At 26phwin, your personal data is handled with the same seriousness we bring to every regulatory obligation. This Policy explains exactly what we collect, why we collect it, how we protect it, and what rights you have as a Filipino data subject under the Data Privacy Act of 2012.
Last Updated: June 2026. This Privacy Policy ("Policy") is issued by 26phwin ("Company", "we", "us", "our") and governs the collection, use, storage, and disclosure of personal information you provide to us when using the 26phwin website at 26phwin.co and all associated gaming services. This Policy is compliant with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations, as administered by the National Privacy Commission ("NPC") of the Philippines.
1.1 26phwin is a PAGCOR-regulated online gaming platform serving Filipino players across the Philippines. As a personal information controller under the DPA, 26phwin is responsible for the personal data of all registered players, prospective registrants, and visitors to the 26phwin website.
1.2 This Policy applies to all personal data collected through: (a) the 26phwin website and mobile browser interface; (b) the account registration and KYC verification process; (c) financial transactions including deposits and withdrawals; (d) player support interactions via live chat, email, or phone; (e) participation in games, promotions, and loyalty programmes; and (f) any other interaction between you and 26phwin.
1.3 By registering an account or using the 26phwin platform, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not register for or continue to use the 26phwin platform.
2.1 26phwin collects only the personal data that is necessary for the purposes described in this Policy. The categories of data we collect include:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, gender, nationality, government ID number | KYC verification, age confirmation, AML compliance |
| Contact Data | Mobile number, email address, home address | Account communication, OTP delivery, support |
| Financial Data | GCash number, Maya account, bank account details, transaction history | Deposit processing, withdrawal, fraud prevention |
| Technical Data | IP address, device type, browser, session timestamps | Security monitoring, geolocation compliance, fraud detection |
| Gaming Data | Bet history, game sessions, win/loss records, bonus usage | Gaming operations, responsible gaming monitoring, dispute resolution |
| Communications Data | Live chat transcripts, support emails, feedback submissions | Support delivery, quality assurance, dispute records |
2.2 26phwin does not collect sensitive personal information as defined under the DPA — such as religious affiliation, health records, or political opinions — unless legally required for a specific regulatory compliance purpose, in which case explicit consent will be obtained.
2.3 We collect data directly from you at registration and during your use of the platform, and indirectly through automated technical tools such as cookies, server logs, and payment processor confirmation signals.
3.1 26phwin processes your personal data for the following purposes:
3.2 26phwin does not use your personal data for automated individual decision-making that produces legal or similarly significant effects without human review.
4.1 Under the Data Privacy Act of 2012, 26phwin processes personal data on the following legal bases:
5.1 26phwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following circumstances:
5.2 All third-party service providers engaged by 26phwin are required to process personal data only for the specified purpose, to implement adequate data security measures, and to comply with applicable Philippine data protection law.
5.3 26phwin does not transfer personal data outside the Philippines except where legally required for payment processing or regulatory reporting, and only to jurisdictions with adequate data protection standards or under appropriate contractual safeguards.
6.1 The 26phwin website uses cookies — small text files stored on your device — and similar tracking technologies including web beacons and session identifiers. Cookies are used for the following purposes:
6.2 You may manage non-essential cookie preferences through your browser settings at any time. Disabling essential cookies will affect your ability to log in and use the 26phwin platform.
7.1 26phwin retains personal data for the period necessary to fulfil the purpose for which it was collected, subject to minimum retention periods mandated by Philippine law:
7.2 Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with NPC guidelines.
8.1 26phwin implements technical and organisational security measures appropriate to the risk level of the personal data we process. These include:
8.2 In the event of a personal data breach that is likely to result in serious harm to data subjects, 26phwin will notify the NPC within seventy-two (72) hours of discovery, and will notify affected players without undue delay, in accordance with NPC Circular 16-03.
9.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 26phwin:
9.2 To exercise any of these rights, contact our Data Protection Officer via the details in Section 12. We will respond to verified requests within thirty (30) days. Some requests may be subject to legal limitations where retention is mandated by PAGCOR or AMLA requirements.
10.1 The 26phwin platform is strictly for persons aged 21 years and above, as required under PAGCOR regulations. 26phwin does not knowingly collect personal data from individuals under 21 years of age.
10.2 If we become aware that personal data has been collected from an individual under 21, we will immediately close the associated account, return any deposited funds to the payment source, and delete all personal data associated with that account.
10.3 If you believe that an individual under 21 has registered on the 26phwin platform, please notify us immediately via our 24/7 live chat or by email so that we can take prompt action.
11.1 26phwin may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. The updated effective date will be displayed at the top of this page.
11.2 For material changes — particularly those that expand the purposes for which we process your personal data or introduce new categories of third-party disclosure — 26phwin will notify registered players via SMS or email to their registered Philippine contact details at least seven (7) days before the changes take effect.
11.3 Continued use of the 26phwin platform after the effective date of updated Policy constitutes your acceptance. Players who do not accept material changes may request account closure without penalty.
12.1 26phwin has appointed a Data Protection Officer ("DPO") as required under the Data Privacy Act of 2012 and NPC Circular 17-01. The DPO is responsible for overseeing compliance with this Policy and with applicable Philippine data protection law.
12.2 To contact our DPO, exercise your data subject rights, or raise a data privacy concern, please reach us via:
12.3 If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.
Six ways 26phwin puts your data privacy and security first — not as a compliance checkbox, but as a genuine obligation to every player on our platform.
26phwin's data privacy programme is built around the Data Privacy Act of 2012 and the implementing regulations of the National Privacy Commission. Our appointed Data Protection Officer ensures ongoing compliance, responds to data subject requests, and manages breach notification procedures in accordance with Philippine law.
26phwin does not sell, rent, or monetise your personal data to third-party advertisers or data brokers. The only parties who receive your data are those directly involved in providing services you use — payment processors for your GCash transactions, game providers for your gaming sessions, and PAGCOR as required by our licence.
Every data transmission between your device and 26phwin servers is protected by TLS encryption. Stored personal and financial data is encrypted at rest. Our security architecture meets the same standards applied by Philippine digital banking institutions — because your financial and identity data deserves that level of protection.
You have the right to access, correct, delete, and port your personal data held by 26phwin, as guaranteed under the DPA. All rights requests are handled by our DPO and responded to within 30 days. We do not create friction or unnecessary barriers around exercising your legal privacy rights.
We keep your data only for as long as legally required — no indefinite storage "just in case." AMLA and PAGCOR set minimum retention periods for financial and KYC records; beyond those mandated periods, data is securely deleted or anonymised. You will not find five-year-old personal data floating in an insecure archive somewhere.
If a personal data breach occurs that poses serious risk to affected players, 26phwin is committed to notifying the NPC within 72 hours and affected players without undue delay — as required under NPC Circular 16-03. We maintain incident response procedures specifically for this scenario so that response is fast and transparent.
Play on a PAGCOR-regulated platform that takes Philippine data privacy law seriously. 26phwin is the online casino built for Filipino players — with GCash payments, JILI slots, live casino, and a privacy programme that protects you. For players aged 21 and above only.