lawinplay Privacy Policy

1. Introduction

lawinplay is the Philippines' trusted online casino and sports betting platform, operating under the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR). As a PAGCOR-regulated operator, lawinplay is bound by applicable Philippine data privacy laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).

This Policy describes our practices regarding the collection, use, storage, sharing, and protection of personal data obtained from players, prospective players, and visitors to the lawinplay Platform. We are committed to processing your personal data lawfully, fairly, and transparently, and only for the purposes described in this Policy.

References to "personal data" in this Policy include any information that identifies or could reasonably be used to identify you as an individual — for example, your name, email address, mobile number, date of birth, government-issued identification number, and financial account details linked to your lawinplay account.

2. Personal Data We Collect

lawinplay collects personal data through the following channels and categories:

2.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, nationality, residential address (including barangay, city, and province), email address, and mobile number — required to create a lawinplay account.
• Identity Verification (KYC) Data: Government-issued identification documents (e.g., PhilSys ID, UMID, passport, driver's licence), selfie photographs, and proof of address documents submitted to verify your identity and age.
• Financial Data: GCash or PayMaya mobile number, bank account details (BPI, BDO, Metrobank, or other linked Philippine banks), and transaction records associated with deposits and withdrawals on your lawinplay account.
• Communications Data: Content of messages sent to lawinplay support via live chat, email, or other contact channels.

2.2 Data Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers collected when you access the lawinplay Platform.
• Usage Data: Pages visited, games played, session duration, bet history, click patterns, and navigation paths within the lawinplay Platform.
• Location Data: General geographic location derived from your IP address, used to verify that your access complies with applicable jurisdictional restrictions.
• Cookies and Similar Technologies: See Section 7 for details on cookie usage.

3. How We Use Your Personal Data

lawinplay processes your personal data for the following purposes and on the following legal bases:

• Account Management: To create, maintain, and administer your lawinplay account, including processing your login credentials, account settings, and communication preferences. Legal basis: performance of contract.
• Identity Verification & KYC Compliance: To verify your identity, confirm your age (21+ requirement), and comply with PAGCOR's Know Your Customer obligations. Legal basis: compliance with legal obligation.
• Payment Processing: To process deposits and withdrawals to and from your lawinplay wallet via GCash, PayMaya, or linked Philippine bank accounts. Legal basis: performance of contract.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct on the Platform. Legal basis: legitimate interests and legal obligation.
• Regulatory Compliance: To comply with PAGCOR reporting requirements, respond to lawful requests from government authorities, and fulfill obligations under Philippine law. Legal basis: legal obligation.
• Responsible Gaming: To monitor gameplay patterns and identify players who may be exhibiting signs of problem gambling, and to administer self-exclusion requests. Legal basis: legitimate interests and legal obligation.
• Customer Support: To respond to your enquiries, complaints, and support requests submitted to lawinplay's 24/7 support team. Legal basis: performance of contract.
• Platform Improvement: To analyze usage patterns, diagnose technical issues, and improve the features and performance of the lawinplay Platform. Legal basis: legitimate interests.
• Marketing Communications: To send you information about lawinplay promotions, bonuses, and new features — only where you have provided your consent to receive such communications. You may withdraw consent at any time via your account settings. Legal basis: consent.

4. Data Sharing and Disclosure

lawinplay does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with third parties in the following limited circumstances:

• Service Providers: Third-party vendors who provide services on our behalf — including payment processors (GCash/PayMaya integration partners), identity verification providers, cloud hosting services, and customer support software — under strict contractual data processing agreements that prohibit use of your data for any purpose beyond providing services to lawinplay.
• Game Providers: Licensed game studios and aggregators whose games are available on the lawinplay Platform may receive anonymized session and gameplay data for technical and compliance purposes. Your personally identifiable information is not shared with game providers.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies as required by law or court order.
• Law Enforcement: Where disclosure is required to comply with a valid legal process, court order, or to protect the rights, property, or safety of lawinplay, its players, or the public.
• Corporate Transactions: In the event of a merger, acquisition, or sale of lawinplay assets, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

5. Data Retention

lawinplay retains your personal data for as long as your account is active and for such additional period as is required to fulfill the purposes described in this Policy or to comply with applicable legal, regulatory, and reporting obligations. Specifically:

