winph44 Privacy Policy

1. Introduction

1.1 winph44 operates an online casino and gaming platform targeted at Filipino players. In the course of providing our services, we necessarily collect and process certain personal information about our users. We take this responsibility seriously and are committed to handling your data with transparency, integrity, and in full compliance with applicable Philippine law.

1.2 This Privacy Policy is issued pursuant to Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission ("NPC") of the Philippines.

1.3 This Policy should be read together with our Terms & Conditions, which govern your overall use of the winph44 Platform. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

1.4 If you have any questions about this Privacy Policy or how winph44 handles your personal data, please contact our Data Protection Officer using the details provided in Section 15 of this Policy.

2. Data Controller

2.1 For the purposes of the Data Privacy Act of 2012, winph44 is the personal information controller in respect of the personal data collected through the Platform. This means winph44 determines the purposes and means of processing your personal information.

2.2 winph44 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. Contact details for the DPO are provided in Section 15.

2.3 Where winph44 engages third-party service providers to process personal data on its behalf (for example, payment processors or KYC verification providers), those parties act as personal information processors and are bound by data processing agreements that require them to handle your data in accordance with this Policy and applicable law.

3. Personal Data We Collect

winph44 collects the following categories of personal data:

3.1 Sensitive Personal Information. Certain data we collect — such as government ID numbers and financial account details — may constitute sensitive personal information under the DPA. winph44 applies heightened security measures to the processing of such data and collects it only to the extent strictly necessary for legal compliance and service delivery.

3.2 Data from Third Parties. winph44 may receive personal data about you from third-party sources, including identity verification providers, fraud prevention agencies, and payment processors, where this is necessary to verify your identity, prevent fraud, or comply with anti-money laundering obligations.

4. How We Use Your Personal Data

winph44 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your winph44 player account, including verifying your identity and age (21+ requirement).
• Service Delivery: To provide access to games, process deposits and withdrawals, and deliver the core features of the winph44 Platform.
• Legal Compliance: To comply with applicable laws and regulations, including anti-money laundering (AML) obligations, PAGCOR regulatory requirements, and the Data Privacy Act of 2012.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other illegal conduct on the Platform.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gambling patterns and identify players who may be at risk of problem gambling, in accordance with our responsible gaming obligations.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the winph44 Platform.
• Dispute Resolution: To investigate and resolve complaints, disputes, and legal claims involving your account.

5. Legal Basis for Processing

5.1 winph44 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have given us your explicit consent to process your data for a specific purpose, such as receiving marketing communications or optional profiling for personalized game recommendations.
• Contractual Necessity: Where processing is necessary to perform our contract with you — that is, to provide the winph44 gaming services you have registered for, including account management, payment processing, and game access.
• Legal Obligation: Where processing is required to comply with a legal obligation applicable to winph44, including AML regulations, PAGCOR licensing requirements, tax obligations, and court orders.
• Legitimate Interests: Where processing is necessary for the legitimate interests of winph44 or a third party, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, and improving our services.
• Vital Interests: In exceptional circumstances, where processing is necessary to protect your vital interests or those of another person.

5.2 Where winph44 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Data Sharing & Disclosure

6.1 winph44 does not sell, rent, or trade your personal data to third-party marketers. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, and banking partners require certain personal and financial data to process your deposits and withdrawals securely.
• KYC & Identity Verification Providers: Third-party providers who assist winph44 in verifying player identities and ages in compliance with regulatory requirements.
• Fraud Prevention & AML Services: Agencies and platforms that help winph44 detect and prevent fraudulent activity and money laundering.
• IT & Cloud Service Providers: Technology partners who provide hosting, data storage, and platform infrastructure services, operating under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where disclosure is required by law or regulation.
• Law Enforcement: Philippine law enforcement agencies, where winph44 is legally required or permitted to disclose data in connection with a criminal investigation or legal proceeding.
• Professional Advisors: Lawyers, auditors, and accountants who provide professional services to winph44, subject to confidentiality obligations.

6.2 All third-party processors engaged by winph44 are required to implement appropriate technical and organizational security measures and to process personal data only in accordance with winph44's documented instructions.

7. Cookies & Tracking Technologies

7.1 winph44 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform.

7.2 winph44 uses the following types of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming limits you have set.
• Analytics Cookies: Help winph44 understand how players use the Platform — which games are most popular, where players encounter difficulties, and how to improve the overall experience. Data collected is aggregated and anonymized where possible.
• Marketing Cookies: Used to deliver relevant promotional content to you on the Platform. These are only activated with your consent.

7.3 You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

8. Data Retention

8.1 winph44 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AML record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• KYC Documents: Retained for a minimum of five (5) years after the end of the business relationship, or longer if required by a regulatory authority or ongoing legal proceeding.
• Support Communications: Retained for three (3) years from the date of the last communication, unless a longer period is required for dispute resolution.
• Marketing Preferences: Retained until you withdraw consent or opt out of marketing communications.
• Technical & Usage Data: Retained for up to two (2) years for analytics and platform improvement purposes.

8.2 Upon expiry of the applicable retention period, winph44 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

9. Data Security

9.1 winph44 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the winph44 Platform.
• AES-256 encryption for sensitive data stored in our databases, including payment details and identity documents.
• Multi-factor authentication options for player accounts.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent security professionals.
• Strict access controls ensuring that only authorized winph44 personnel can access personal data, on a need-to-know basis.
• Employee training on data privacy and security best practices.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

9.2 Data Breach Notification. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winph44 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the requirements of the Data Privacy Act of 2012.

9.3 While winph44 takes all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. You are also responsible for maintaining the security of your account credentials and should notify winph44 immediately if you suspect unauthorized access to your account.

10. Your Rights as a Data Subject

10.1 Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by winph44:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, and processed — which is the primary purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data winph44 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data winph44 holds about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to winph44's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe winph44 has violated your data privacy rights.

10.2 To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. winph44 will respond to all valid requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with prior notice to you.

11. Children's Privacy

11.1 The winph44 Platform is strictly intended for individuals who are 21 years of age or older. winph44 does not knowingly collect personal data from individuals under the age of 21. If winph44 becomes aware that it has inadvertently collected personal data from a person under 21, it will take immediate steps to delete that data and close the associated account.

11.2 If you are a parent or guardian and believe that your child has registered on the winph44 Platform, please contact our support team immediately at the details provided in Section 15. We will investigate and take appropriate action promptly.

11.3 winph44 employs age verification measures during the registration process and reserves the right to request government-issued identification to confirm a player's age at any time.

12. International Data Transfers

12.1 winph44 primarily stores and processes personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and KYC verification platforms — may process data in other countries.

12.2 Where personal data is transferred outside the Philippines, winph44 ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require the recipient to apply data protection standards equivalent to those required under Philippine law.

12.3 By using the winph44 Platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the provision of our services, subject to the safeguards described in this section.

13. Third-Party Links

13.1 The winph44 Platform may contain links to third-party websites or services. This Privacy Policy applies solely to the winph44 Platform and does not cover the privacy practices of any third-party websites. winph44 is not responsible for the content or privacy practices of any linked third-party sites.

13.2 We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link on the winph44 Platform does not constitute an endorsement of that website or its privacy practices.

14. Updates to This Privacy Policy

14.1 winph44 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or Platform features. The most current version of this Policy will always be available on this page, with the "Last Updated" date at the top reflecting the date of the most recent revision.

14.2 For material changes to this Privacy Policy, winph44 will notify registered players via email or in-platform notification at least seven (7) days before the changes take effect. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.

14.3 If you do not agree to any updated Privacy Policy, you must cease using the Platform and may request account closure by contacting our support team.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by winph44, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through its official website at privacy.gov.ph (for reference only — winph44 does not link to external sites).