winph1 Privacy Policy

This Privacy Policy ("Policy") describes how winph1 ("winph1", "we", "us", "our") collects, processes, stores, and protects the personal information of users ("Player", "User", "you") who access or use the winph1 online gaming platform, including our website, mobile-optimized interface, games, and all related services (collectively, the "Platform").

winph1 is committed to protecting the privacy and personal data of all Filipino players in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations as administered by the National Privacy Commission (NPC) of the Philippines.

By registering an account or using the winph1 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please discontinue use of the winph1 Platform immediately.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy.

winph1 collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

winph1 does not collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for identity verification and regulatory compliance purposes. We do not collect biometric data, political opinions, religious beliefs, or health information unless specifically required by law.

winph1 uses your personal data only for the purposes for which it was collected. The primary purposes for which we process your data include:

• Account Management: Creating, maintaining, and securing your winph1 account, including identity verification and age verification (21+ requirement).
• Service Delivery: Enabling you to access and play games, process deposits and withdrawals via GCash, PayMaya, and bank transfer, and manage your account settings.
• Regulatory Compliance: Fulfilling our obligations under Philippine gaming regulations, anti-money laundering (AML) laws, and the Data Privacy Act of 2012, including reporting to PAGCOR and other competent authorities where required.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, and other prohibited conduct on the winph1 Platform.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and administering self-exclusion, deposit limits, and cooling-off tools.
• Customer Support: Responding to your enquiries, resolving disputes, and improving our support services.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the winph1 Platform, game offerings, and user experience.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where permitted by applicable law. You may opt out at any time.

winph1 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

Under the Data Privacy Act of 2012, winph1 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the winph1 Terms & Conditions, including account management, game access, and payment processing.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including AML regulations, PAGCOR licensing requirements, and tax obligations.
• Legitimate Interests: Processing necessary for winph1's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

winph1 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: GCash (GXI), PayMaya (Voyager Innovations), and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers engaged to verify your identity and age in compliance with Philippine regulations.
• Game Software Providers: Licensed game developers and studios whose titles are hosted on the winph1 Platform, to the extent necessary for game operation and fairness auditing.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities, where disclosure is required by law or court order.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers engaged to operate and protect the winph1 Platform.

All third-party service providers engaged by winph1 are contractually bound to process your personal data only for the specified purpose, to maintain appropriate security standards, and to comply with the Data Privacy Act of 2012.

winph1 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account Data: Retained for the duration of your active winph1 account, plus a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements under Philippine law.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Gaming History: Retained for a minimum of three (3) years from the date of each gaming session, for dispute resolution and regulatory audit purposes.
• Customer Support Communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing Consent Records: Retained for the duration of your consent, plus one (1) year following withdrawal of consent, as evidence of lawful processing.

Upon expiry of the applicable retention period, winph1 will securely delete or anonymise your personal data in accordance with our internal data disposal procedures.

winph1 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and the winph1 Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including financial information, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised winph1 personnel and service providers on a strict need-to-know basis. All access is logged and regularly audited.
• Two-Factor Authentication (2FA): winph1 offers 2FA for player accounts to provide an additional layer of login security.
• Penetration Testing: winph1 conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in our systems.
• Incident Response: winph1 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, winph1 will notify the National Privacy Commission and affected players within the timeframes prescribed by the Data Privacy Act of 2012.

While winph1 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your winph1 login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by winph1:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed — which this Privacy Policy fulfils.
• Right of Access: The right to request a copy of the personal data winph1 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to winph1's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the contact details provided in Section 12 of this Policy. winph1 will respond to all verified data subject requests within fifteen (15) business days, as required by the Data Privacy Act of 2012.

winph1 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and analyse how the Platform is used.

The types of cookies winph1 uses include:

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming tool configurations.
• Analytics Cookies: Collect anonymised data about how players use the winph1 Platform, helping us identify areas for improvement. Used only with your consent.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of our campaigns. Used only with your explicit consent.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the winph1 Platform. Withdrawing consent for analytics or marketing cookies will not affect your ability to play games or manage your account.

The winph1 Platform is strictly intended for persons aged 21 years and above, in accordance with Philippine gaming regulations. winph1 does not knowingly collect personal data from individuals under the age of 21.

If winph1 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, delete the personal data in question, and return any deposited funds to the payment source used, subject to verification.

If you are a parent or guardian and believe that a minor has registered on the winph1 Platform, please contact our support team immediately so that we can take appropriate action.

winph1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, winph1 will update the "Last Updated" date at the top of this document and, where practicable, notify registered players via their registered mobile number or email address.

Your continued use of the winph1 Platform following the posting of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how winph1 protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by winph1, please contact our Data Protection Officer:

• Data Protection Officer: winph1 Data Privacy Team
• Email: [email protected]
• Live Chat: Available 24/7 within the winph1 Platform

winph1 aims to acknowledge all privacy-related enquiries within two (2) business days and to resolve them within fifteen (15) business days. For complex requests, we will keep you informed of progress throughout the process.

If you are not satisfied with winph1's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.