, and swinph carries out due diligence on any third-party processor before engagement.

By registering and using the swinph Platform, you acknowledge that your data may be transferred to and processed in jurisdictions outside the Philippines in accordance with the safeguards described in this Policy.

13. Marketing Communications

With your consent, swinph may send you promotional communications including bonus offers, free spins notifications, new game announcements, tournament information, and platform updates. These communications may be sent via SMS to your registered Philippine mobile number or via the swinph Platform's notification system.

You may opt in to marketing communications during account registration or at any time through your account settings. You may withdraw your marketing consent at any time by:

• Updating your notification preferences in your swinph account settings.
• Contacting swinph support at [email protected] with a request to unsubscribe.

Withdrawal of marketing consent will not affect your access to the swinph Platform, your account balance, or any other account functions. Transactional communications — such as withdrawal confirmations, OTPs, account security alerts, and KYC verification notices — are not marketing communications and cannot be opted out of while your account remains active.

14. Changes to This Privacy Policy

swinph may update this Privacy Policy periodically to reflect changes in our data processing practices, regulatory requirements, or platform features. When material changes are made, swinph will notify registered players via SMS to their registered mobile number or via a prominent notice on the swinph Platform, prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this document. Players are encouraged to review this Policy periodically. Your continued use of the swinph Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

If you disagree with any changes to this Policy, you should cease using the Platform and may request account closure by contacting swinph support.

15. Contact & Privacy Complaints

For any questions, concerns, or requests regarding this Privacy Policy or swinph's data processing practices, please contact swinph's Data Protection Officer:

If you believe swinph has not adequately addressed your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the regulatory authority responsible for enforcing the Data Privacy Act of 2012. Information on how to contact the NPC and file a complaint is available through the NPC's official government channels.

swinph welcomes feedback on its privacy practices and is committed to resolving all data subject concerns promptly, fairly, and in full compliance with applicable Philippine data protection law.