winph22 Privacy Policy

1Introduction

This Privacy Policy ("Policy") describes how winph22 ("winph22," "we," "us," or "our") collects, uses, stores, shares, and protects personal data belonging to users ("Player," "User," or "you") of the winph22 online casino platform accessible at https://winph22.win and all associated subdomains, mobile interfaces, and services (collectively, the "Platform").

winph22 is committed to protecting your privacy and handling your personal data with the transparency, security, and respect it deserves. This Policy has been prepared in compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), relevant National Privacy Commission ("NPC") issuances, and applicable data governance requirements under the Philippine Amusement and Gaming Corporation ("PAGCOR") regulatory framework.

All capitalized terms used but not defined in this Policy shall have the meanings ascribed to them in the winph22 Terms and Conditions, available at /terms-conditions.

2Data Controller Identity

For the purposes of applicable Philippine data privacy law, winph22 is the data controller responsible for your personal data. As data controller, winph22 determines the purposes and means by which your personal data is processed in connection with your use of the Platform.

winph22 has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data protection laws. Contact details for the winph22 DPO are provided in Section 17 of this Policy.

3Personal Data We Collect

winph22 collects the following categories of personal data from and about you:

3.1 Identity and Contact Data

• Full legal name (first name, last name)
• Date of birth
• Government-issued identification number (PhilSys ID, driver's license, or passport number)
• Philippine mobile number
• Email address
• Residential address in the Philippines
• Selfie photograph for KYC identity verification purposes

3.2 Financial Data

• GCash or PayMaya account information (account holder name and registered mobile number)
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where provided for withdrawal
• Debit or credit card details (card type, last four digits, expiry date) where applicable
• Deposit and withdrawal transaction history
• Account balance records in Philippine Peso (PHP)

3.3 Usage and Technical Data

• Internet Protocol (IP) address and approximate geolocation
• Device type, operating system, and browser version
• Login timestamps and session duration records
• Game activity history, including bets placed, games played, and outcomes
• Platform navigation patterns and feature usage data
• Cookie and tracking technology data (see Section 8)

3.4 Communications Data

• Customer support chat transcripts and email correspondence
• Feedback, dispute records, and complaint submissions
• Survey responses and promotional participation records

4How We Collect Your Personal Data

winph22 collects your personal data through the following methods and sources:

4.1 Direct Collection

You provide personal data directly to winph22 when you: complete the account registration form; submit KYC verification documents; deposit or withdraw funds; contact our customer support team; participate in promotions, surveys, or competitions; or update your account profile settings.

4.2 Automated Collection

When you use the Platform, winph22 automatically collects certain technical and usage data through cookies, web beacons, pixel tags, server logs, and similar tracking technologies integrated into the Platform. This includes IP addresses, session data, device information, and gameplay activity. See Section 8 for full details on cookies and tracking.

4.3 Third-Party Sources

winph22 may receive personal data about you from third-party sources including: payment processors (GCash, PayMaya, Philippine banks) when you make a deposit or withdrawal; identity verification service providers during the KYC process; fraud detection and anti-money laundering (AML) screening services; and, where applicable, PAGCOR or other regulatory bodies in connection with licensing compliance requirements.

5How We Use Your Personal Data

winph22 processes your personal data for the following purposes:

6Legal Basis for Processing

winph22 processes your personal data on the following legal grounds under the Data Privacy Act of 2012 and its IRR:

• Consent: Where you have given clear, specific, informed, and freely given consent to the processing of your personal data for a stated purpose, such as opting in to receive marketing communications from winph22.
• Performance of a Contract: Where processing is necessary to fulfill our obligations to you under the winph22 Terms and Conditions — including account management, game provision, and payment processing.
• Legal Obligation: Where processing is necessary to comply with a legal or regulatory obligation to which winph22 is subject, including PAGCOR regulatory requirements, AML obligations, age verification requirements, and mandatory data retention obligations.
• Legitimate Interests: Where processing is necessary for the legitimate interests of winph22 or a third party, such as improving the Platform, detecting and preventing fraud, maintaining platform security, and conducting analytics — provided such interests are not overridden by your rights and freedoms.

