This Privacy Policy explains how winphp collects, processes, stores, shares, and protects your personal data when you use the winphp platform. Your privacy is taken seriously — this document tells you exactly what we do with your information and what rights you have over it.
winphp ("winphp", "we", "us", "our") operates the online gaming platform accessible at winphp.win and is committed to protecting the privacy and personal data of all users ("Player", "User", "you") who interact with the platform. This Privacy Policy ("Policy") describes our data processing practices in accordance with applicable Philippine data protection legislation, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as PAGCOR's applicable regulatory requirements.
This Policy applies to all personal data processed by winphp in connection with your registration, identity verification, gameplay, payment transactions, customer support interactions, marketing communications, and any other use of the winphp platform or its associated services.
By registering a winphp account or using the winphp platform in any capacity, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not accept this Policy, you must not register or use the winphp platform.
For the purposes of applicable Philippine data protection law, winphp is the data controller in respect of all personal data collected through the winphp platform. As data controller, winphp determines the purposes for which your personal data is processed and the means by which that processing takes place.
winphp engages third-party data processors — including payment service providers, KYC verification providers, and game content providers — to process personal data on our behalf in connection with the delivery of platform services. winphp remains responsible for ensuring that all data processors handle your personal data in compliance with this Policy and applicable law. Processing agreements are in place with all third-party processors to govern the handling of your data.
For all data protection inquiries, requests to exercise your rights, or concerns about winphp's data processing practices, you may contact us at:
Email: [email protected]
Platform: winphp.win
winphp collects the following categories of personal data in the course of providing gaming and related services to Filipino players:
winphp collects personal data through the following channels and mechanisms:
winphp processes your personal data for the following specific purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration and platform access | Identity data, contact data, account data |
| Identity verification and age confirmation (KYC) | Identity data, ID document images, selfie images |
| Processing deposits and withdrawals | Financial data, identity data, transaction records |
| Providing games, live dealer services, and platform features | Account data, gaming data, technical data |
| Responsible gaming monitoring and player protection | Gaming data, transaction data, responsible gaming settings |
| Anti-money laundering (AML) compliance and fraud prevention | Identity data, financial data, transaction data, IP and device data |
| Customer support and dispute resolution | All relevant data categories depending on the nature of the inquiry |
| Marketing and promotional communications (with consent) | Contact data, gaming data, account preferences |
| Platform security, abuse detection, and fraud prevention | Technical data, account data, transaction data |
| Regulatory reporting to PAGCOR and AMLC as required by law | Identity data, financial data, transaction records |
Under the Data Privacy Act of 2012 and its Implementing Rules, winphp processes your personal data on one or more of the following lawful bases:
winphp does not sell your personal data to third parties. winphp shares your personal data only in the following circumstances:
winphp shares personal data with third-party service providers who process data on our behalf to deliver platform services. These include:
winphp is required under Philippine law to disclose certain personal data to regulatory and law enforcement authorities. This includes:
winphp retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and identity data | Duration of the account relationship plus 5 years after account closure |
| KYC documents and verification records | 5 years from account closure (AMLC requirement) |
| Transaction records (deposits and withdrawals) | 5 years from the date of the transaction |
| Gaming session records | 3 years from the session date |
| Customer support records | 3 years from the date of the interaction |
| Marketing consent records | Until consent is withdrawn, plus 1 year for audit purposes |
| Technical logs and IP records | 12 months from the log date |
Following the expiry of the applicable retention period, winphp will securely delete or anonymize your personal data. Where data cannot be immediately deleted due to backup system architecture, winphp will isolate the data and prevent its further processing until deletion is completed in the next scheduled backup purge cycle.
winphp implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, disclosure, or alteration. These measures include:
winphp uses cookies and similar tracking technologies on the winphp.win platform to support platform functionality, maintain session security, and improve the user experience. The following categories of cookies are used:
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the winphp platform. Functional and analytics cookies may be disabled without affecting core platform access, though your experience may be less personalized.
The winphp platform is strictly prohibited for individuals under the age of twenty-one (21) years. winphp does not knowingly collect personal data from individuals below the legal gaming age. The platform enforces mandatory identity verification — including documentary proof of age — as a condition of account access and real-money gameplay.
If winphp discovers that personal data has been collected from an individual who is below 21 years of age, winphp will:
If you are a parent or guardian and believe a minor has registered a winphp account, please contact us immediately at [email protected] so we can investigate and take appropriate action.
Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights in respect of your personal data held by winphp. To exercise any of these rights, contact winphp at [email protected] with the subject line "Data Rights Request" and include your registered account email address.
