winphp Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how winphp ("winphp", "we", "us", or "our") collects, processes, stores, uses, and discloses personal data relating to individuals ("you", "the Player", "the Data Subject") who access, register on, or otherwise interact with the winphp online gaming platform, accessible at winphp.cam and all associated subdomains and mobile interfaces (the "Platform").

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, the issuances of the National Privacy Commission ("NPC"), and the data handling requirements imposed on winphp as a PAGCOR-licensed operator. It applies to all personal data processed by winphp, regardless of whether that processing occurs digitally or in physical form.

By accessing the Platform or creating a winphp account, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not access or use the winphp Platform. This Policy is intended to be read together with, and forms part of, the winphp Terms & Conditions.

2. Data Controller Identity

For the purposes of the Philippine Data Privacy Act of 2012, winphp acts as the Personal Information Controller in respect of all personal data collected from Players and prospective Players through the Platform.

winphp is a PAGCOR-licensed online gaming operator operating in and for the Philippine market. All data processing activities carried out by winphp in connection with the Platform are conducted in accordance with winphp's PAGCOR licence conditions, the DPA, and the NPC's implementing issuances. Where winphp engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification services, and game platform providers — those parties act as Personal Information Processors under the DPA and are bound by data processing agreements that require them to process data only on winphp's documented instructions and in compliance with applicable law.

3. Data We Collect

winphp collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect are as follows:

3.1 Registration and Account Data

• Full legal name;
• Date of birth (for age verification — 21+ as required by PAGCOR);
• Philippine mobile number;
• Email address;
• Username and encrypted password;
• Preferred language and account settings.

3.2 Identity Verification (KYC) Data

• Government-issued Philippine photo identification (Passport, Driver's Licence, SSS ID, PhilHealth Card, UMID, Voter's ID, or National ID) — document type, number, and expiry date;
• Proof of residential address (utility bill, bank statement, or barangay certificate);
• Facial photograph or selfie for liveness verification where required;
• Proof of payment method ownership (e.g., registered GCash or Maya account name).

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references;
• GCash, Maya, BDO, BPI, UnionBank, Coins.ph, or other payment method account identifiers (registered name and masked account number — winphp does not store full card numbers);
• Bonus claims, wagering records, and game results.

3.4 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, browser type and version;
• Session data including login timestamps and duration;
• Cookie identifiers and similar tracking data (see Section 10).

3.5 Communications Data

• Records of customer support interactions, including chat transcripts and email correspondence;
• Feedback, complaints, and survey responses submitted to winphp.

4. How We Collect Your Data

winphp collects personal data through the following channels:

• Directly from you — during account registration, KYC submission, deposit and withdrawal requests, customer support contacts, and promotional opt-ins;
• Automatically — through cookies, log files, and analytics tools when you access and navigate the Platform (see Section 10);
• From third-party verification services — KYC and identity verification providers engaged by winphp may return verification results and risk scores based on the documents you submit;
• From payment processors — transaction confirmation data and payment method verification results from GCash, Maya, BDO, BPI, UnionBank, and other integrated payment providers;
• From PAGCOR and regulatory authorities — where we are required to act on or record regulatory instructions relating to a Player's account.

5. Legal Bases for Processing

winphp processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

6. How We Use Your Data

winphp uses the personal data we collect for the following purposes:

• To create, verify, maintain, and administer your winphp account;
• To verify your identity and age (21+) in compliance with PAGCOR's licensing conditions and the Anti-Money Laundering Act (RA 9160, as amended by RA 10365);
• To process deposits and withdrawals in Philippine Peso through your registered payment methods (GCash, Maya, BDO, BPI, etc.);
• To detect and prevent fraud, money laundering, account takeover, bonus abuse, and other prohibited conduct as defined in the winphp Terms & Conditions;
• To monitor gameplay for responsible gaming compliance, including the enforcement of deposit limits, self-exclusion status, and session controls where applicable;
• To provide customer support and respond to your enquiries, complaints, and data subject requests;
• To send you transactional communications — account confirmations, withdrawal notifications, security alerts, and service announcements — which are necessary for your use of the Platform;
• To send marketing and promotional communications about winphp offers, new games, and bonuses, where you have provided explicit opt-in consent;
• To comply with our obligations to PAGCOR, the NPC, the AMLC (Anti-Money Laundering Council), and any other competent Philippine regulatory authority;
• To improve the Platform and personalise your experience, using aggregated and anonymised analytics data.