Where winph22 relies on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

7Sharing Your Personal Data

winph22 does not sell, rent, or trade your personal data with third parties for their own marketing or commercial purposes under any circumstances. winph22 may share your personal data with the following categories of recipients solely to the extent necessary for the purposes described in this Policy:

7.1 Service Providers and Data Processors

winph22 engages third-party service providers who process personal data on our behalf and under our instruction, including: payment processors (GCash, PayMaya, Philippine banks, Visa, Mastercard); KYC and identity verification service providers; fraud detection and AML screening services; customer support platform providers; IT infrastructure, cloud hosting, and cybersecurity service providers; and analytics and platform performance service providers.

All third-party data processors engaged by winph22 are bound by data processing agreements requiring compliance with applicable data protection laws and the security standards described in this Policy.

7.2 Regulatory and Law Enforcement Authorities

winph22 may disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council ("AMLC"), the Bureau of Internal Revenue, law enforcement agencies, and other competent Philippine government authorities where required by law, court order, regulatory directive, or as necessary to protect the legal rights and interests of winph22 or its Players.

7.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets involving winph22, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections as required by the DPA.

8Cookies and Tracking Technologies

winph22 uses cookies and similar tracking technologies to operate the Platform, enhance your experience, analyze usage patterns, and support security functions. Cookies are small text files stored on your device when you visit the Platform.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These enable login sessions, account authentication, security verification, and basic navigation. They cannot be disabled without disabling the Platform itself.
• Functional Cookies: Remember your preferences (e.g., language, game settings, display preferences) to personalize your experience without requiring you to re-enter settings on each visit.
• Analytics Cookies: Collect anonymized data about how Players use the Platform — which features are used, how long sessions last, and where navigation patterns occur — to help winph22 improve the product.
• Security Cookies: Detect and mitigate fraud, bot activity, unauthorized login attempts, and other security threats. These are essential for Platform integrity.

8.2 Cookie Control

Except for strictly necessary and security cookies, you may manage cookie preferences through the cookie settings panel accessible on the Platform, or through your browser's built-in cookie management tools. Note that disabling functional or analytics cookies may affect your Platform experience. winph22 does not support third-party advertising cookies or cross-site tracking cookies.

9Data Retention

winph22 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, to maintain your account in active or closed status, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce legal rights.

As a guide to our general retention practices:

• Active Account Data: Retained for the full duration of your registered account's active life on the Platform.
• KYC and Identity Verification Records: Retained for a minimum of five (5) years from account closure, in compliance with AML regulatory requirements applicable in the Philippines.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with PAGCOR and AMLC requirements.
• Game Activity Logs: Retained for a minimum of three (3) years from the date of each gaming session.
• Customer Support Records: Retained for three (3) years from the closure of each support interaction or dispute.
• Marketing Consent Records: Retained for the duration of consent and for three (3) years after withdrawal of consent.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with winph22's data disposal procedures. Where anonymization is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for analytical purposes.

10Data Security

winph22 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental or unlawful destruction, loss, alteration, and unauthorized disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the winph22 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols, the same standard applied by Philippine commercial banks.
• Encrypted Data Storage: Personal and financial data stored in winph22's databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within winph22 is restricted on a strict need-to-know basis. All staff with data access undergo background screening, data privacy training, and are bound by confidentiality obligations.
• Multi-Factor Authentication: Administrative access to winph22's systems requires multi-factor authentication. Players are strongly encouraged to enable SMS-based 2FA on their own accounts.
• Security Monitoring: winph22 operates continuous security monitoring, intrusion detection, and automated threat response systems on all Platform infrastructure.
• Regular Security Audits: winph22 conducts periodic third-party security assessments and penetration testing of its Platform and data infrastructure.