Some of winphp's third-party service providers — including cloud infrastructure providers, game content providers, and KYC verification services — may process personal data on servers located outside the Philippines. Where such cross-border data transfers occur, winphp ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections afforded under Philippine data protection law.
These safeguards include contractual clauses in data processing agreements that require overseas processors to apply data protection standards consistent with the requirements of the Data Privacy Act of 2012 and its Implementing Rules. winphp does not transfer personal data to recipients in jurisdictions that do not provide an adequate level of data protection without implementing appropriate contractual protections.
winphp operates in compliance with the Anti-Money Laundering Act of 2001 (Republic Act No. 9160) as amended, and the implementing regulations applicable to PAGCOR-licensed online gaming operators. In accordance with these obligations, winphp:
winphp is legally prohibited from disclosing to a player whether or not a Suspicious Transaction Report has been filed in relation to their account ("tipping off" prohibition). No winphp employee or representative will confirm or deny the existence of a regulatory filing related to any specific account.
winphp reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. Where changes are material — for example, where we begin processing your personal data for a new purpose or start sharing data with a new category of third party — winphp will notify you by email to your registered account address and/or by a prominent notice on the winphp platform prior to the effective date of the change.
Minor or administrative changes may be made without advance notice. The "Last Updated" date at the top of this Policy indicates when the most recent revisions took effect. We encourage you to review this Policy periodically to stay informed about how winphp handles your personal data. The current version of this Policy is always accessible at winphp.win/privacy-policy.
Your continued use of the winphp platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you should cease use of the platform and contact winphp to request account closure.
For any questions, concerns, or requests relating to this Privacy Policy or winphp's data processing practices, please contact us through the following channel. All data protection inquiries should clearly state that they relate to a data privacy matter and include your registered account email address so we can verify your identity before responding.
Data Privacy Inquiries: [email protected]
Subject Line: Data Privacy Inquiry — [Your Registered Email]
Response Time: winphp aims to acknowledge all data privacy inquiries within 2 business days and provide a full written response within 15 business days.
Support Hours: 8:00 AM – 12:00 MN Philippine Standard Time, 7 days a week
If you believe winphp has violated your data privacy rights under the Data Privacy Act of 2012 and your concern has not been satisfactorily addressed through our internal process, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.
Under the Data Privacy Act of 2012, you have specific rights in respect of the personal data winphp holds about you. Here's a plain-language summary of each right.
You have the right to request a copy of the personal data winphp holds about you and to receive information about how that data is being processed. Requests are fulfilled within 15 business days of identity verification.
If the personal data winphp holds about you is inaccurate or incomplete, you have the right to request correction. You can update most account information directly in your winphp account settings, or contact support for KYC-linked data.
You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Note that legal retention obligations (e.g., AML record-keeping) may apply.
You have the right to object to winphp processing your personal data for direct marketing purposes at any time. You can do this by updating your communication preferences in your account settings or by contacting support.
Where technically feasible and where processing is based on your consent or on a contract with you, you have the right to receive your personal data in a structured, machine-readable format, and to request that it be transmitted to another service provider.
In certain circumstances — for example, where you contest the accuracy of data or have objected to processing — you may request that winphp restrict further processing of your personal data while the issue is resolved.
Privacy protection at winphp isn't just a legal checkbox — these are the practical measures that keep your data secure on the platform every day.
Every connection between your device and winphp is encrypted with the same 256-bit SSL/TLS standard used by Philippine commercial banks. Your data in transit — login credentials, personal details, payment information — is fully protected.
Your winphp password is stored using bcrypt — a one-way cryptographic hash. This means your actual password is never stored anywhere on winphp's servers, and no staff member can ever read it. Password resets always require a verified email link.
Card payments are processed exclusively through PCI-DSS compliant payment processors. winphp does not store, log, or transmit full card numbers on its own infrastructure — your card details are handled by certified payment security environments.
Personal data within winphp's systems is accessible only to staff members who require it for their specific role. Access is governed by role-based permissions, individual authentication requirements, and a formal data access authorization process.
winphp does not sell, rent, or trade your personal data to third parties for marketing or any other commercial purpose. Data is shared with third parties only as described in this Privacy Policy, and exclusively in the context of delivering services to you.
winphp's data processing practices are designed to comply with Republic Act No. 10173 — the Data Privacy Act of 2012 — including requirements for lawful basis, data subject rights, breach notification, and accountability obligations applicable to Philippine personal data controllers.
Your data is protected at winphp — encrypted, kept private, and processed only for the purposes described in this Policy. Play on a platform built with Filipino players' security in mind. 21+ only.