7. Data Sharing & Disclosure

winphp does not sell, rent, or trade your personal data to any third party for their own commercial purposes. winphp may share your personal data with the following categories of recipients, strictly limited to what is necessary for the stated purpose:

• PAGCOR and Philippine regulatory authorities — as required by winphp's licence conditions and applicable law, including mandatory reporting of suspicious transactions to the AMLC;
• KYC and identity verification providers — to verify your identity and age against your submitted documents and government databases;
• Payment processors and financial service providers — including GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, UnionBank, Coins.ph, and other integrated payment partners, for the purpose of processing your deposits and withdrawals;
• Licensed game content providers — the studios and live dealer platform providers whose games are offered on winphp receive minimum necessary data (typically a Player ID and stake value) to facilitate gameplay and result reporting;
• IT and platform infrastructure providers — cloud hosting, cybersecurity, and platform operations partners who process data on winphp's documented instructions under binding data processing agreements;
• Legal and professional advisers — where disclosure is required for legal proceedings, regulatory investigations, or obtaining legal advice;
• Law enforcement and courts — where winphp is compelled to disclose information by a valid legal order, court order, or law enforcement demand under Philippine law.

8. International Data Transfers

Where winphp engages service providers whose data processing infrastructure is located outside of the Philippines — including cloud hosting providers or game platform operators — your personal data may be transferred to and processed in jurisdictions outside the Philippines.

winphp ensures that any international transfer of personal data is conducted in compliance with Section 21 of the DPA and the NPC's rules on cross-border data flows. This includes requiring that recipient jurisdictions provide an adequate level of data protection, or that appropriate safeguards — such as contractual clauses equivalent to NPC-approved standard contractual clauses — are in place between winphp and the receiving entity.

Where you have questions about the specific safeguards applicable to any international transfer of your personal data, you may submit a request to [email protected].

9. Data Retention

winphp retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, winphp will securely delete or anonymise your personal data. Where anonymisation is applied, the resulting data no longer constitutes personal data under the DPA and may be retained indefinitely for analytical purposes.

10. Cookies & Tracking Technologies

winphp uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies — required for the Platform to function, including session authentication, security token management, and load balancing. These cannot be disabled without impairing your ability to use the Platform;
• Functional cookies — remember your preferences such as language settings and whether you have dismissed the cookie notice;
• Analytics cookies — help winphp understand how Players navigate the Platform, which game categories are most visited, and where users encounter friction in the sign-in or deposit process. Analytics data is aggregated and does not identify individual Players;
• Session tracking — used for responsible gaming purposes to monitor session duration and trigger session time reminders where you have enabled this feature on your winphp account.

winphp does not use third-party advertising cookies or share cookie data with advertising networks. You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use the winphp Platform.

11. Security Measures

winphp implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• SSL/TLS encryption (256-bit) for all data transmitted between your device and the winphp Platform — the same standard used by BPI, BDO, and other major Philippine banks for online banking;
• Encryption at rest for sensitive personal information, including KYC documents and government ID data;
• Password hashing using industry-standard algorithms — winphp does not store your password in plain text;
• Multi-factor authentication options for Player account login;
• Role-based access controls limiting employee access to personal data to those with a documented business need;
• Regular security assessments and penetration testing of Platform infrastructure;
• Incident response procedures meeting the NPC's 72-hour mandatory breach notification timeline.

12. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to the personal data winphp holds about you. These rights are subject to applicable exceptions and may be limited by legal or regulatory obligations that require winphp to retain or continue processing your data.