• Account Data: Retained for the duration of your lawinplay account and for a minimum of five (5) years following permanent account closure, in compliance with PAGCOR record-keeping requirements and anti-money laundering regulations.
• Transaction Records: Financial transaction records including deposit and withdrawal history are retained for a minimum of five (5) years as required under Philippine financial regulations.
• KYC Documents: Identity verification documents are retained for as long as required under applicable PAGCOR and AMLC compliance obligations.
• Support Communications: Records of customer support interactions are retained for three (3) years for quality assurance and dispute resolution purposes.
• Marketing Consent: Marketing preferences and consent records are retained until consent is withdrawn and for a reasonable period thereafter as evidence of compliance.

Upon expiry of applicable retention periods, lawinplay will securely delete or anonymize your personal data in a manner consistent with industry standards for secure data disposal.

6. Security Measures

lawinplay implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the lawinplay Platform is encrypted using industry-standard SSL/TLS technology — the same encryption used by major Philippine banks for online banking services.
• Access Controls: Access to personal data is restricted to lawinplay employees and contractors on a strict need-to-know basis. All personnel with access to personal data are bound by confidentiality obligations.
• Two-Factor Authentication: lawinplay offers two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorized login.
• Fraud Monitoring: Automated and manual monitoring systems continuously analyze account activity for indicators of fraud, account takeover, and other security threats.
• Data Storage: Personal data is stored on secure servers with access restricted by firewalls, intrusion detection systems, and regular security audits.
• Incident Response: lawinplay maintains a data breach response plan consistent with NPC requirements, including notification obligations where a breach is likely to result in risk to affected data subjects.

While lawinplay takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. You are encouraged to use a strong, unique password for your lawinplay account and to enable 2FA to further protect your account.

7. Cookies & Tracking Technologies

The lawinplay Platform uses cookies and similar tracking technologies to enhance your user experience, maintain your session, analyze usage patterns, and support the security features of the Platform. Categories of cookies used include:

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state and security cookies that support fraud prevention measures. These cookies cannot be disabled.
• Functional Cookies: Used to remember your account preferences, language settings, and customizations within the lawinplay Platform.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the Platform — which pages are most visited, how players navigate between features, and where technical issues occur. This information is used to improve the lawinplay Platform.
• Marketing Cookies: Where you have provided consent, these cookies are used to deliver relevant promotional content about lawinplay features and offers based on your interests and usage history.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the lawinplay Platform, including the ability to maintain your login session.

8. Your Data Subject Rights

Under the Data Privacy Act of 2012, Filipino players have the following rights with respect to personal data held by lawinplay:

• Right to Be Informed: The right to be notified of the purposes for which your personal data is collected and processed — which this Policy fulfills.
• Right of Access: The right to request a copy of the personal data lawinplay holds about you and information about how it is being processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data in your lawinplay account. You may update most account information directly through your account settings.
• Right to Erasure: The right to request deletion of your personal data, subject to lawinplay's legal retention obligations under PAGCOR regulations and applicable Philippine law.
• Right to Data Portability: The right to request a structured, commonly used copy of your personal data in a format that allows you to transmit it to another service provider.
• Right to Object: The right to object to processing of your personal data for direct marketing purposes. You may withdraw marketing consent at any time via your account settings.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact lawinplay's support team via live chat or by writing to our support email. lawinplay will respond to verified requests within the timeframe prescribed by applicable law.

9. Minors

The lawinplay Platform is strictly restricted to individuals who are 21 years of age or older, in compliance with PAGCOR regulations. lawinplay does not knowingly collect personal data from individuals under the age of 21.

If lawinplay becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account and delete the collected data as soon as practicable, subject only to retention obligations required for fraud prevention and regulatory compliance purposes.

10. Changes to This Privacy Policy

lawinplay reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.

Where a change to this Policy materially affects how your personal data is processed, lawinplay will notify you via email to your registered address or through a notice displayed within the lawinplay Platform prior to the change taking effect. Continued use of the Platform following notification of a material change constitutes your acceptance of the updated Policy.

We encourage all lawinplay players to review this Policy periodically to stay informed about how we protect your personal data.

11. Contact & Data Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a privacy concern, please contact lawinplay through the following channels: