Privacy Policy — winph33 Casino

winph33 ("winph33," "we," "us," or "our") operates the online casino platform accessible at winph33.app. We are committed to safeguarding the privacy and security of the personal information entrusted to us by our players and visitors ("you" or "your").

This Privacy Policy describes the types of personal information we collect, the purposes for which we use it, the circumstances under which we may share it, and the rights you have with respect to your personal data. This policy applies to all personal information collected through the winph33 website, mobile applications, and any related services.

This Privacy Policy is issued in compliance with Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines. winph33 acts as the Personal Information Controller in respect of the personal data described in this policy.

winph33 collects the following categories of personal data from registered players and platform visitors:

winph33 does not collect sensitive personal information (as defined under RA 10173) unless strictly required for regulatory compliance, in which case such collection will be subject to heightened protection measures and explicit consent.

winph33 collects personal data through the following means:

• Direct interactions: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting our support team, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the winph33 platform, including through cookies, web beacons, server logs, and similar tracking technologies.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment data from GCash, PayMaya/Maya, and banking partners as part of transaction processing.

All data collection is conducted on a lawful basis and is limited to what is necessary for the stated purposes. winph33 does not collect personal data from individuals known to be under 21 years of age.

winph33 uses your personal data for the following purposes:

• To register and maintain your winph33 account, including identity and age verification.
• To process deposits, withdrawals, and other financial transactions on the platform.
• To comply with our legal and regulatory obligations, including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) compliance, and KYC obligations.
• To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct.
• To provide customer support and respond to your inquiries and complaints.
• To send you account-related notifications, security alerts, and service updates.
• To monitor your gaming activity for responsible gaming purposes and to enforce deposit limits, session limits, and self-exclusion requests.
• To improve and optimize the winph33 platform through analytics and user experience research.
• To send you promotional communications about winph33 offers and bonuses, where you have consented to receive such communications.

winph33 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

winph33 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management and transaction processing.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, AMLA requirements, and NPC directives.
• Legitimate interests: Processing necessary for winph33's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

winph33 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• KYC and identity verification providers: To verify your identity and age as required by PAGCOR regulations.
• Payment processors: GCash, PayMaya/Maya, and Philippine banking partners, to process your deposits and withdrawals.
• AML and fraud screening services: To comply with the Anti-Money Laundering Act and detect suspicious activity.
• IT and platform service providers: Cloud hosting, cybersecurity, and analytics providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where required by law or court order.

All third-party service providers engaged by winph33 are contractually required to implement appropriate technical and organizational measures to protect your personal data and to process it only in accordance with our instructions.

winph33 uses cookies and similar technologies to enhance your experience on the platform. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function , including session management and security. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to personalize your experience.
• Analytics cookies: Collect anonymized data about how players use the platform to help us improve performance and usability.

You may control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of the winph33 platform. winph33 does not use cookies to track your activity across unrelated third-party websites.

winph33 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLA requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Technical and usage data: Retained for up to twelve (12) months, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with winph33's data disposal procedures.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by winph33:

• Right to be informed: The right to know how your personal data is being collected, processed, and used.
• Right of access: The right to obtain a copy of your personal data held by winph33 and information about how it is processed.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected or updated.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data on grounds of legitimate interest or for direct marketing purposes.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 13 of this policy. winph33 will respond to all verified data subject requests within fifteen (15) business days, as required by the NPC's implementing rules.

winph33 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data in transit between your device and winph33 servers.
• AES-256 encryption for sensitive data stored in our databases.
• Multi-factor authentication (MFA) for account access and administrative systems.
• Regular penetration testing and vulnerability assessments conducted by independent security firms.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Automated intrusion detection and real-time security monitoring systems.
• Regular staff training on data privacy and information security obligations.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winph33 will notify you and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

The winph33 platform is strictly intended for individuals who are at least 21 years of age. winph33 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

If winph33 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, return any deposited funds to the verified payment source, and securely delete all personal data associated with that account.

If you believe that a minor has registered on the winph33 platform, please contact our support team immediately so that we can take appropriate action.

winph33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or an in-platform notification prior to the changes taking effect.

The "Effective Date" at the top of this policy indicates when the current version was last updated. Your continued use of the winph33 platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how winph33 protects your personal information.

winph33 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our DPO through the following channel:

• Email: [email protected]
• General Support: [email protected]
• Response Time: Within 15 business days for data subject requests; within 72 hours for breach notifications

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. For more information, visit the NPC's official channels.

"Your privacy is our promise."