winph999 Privacy Policy – How We Handle Your Data

1. Introduction

This Privacy Policy ("Policy") describes how winph999 ("Platform," "We," "Us," or "Our") collects, processes, stores, shares, and protects the personal information of individuals ("Data Subjects," "Players," or "You") who access or use the winph999 website at winph999.app and all associated online gaming services.

winph999 is committed to upholding the data privacy rights of all Filipino players in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC) of the Philippines.

By registering an account or using winph999 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this Policy, you must cease using the winph999 platform and may request the closure of your account.

2. Data Controller

For purposes of this Policy and applicable Philippine data privacy law, the data controller responsible for your personal information is winph999, operating through the winph999.app platform. Questions regarding the processing of your personal data and requests to exercise your data subject rights should be directed to our Data Protection Officer (DPO) using the contact information provided in Section 14 of this Policy.

3. Information We Collect

3.1 Information You Provide Directly

When you register for a winph999 account, complete identity verification (KYC), contact customer support, or otherwise interact with the platform, we collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and government-issued ID number (UMID, Philippine passport, LTO driver's license, or PhilSys ID);
• Contact Data: Email address, Philippine mobile number (Globe, Smart, or DITO), and residential address;
• Account Data: Username, encrypted password, account preferences, and communication settings;
• Financial Data: GCash account number, Maya account details, bank account information (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records;
• Verification Documents: Scanned or photographed copies of government-issued identification documents submitted for KYC purposes;
• Communications Data: Records of your correspondence with winph999 customer support via live chat, email, or other channels.

3.2 Information Collected Automatically

When you access winph999, our systems automatically collect certain technical and behavioral data, including:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session duration, pages visited, and navigation patterns;
• Game activity logs, bet history, and wagering records;
• Cookie identifiers and similar tracking technologies (see Section 9).

3.3 Information from Third Parties

winph999 may receive supplementary personal data about you from third-party sources, including payment processors (GCash, Maya, partner banks), identity verification service providers, fraud detection services, and PAGCOR regulatory reporting systems, where permitted by applicable law.

4. How We Use Your Personal Data

winph999 uses your personal data only for specific, declared, and legitimate purposes. The table below summarizes our primary data processing activities:

winph999 does not sell your personal data to third parties for their own marketing purposes. Your data is never used for purposes other than those described in this Policy without your explicit consent.

5. Legal Bases for Processing

winph999 processes your personal data only where a valid legal basis exists under the Data Privacy Act of 2012. The applicable legal bases are:

• Performance of a Contract: Processing necessary to provide winph999 services to you, including account maintenance and payment processing;
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) requirements, and National Privacy Commission regulations;
• Legitimate Interest: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit opt-in consent and may withdraw such consent at any time.

6. Disclosure of Personal Data to Third Parties

winph999 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment Processors: GCash (G-Xchange, Inc.), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other financial institutions, to facilitate deposit and withdrawal transactions;
• Identity Verification Providers: Third-party KYC service providers engaged by winph999 to assist in identity verification and fraud prevention;
• Game Software Providers: JILI Technology, Pragmatic Play, PG Soft, and other game engine providers, to the extent necessary for game delivery and dispute resolution;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law;
• IT and Security Service Providers: Cloud hosting, cybersecurity, and technical support providers operating under binding confidentiality and data processing agreements;
• Legal Advisors: External legal counsel, where disclosure is necessary to protect winph999's legal rights or defend against legal claims.

winph999 requires all third-party processors to implement appropriate technical and organizational security measures consistent with the Data Privacy Act of 2012 and to process personal data only on documented instructions from winph999.

7. International Data Transfers

Where winph999 engages service providers or game engine partners that process data outside of the Philippines, such transfers are conducted only where adequate safeguards are in place, including contractual clauses consistent with the National Privacy Commission's requirements for cross-border data transfers. winph999 ensures that any international transfer of Filipino players' personal data maintains the same level of protection afforded by the Data Privacy Act of 2012.

8. Data Retention

winph999 retains your personal data for as long as your account remains active and for such additional periods as are required by applicable law or regulatory obligation. Specific retention periods include:

• Account and identity data: Retained for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and the Anti-Money Laundering Act;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Customer support records: Retained for three (3) years from the date of each interaction;
• Technical and behavioral logs: Retained for up to twelve (12) months unless a longer period is required for fraud investigation or legal proceedings;
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.

9. Cookies and Tracking Technologies

winph999 uses cookies and similar tracking technologies to operate the platform, enhance user experience, and gather analytics data. The categories of cookies used are:

• Strictly Necessary Cookies: Essential for platform functionality including authentication session management and security. These cannot be disabled without impairing platform access;
• Performance and Analytics Cookies: Used to understand how players navigate the winph999 platform — which pages are visited most, where errors occur, and how the lobby performs. Data is aggregated and anonymous;
• Functional Cookies: Remember your language preference, region setting, and display preferences to deliver a more personalized experience;
• Marketing Cookies: Used only with your explicit consent to deliver relevant promotional content. You may opt out at any time through your account settings.

You can control non-essential cookies through your browser settings or your winph999 account cookie preferences. Note that disabling certain cookies may affect the functionality of the platform.

10. Data Security

winph999 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

• Transport Layer Security (TLS/HTTPS) encryption for all data in transit between your device and winph999 servers;
• Encryption of sensitive data at rest, including financial account details and identity documents;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular independent security audits and penetration testing;
• Multi-factor authentication for internal system access;
• Documented incident response procedures in accordance with NPC notification requirements.

In the event of a personal data breach that is likely to result in harm to data subjects, winph999 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach and will notify affected players as required by the Data Privacy Act of 2012.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and its IRR, you have the following rights with respect to your personal data held by winph999:

• Right to be Informed: The right to know the purposes for which your personal data is being processed, prior to or at the time of collection;
• Right to Access: The right to request a copy of the personal data winph999 holds about you and to obtain information about how it is processed;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data in your winph999 account;
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data, subject to winph999's legal retention obligations under PAGCOR regulations and the AMLA;
• Right to Object: The right to object to certain types of processing, including processing based on legitimate interest or processing for direct marketing purposes;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe winph999 has violated your data privacy rights.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 14. winph999 will respond to all data subject requests within fifteen (15) business days.

12. Minors

The winph999 platform is strictly for persons aged 21 years and older, in accordance with PAGCOR regulations governing online casino gaming in the Philippines. winph999 does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a minor, we will immediately suspend the associated account, delete the data, and report the incident as required by applicable law. Parents or guardians who believe a minor has accessed winph999 should contact us immediately.

13. Amendments to This Privacy Policy

winph999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material changes will be communicated to registered players via the email address on file or via a prominent notice on the winph999 platform. The revised Policy will take effect on the date specified. Continued use of winph999 following the effective date of any revision constitutes your acceptance of the updated Policy.

14. Contact the Data Protection Officer

For all data privacy inquiries, requests to exercise data subject rights, or concerns regarding winph999's data processing practices, please contact our Data Protection Officer:

• Live Chat: Available 24/7 after logging in to your winph999 account — select "Privacy / Data Request" as your inquiry type
• Email: [email protected] (plain text — not a clickable link)
• Response Time: Within 15 business days for formal data subject requests; live chat average 3–5 minutes for general inquiries

Alternatively, you may file a complaint or inquiry directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. NPC contact details are available through official Philippine government channels.