lawinplay Privacy Policy

1. Introduction

1.1 lawinplay is committed to protecting the privacy and personal data of all players who use our online gaming platform. We understand that trust is the foundation of any relationship between a player and their gaming platform, and we take our data protection obligations seriously.

1.2 This Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). It applies to all personal data collected by lawinplay in connection with the operation of the Platform.

1.3 lawinplay acts as the Personal Information Controller (PIC) in respect of the personal data it collects from players. Where lawinplay engages third-party service providers to process data on its behalf, those providers act as Personal Information Processors (PIPs) and are bound by data processing agreements consistent with the requirements of the DPA 2012.

1.4 This Policy applies to all users of the lawinplay Platform, including registered players, visitors to lawinplay.one who have not yet registered, and any person who contacts lawinplay's customer support team.

2. Personal Data We Collect

2.1 Registration Data. When you create a lawinplay account, we collect the following information:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (to verify that you are 21 years of age or older);
• Philippine mobile number;
• Email address;
• Username and password (password is stored in hashed form and is never accessible to lawinplay staff);
• Residential address in the Philippines.

2.2 Identity Verification (KYC) Data. To comply with PAGCOR regulations and Philippine anti-money laundering laws, we may collect:

• Copies of government-issued identification documents (e.g., PhilSys National ID, driver's license, passport, SSS/GSIS ID, voter's ID);
• Proof of address documents (e.g., utility bill, bank statement);
• Selfie photographs for identity verification purposes;
• Source of funds declarations where required by applicable regulations.

2.3 Financial Data. When you make deposits or request withdrawals, we collect:

• GCash or PayMaya (Maya) account details;
• Bank account details (bank name, account number, account name) for bank transfer transactions;
• Debit card details (card number, expiry date) where applicable — card data is processed by our PCI-DSS compliant payment processor and is not stored on lawinplay's servers;
• Transaction history and amounts.

2.4 Gaming Activity Data. We collect records of your gaming activity on the Platform, including game sessions, bets placed, outcomes, bonus usage, and account balance history. This data is retained for regulatory compliance and dispute resolution purposes.

2.5 Technical Data. We automatically collect certain technical information when you access the Platform, including your IP address, device type and operating system, browser type and version, session timestamps, and pages visited. This data is used for security monitoring, fraud prevention, and Platform optimization.

2.6 Communications Data. We retain records of communications between you and lawinplay's customer support team, including live chat transcripts and email correspondence, for quality assurance and dispute resolution purposes.

3. How We Collect Your Data

3.1 Directly from You. The majority of personal data we hold is provided directly by you during the registration process, KYC verification, deposit and withdrawal transactions, and communications with our support team.

3.2 Automatically. Technical data is collected automatically through cookies, web beacons, and server logs when you access the Platform. See Section 9 for more information about our use of cookies.

3.3 From Third Parties. We may receive personal data about you from third-party identity verification providers, payment processors, and fraud prevention services engaged by lawinplay to assist with KYC compliance and transaction security. We may also receive information from PAGCOR or other regulatory bodies in connection with our licensing obligations.

4. How We Use Your Personal Data

4.1 lawinplay uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your lawinplay account, including processing deposits and withdrawals and managing your account balance;
• Identity Verification: To verify your identity and age in compliance with PAGCOR requirements and Philippine anti-money laundering regulations;
• Regulatory Compliance: To fulfill our obligations under applicable Philippine laws and regulations, including the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and PAGCOR licensing conditions;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform;
• Customer Support: To respond to your inquiries, resolve disputes, and provide assistance through our live chat and email support channels;
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits and self-exclusion;
• Platform Improvement: To analyze usage patterns and improve the functionality, performance, and user experience of the lawinplay Platform;
• Marketing Communications: To send you promotional offers, bonus notifications, and news about lawinplay — subject to your communication preferences and your right to opt out at any time.

