winph44 Privacy Policy

1.Introduction

winph44 ("winph44," "we," "us," or "our"), operator of the online gaming platform accessible at winph44.club, is committed to protecting the privacy and personal data of all users of our platform. This Privacy Policy ("Policy") describes how we collect, use, disclose, store, and safeguard your personal information in connection with your use of the winph44 platform and all associated services.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Republic of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR"), as well as other applicable privacy laws and the data governance requirements of the Philippine Amusement and Gaming Corporation (PAGCOR). By creating a winph44 account, accessing the winph44 platform, or using any winph44 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

winph44 acts as the Personal Information Controller (PIC) with respect to all personal data collected through the winph44 platform from users located in the Philippines. Where winph44 engages third-party processors to perform functions on its behalf, those parties act as Personal Information Processors (PIPs) subject to winph44's data processing instructions and contractual obligations consistent with the DPA.

2.Personal Data We Collect

The categories of personal data winph44 collects depend on your interaction with the platform. The following table summarises the primary categories of data collected:

winph44 does not collect sensitive personal information (as defined under Section 3(l) of the DPA) beyond what is strictly necessary for identity verification, age verification, and regulatory compliance purposes, and only with appropriate legal basis.

3.How We Collect Your Data

winph44 collects personal data through the following means:

3.1 Directly From You

When you register a winph44 account, complete KYC verification, make a deposit or withdrawal, contact support, participate in a promotion, or otherwise provide information through the platform interface, you provide personal data directly to winph44.

3.2 Automatically Through Technology

When you access and use the winph44 platform, certain technical data is collected automatically through server logs, session tracking, and cookies or similar technologies. This includes your IP address, the pages and games you access, timestamps, device information, and browser fingerprint data used for security and fraud prevention purposes.

3.3 From Third Parties

winph44 may receive personal data from identity verification service providers, payment processors (including GCash, Maya, and Philippine banking institutions), fraud prevention services, and PAGCOR or other regulatory bodies where required for compliance purposes.

4.Purposes of Data Processing

winph44 processes your personal data for the following purposes:

• To create, maintain, verify, and administer your winph44 account;
• To process deposits, withdrawals, and all financial transactions through your chosen payment method;
• To verify your identity and age in compliance with PAGCOR requirements and KYC obligations;
• To comply with applicable Anti-Money Laundering (AML) laws, including the Anti-Money Laundering Act of 2001 (RA 9160) as amended;
• To detect, prevent, and investigate fraud, cheating, collusion, multi-accounting, and other prohibited conduct;
• To provide customer support and respond to your enquiries;
• To administer bonuses, promotions, and loyalty programmes;
• To monitor your gaming activity for responsible gaming purposes and to apply self-exclusion or deposit limit restrictions where requested or required;
• To improve the winph44 platform, personalise your experience, and conduct platform analytics;
• To send you service notifications, account security alerts, and, where you have consented, promotional communications;
• To comply with our legal and regulatory obligations under Philippine law and PAGCOR licensing requirements.

5.Legal Basis for Processing

Under the Data Privacy Act of 2012, winph44 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform our obligations under the winph44 Terms and Conditions, including account operation, payment processing, and game provision;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AML legislation, tax obligations, and other applicable Philippine law;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights;
• Consent: Processing for direct marketing communications and certain analytics purposes, where consent has been obtained and may be withdrawn at any time.

6.Data Sharing and Disclosure

winph44 does not sell or rent your personal data to any third party. winph44 may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment service providers: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other processors to facilitate deposits and withdrawals;
• KYC and identity verification providers: To fulfil regulatory identity and age verification requirements;
• Game software providers: Platform partners such as PG Soft, Pragmatic Play, and Jili, to the extent technically necessary for game delivery;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government bodies where disclosure is required by law or regulatory direction;
• Professional advisors: Legal counsel, auditors, and accountants under strict confidentiality obligations;
• Law enforcement: Philippine law enforcement or judicial authorities where required by valid legal process or court order.

All third-party processors engaged by winph44 are required to maintain data security standards consistent with those applied by winph44 and to process personal data only on documented instructions from winph44.

7.Data Retention

winph44 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulatory requirements. In general:

• Account and identity data is retained for the duration of your winph44 account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations;
• Financial transaction records are retained for a minimum of five (5) years in accordance with AMLA requirements;
• Gaming session records are retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes;
• Communications and support records are retained for two (2) years following the resolution of the relevant matter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8.Your Data Subject Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by winph44:

• Right to be Informed: You have the right to be informed of how your personal data is processed, as described in this Policy;
• Right of Access: You have the right to request access to the personal data winph44 holds about you;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data;
• Right to Erasure or Blocking: You have the right to request deletion or blocking of your personal data where processing is unlawful or no longer necessary, subject to legal retention obligations;
• Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes;
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used format;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of the above rights, please contact winph44's Data Protection Officer at the address provided in Section 14 of this Policy. winph44 will respond to verified data subject requests within fifteen (15) days of receipt.

9.Cookies and Tracking Technologies

The winph44 platform uses cookies and similar tracking technologies to operate the platform, remember your login session, prevent fraud, and collect analytics data that helps us improve your experience. The following categories of cookies may be used:

• Strictly Necessary Cookies: Required for the winph44 platform to function. These include session authentication cookies and security tokens that cannot be disabled without preventing your use of the platform;
• Functional Cookies: Remember your preferences such as language settings and game history for a more personalised experience;
• Analytics Cookies: Collect aggregated data about how the winph44 platform is used to help us improve performance. Where consent is required, these are not activated until consent is obtained;
• Security Cookies: Used for fraud detection, anomaly detection on the winph44 login endpoint, and session integrity verification.

You may control non-essential cookies through your browser settings or the cookie preference manager on the winph44 platform. Disabling strictly necessary cookies will impair your ability to use the platform.

10.Children's Privacy

The winph44 platform is strictly prohibited for use by any person under the age of twenty-one (21) years. winph44 does not knowingly collect personal data from minors. Where winph44 becomes aware that personal data has been collected from a person under 21 years of age, winph44 will immediately close the associated account, forfeit any balance in accordance with applicable law and its Terms and Conditions, and delete the personal data collected. Parents or guardians who believe a minor may have accessed the winph44 platform are encouraged to contact the winph44 Data Protection Officer immediately at the details provided in Section 14.

11.Data Security

winph44 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• End-to-end encryption of all data in transit using TLS 1.3 with AES-256 cipher suites;
• Encrypted storage of sensitive data at rest using industry-standard encryption algorithms;
• Strict access controls and role-based permission structures limiting internal access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of the winph44 platform infrastructure;
• Anomaly detection and intrusion monitoring systems on the winph44 login endpoint and financial transaction interfaces;
• Two-factor authentication options available to all winph44 account holders.

Notwithstanding the above measures, no data transmission over the internet or electronic storage system is completely secure. winph44 cannot guarantee absolute data security, and you accept the inherent risks of transmitting data online when using the platform.

12.Cross-Border Data Transfers

Where winph44 transfers personal data outside of the Philippines — for example, to game software providers or cloud infrastructure providers operating internationally — such transfers are conducted in compliance with Section 21 of the Data Privacy Act of 2012 and applicable NPC regulations on cross-border data transfers. winph44 ensures that an adequate level of protection for personal data is maintained through contractual safeguards, including data processing agreements that impose obligations equivalent to those required under Philippine data protection law.

13.Updates to This Privacy Policy

winph44 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, winph44 will notify registered players through their registered email address or Philippine mobile number, or by displaying a prominent notice on the winph44 platform, no less than fourteen (14) days prior to the effective date of the changes. Your continued use of the winph44 platform following the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must close your account before the effective date.

14.Data Protection Officer — Contact

winph44 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, requests, or concerns regarding the processing of your personal data by winph44, or if you wish to exercise your data subject rights as described in Section 8 of this Policy, please contact the winph44 DPO:

winph44 will acknowledge receipt of formal data subject requests within three (3) business days and endeavour to resolve all requests within fifteen (15) business days. Complex requests may require additional time, in which case winph44 will provide written notice of the extended timeline.