In the event of a personal data breach that poses a real risk of serious harm to affected Players, winph22 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players within a reasonable timeframe as required by the DPA and NPC regulations.

11Your Data Rights

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you hold the following rights with respect to your personal data processed by winph22:

To exercise any of the above rights, submit a written request to the winph22 Data Protection Officer using the contact details in Section 17. winph22 will respond to all data rights requests within fifteen (15) business days of receipt. winph22 reserves the right to verify your identity before processing any data rights request to protect against unauthorized access to your information.

Please note that certain rights may be limited where winph22 is required to retain or process data to fulfill a legal obligation, complete a transaction, or resolve a dispute.

12Children's Privacy and Age Restriction

The winph22 Platform is strictly intended for adults aged twenty-one (21) years and above in accordance with PAGCOR regulations governing online gambling in the Philippines. winph22 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

winph22 employs mandatory KYC age verification at account registration to enforce this restriction. Any account found to belong to a person under 21 years of age will be immediately closed, and all associated personal data will be deleted except where retention is required by applicable law for compliance or reporting purposes.

If you have reason to believe that a minor has submitted personal data to winph22, please contact us immediately at the details provided in Section 17 so that appropriate action can be taken promptly.

13Cross-Border Data Transfers

winph22 primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed in countries outside the Philippines — for example, where winph22 engages international game providers, cloud infrastructure services, or KYC verification platforms that operate data centers in other jurisdictions.

Any cross-border transfer of personal data by winph22 is conducted only where: the recipient country provides an adequate level of data protection as determined by the National Privacy Commission; or winph22 has implemented appropriate contractual safeguards, including data processing agreements containing standard contractual clauses approved by the NPC; or the transfer is otherwise authorized under the DPA and its IRR.

winph22 ensures that all personal data transferred outside the Philippines retains the same level of protection as required under Philippine data privacy law, regardless of where it is processed.

14Third-Party Links and Integrations

The winph22 Platform may contain references or integrations involving third-party services such as payment providers (GCash, PayMaya, Philippine banks) and game software providers. When you interact with these third-party services — for example, when authenticating a GCash payment or launching a game powered by a third-party provider — you may be subject to the privacy policies of those third parties.

winph22 is not responsible for the privacy practices, data handling, or content of third-party services or platforms. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the winph22 Platform.

15Marketing Communications

winph22 may send you marketing communications — including promotional offers, bonus notifications, game recommendations, and platform updates — by SMS to your registered Philippine mobile number and by email to your registered email address, where you have opted in to receive such communications.

You may opt out of marketing communications at any time by: clicking the "unsubscribe" link in any marketing email from winph22; replying STOP to any marketing SMS; updating your communication preferences in the Notifications section of your winph22 account dashboard; or contacting our customer support team.

Opting out of marketing communications does not affect transactional communications that are necessary for your account and the Platform's services, such as deposit and withdrawal confirmations, security alerts, KYC requests, account status notifications, and required regulatory communications.

16Updates to this Privacy Policy

winph22 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform services. We will communicate material changes to registered Players via email notification or a prominent in-platform notice at least fourteen (14) days before the revised Policy takes effect, where practicable.

The most current version of this Privacy Policy is always available on the Platform at /privacy-policy and will display the "Last Updated" date at the top of the document. Your continued use of the Platform following the effective date of any revised Policy constitutes your acknowledgment of the updated terms.

We encourage you to review this Policy periodically. If you have questions about any changes, please contact the winph22 Data Protection Officer using the details in Section 17.

17Contact & Data Protection Officer

For any questions, concerns, data rights requests, or complaints regarding this Privacy Policy or winph22's data processing practices, please contact the winph22 Data Protection Officer:

If you are not satisfied with winph22's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC), the supervisory authority responsible for enforcing the Data Privacy Act of 2012.