5. Legal Basis for Processing

5.1 lawinplay processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and lawinplay (i.e., the Terms and Conditions), including account management, payment processing, and game provision;
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AMLA obligations, and NPC directives;
• Legitimate Interests: Processing is necessary for lawinplay's legitimate interests in fraud prevention, Platform security, and business improvement, provided those interests are not overridden by your rights and interests;
• Consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing and Disclosure

6.1 lawinplay does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya (Maya), and banking partners, to process your deposits and withdrawals;
• Identity Verification Providers: Third-party KYC and AML compliance service providers engaged to assist with identity verification;
• Game Providers: Third-party game software providers whose games are available on the Platform, to the extent necessary for game operation and dispute resolution;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government agencies, where disclosure is required by law or regulatory directive;
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required by court order or applicable law;
• IT and Security Providers: Cloud hosting, cybersecurity, and fraud detection service providers engaged by lawinplay to operate and secure the Platform.

6.2 All third-party service providers engaged by lawinplay are required to process personal data only in accordance with lawinplay's instructions and in compliance with the Data Privacy Act of 2012.

7. Data Retention

7.1 lawinplay retains personal data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

7.2 In general, lawinplay retains account data and transaction records for a minimum of five (5) years following account closure, in accordance with PAGCOR requirements and Philippine anti-money laundering regulations.

7.3 KYC documentation is retained for a minimum of five (5) years following the end of the business relationship, as required by the Anti-Money Laundering Act.

7.4 Where you request deletion of your personal data, lawinplay will assess the request in light of its legal retention obligations. Data that is required to be retained by law cannot be deleted prior to the expiry of the applicable retention period, even upon request.

8. Data Security

8.1 lawinplay implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the lawinplay Platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of Platform infrastructure;
• Two-factor authentication requirements for administrative access to systems holding personal data;
• Staff training on data protection obligations and information security best practices.

8.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, lawinplay will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with the requirements of the Data Privacy Act of 2012.

8.3 While lawinplay takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You acknowledge that you provide your personal data at your own risk and are encouraged to take steps to protect your own account security as described in the lawinplay Terms and Conditions.

9. Cookies & Tracking Technologies

9.1 lawinplay uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that allow us to recognize your browser and remember certain information about your session.

9.2 lawinplay uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management, authentication, and security. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences and settings (e.g., language, display preferences) to provide a more personalized experience.
• Analytics Cookies: Collect anonymized information about how visitors use the Platform, helping us understand usage patterns and improve Platform performance.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. These cookies are only set with your consent.

9.3 You can control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are essential for Platform operation.

10. Your Data Subject Rights

10.1 Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by lawinplay:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Policy;
• Right of Access: The right to request a copy of the personal data lawinplay holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data, subject to lawinplay's legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission if you believe your data protection rights have been violated.

10.2 To exercise any of the above rights, please contact lawinplay's Data Protection Officer at the contact details provided in Section 14. lawinplay will respond to all data subject requests within thirty (30) days of receipt, in accordance with NPC guidelines.

10.3 lawinplay may request proof of identity before processing a data subject request to ensure that personal data is not disclosed to unauthorized persons.

11. Children's Privacy

11.1 The lawinplay Platform is strictly intended for persons aged 21 years and older. lawinplay does not knowingly collect personal data from persons under the age of 21. If lawinplay becomes aware that it has inadvertently collected personal data from a person under 21, it will take immediate steps to delete that data and close the associated account.

11.2 If you are a parent or guardian and believe that your child has registered on the lawinplay Platform, please contact our support team immediately so that we can investigate and take appropriate action.

12. Third-Party Links

12.1 The lawinplay Platform may contain references to third-party services (such as payment providers). lawinplay is not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party services you access in connection with your use of the Platform.

13. Changes to This Privacy Policy

13.1 lawinplay reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via email or in-platform notification at least seven (7) days before taking effect.

13.2 The date of the most recent revision is indicated at the top of this Policy. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

13.3 We encourage you to review this Policy periodically to stay informed about how lawinplay protects your personal data.

14. Contact Us

14.1 If you have any questions, concerns, or requests regarding this Privacy Policy or lawinplay's data protection practices, please contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 through your lawinplay account dashboard
• Support Email: [email protected]

14.2 If you are not satisfied with lawinplay's response to your data protection concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.