lawinplay Privacy Policy – How We Handle Your Personal Data in the Philippines

When you register an account on lawinplay, we collect personal details including your full name, date of birth, email address, mobile number, and a username of your choice. During the identity verification process required under Philippine gaming regulations, we may also request a government-issued ID such as a Philippine passport, SSS card, or driver's licence. When you make deposits or withdrawals, we collect transaction details including the payment method used, the amount in Philippine pesos (PHP), and the date and time of the transaction. We also automatically collect technical data when you use the platform, such as your IP address, device type, browser version, and session duration. This technical data helps us detect unusual activity, improve platform performance, and ensure a stable mobile experience for players across Luzon, Visayas, and Mindanao. We do not collect sensitive personal information such as your religion, political views, or health records. All data collection is limited to what is necessary to operate the platform and comply with applicable Philippine laws.

The personal information you provide is used primarily to create and manage your lawinplay account, process deposits and withdrawals in PHP, and verify your identity in line with regulatory requirements. We use your contact details to send you important account notifications, such as transaction confirmations, security alerts, and updates to our Terms and Conditions or this Privacy Policy. Your gaming activity data is used internally to monitor for responsible gaming concerns and to detect any patterns that may indicate fraudulent or prohibited behaviour. Technical data such as device type and IP address is used to optimise the platform's performance on mobile devices and to ensure that our services are accessible to players throughout the Philippines. We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. We may use anonymised and aggregated data — which cannot identify you individually — for internal analytics, product development, and platform improvement. We will never use your data to send unsolicited third-party marketing communications without your explicit consent.

lawinplay does not sell, rent, or trade your personal information to any third party for commercial purposes. Your data may be shared with trusted service providers who assist us in operating the platform, such as payment processors that handle PHP transactions and identity verification partners — all of whom are contractually bound to handle your data securely and only for the purposes we specify. In certain circumstances, we may be legally required to disclose your personal information to Philippine government authorities, regulatory bodies, or law enforcement agencies, and we will comply with such lawful requests. If lawinplay undergoes a business restructuring, merger, or acquisition, your data may be transferred to the successor entity, and you will be notified of any such change in advance. We do not share your data with other players or make any personal information publicly visible on the platform. All third-party partners who receive your data are required to maintain confidentiality and implement appropriate security measures. You may request a list of the categories of third parties with whom your data has been shared by contacting [email protected].

We implement industry-standard technical and organisational security measures to protect your personal and financial information from unauthorised access, disclosure, alteration, or destruction. All data transmitted between your device and the lawinplay platform is encrypted using secure protocols, ensuring that your login credentials and payment details are protected during every session. Access to personal data within our organisation is restricted to authorised personnel who require it to perform their job functions, and all staff are trained on data protection obligations. We conduct regular security reviews and vulnerability assessments to identify and address potential risks to the platform's data infrastructure. In the event of a data breach that is likely to affect your rights or freedoms, we will notify you and the relevant Philippine authorities within the timeframes required by applicable law. While we take every reasonable precaution, no online platform can guarantee absolute security, and we encourage you to use a strong, unique password for your lawinplay account and to enable any available account security features. If you suspect that your account has been compromised, please contact [email protected] immediately.

As a player based in the Philippines, you have the right to access the personal data that lawinplay holds about you at any time by submitting a written request to [email protected]. You may also request that we correct any inaccurate or incomplete information associated with your account, and we will process such requests promptly. If you wish to have your personal data deleted, you may request erasure subject to any legal obligations that require us to retain certain records — for example, transaction histories required for regulatory compliance. You have the right to object to the processing of your data for purposes beyond those strictly necessary to operate your account, and to withdraw any consent you have previously given. If you believe that your data has been handled in a way that violates this Privacy Policy or applicable Philippine law, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. We will respond to all data rights requests within a reasonable timeframe and will keep you informed of the progress of your request. Your rights under this policy are in addition to, and do not limit, any rights you may have under Philippine data protection legislation.

lawinplay retains your personal data for as long as your account remains active and for a period thereafter as required by Philippine gaming regulations and financial record-keeping obligations. Transaction records, identity verification documents, and account activity logs are typically retained for a minimum of five years following account closure, in line with anti-money laundering requirements applicable to online gaming operators in the Philippines. Technical data such as IP logs and session records are retained for a shorter period and are used solely for security monitoring and fraud prevention purposes. Once the applicable retention period has expired, your personal data is securely deleted or anonymised so that it can no longer be linked to you. If you close your account voluntarily, we will begin the data retention countdown from the date of closure and will notify you of the expected deletion timeline upon request. You may contact [email protected] to ask about the specific retention period that applies to your account data. We do not retain data beyond what is necessary for the purposes described in this policy or required by law.

lawinplay may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable Philippine laws and regulations. When material changes are made, the revised policy will be published on this page with an updated effective date, and registered players will be notified via the contact details associated with their account. We encourage you to review this page periodically so that you are always aware of how your personal information is being handled. Your continued use of the platform after any changes have been posted constitutes your acceptance of the updated Privacy Policy. If you do not agree with a change, you should stop using the platform and contact [email protected] to request account closure. Minor clarifications or corrections that do not affect the substance of the policy may be made without prior notice. This Privacy Policy is governed by the laws of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173).