winph1 Privacy Policy

This Privacy Policy is issued by winph1 ("winph1," "we," "us," or "our"), the operator of the online gaming platform accessible at https://winph1.net. It applies to all personal data collected from players, visitors, and prospective registrants who interact with the winph1 website, mobile interface, games lobby, payment system, and any associated features or services (collectively, the "Platform").

winph1 is committed to protecting the privacy and personal data of all Filipino players and website visitors in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. We act as the personal information controller in respect of all personal data processed through the Platform.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which are incorporated herein by reference. By accessing or using the winph1 Platform, you acknowledge that you have read, understood, and agreed to the practices described in this Policy.

winph1 collects only the personal data that is necessary to operate our Platform, verify player identities, process financial transactions, and comply with applicable Philippine laws and regulations. The categories of personal data we collect are described below:

winph1 collects personal data through the following methods:

• Direct collection: Information you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including your IP address, device information, browser type, session duration, and pages visited. This data is collected via server logs and analytics tools.
• Cookies and similar technologies: winph1 uses cookies and related tracking technologies to maintain your session, remember your preferences, and measure Platform performance. For full details, please refer to Section 7 (Cookies & Tracking) of this Policy.
• Third-party sources: In limited circumstances, winph1 may receive personal data from third-party identity verification providers, payment processors (such as GCash or PayMaya), or fraud detection services, solely for the purpose of verifying your identity and protecting the integrity of our Platform.

winph1 uses your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your consent or as otherwise permitted by Philippine law:

• Account management: To create, maintain, and manage your winph1 player account, including processing login requests, updating account preferences, and managing account security.
• Service delivery: To provide access to our games — including slots, bingo, live dealer tables, and roulette — process bets, credit winnings, and deliver the core gaming services you have registered to use.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other accepted payment methods, and to maintain accurate financial records.
• Identity and age verification: To verify that you are at least 21 years of age and to confirm your identity in accordance with our KYC obligations under Philippine law. The 21+ age restriction is a firm regulatory requirement that winph1 enforces without exception.
• Legal and regulatory compliance: To comply with anti-money laundering (AML) obligations, PAGCOR-related regulatory requirements, tax reporting obligations, and any other applicable Philippine laws and regulations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal activities on the Platform.
• Responsible gaming: To monitor player activity for signs of problem gambling, enforce deposit and loss limits, process self-exclusion requests, and deliver responsible gaming tools and resources.
• Customer support: To respond to your inquiries, resolve disputes, and improve the quality of our support services.
• Marketing and promotions: To send you information about winph1 promotions, bonuses, and new game releases, where you have opted in to receive such communications. You may withdraw your consent to marketing communications at any time.
• Platform improvement: To analyze aggregated usage data, identify technical issues, and improve the performance, design, and features of the winph1 Platform.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules, winph1 processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform our obligations under the Terms and Conditions you agreed to upon registration — including operating your account, processing payments, and providing gaming services.
• Legal obligation: Processing is required to comply with our obligations under Philippine law, including anti-money laundering regulations, PAGCOR compliance requirements, and tax reporting obligations.
• Legitimate interests: Processing is necessary for winph1's legitimate interests in preventing fraud, maintaining platform security, and improving our services, provided these interests are not overridden by your rights and freedoms.
• Consent: For optional data processing activities — such as sending you marketing communications or using non-essential cookies — we rely on your freely given, informed consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

winph1 does not sell your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers receive the financial and identity data necessary to process your deposits and withdrawals securely.
• Game providers: Third-party game developers and live dealer platform providers may receive limited technical data (such as a player session token) necessary to deliver their games within the winph1 environment. They do not receive your full identity or financial records.
• Identity verification providers: KYC and AML compliance partners receive copies of your identification documents and personal details solely for the purpose of verifying your identity and screening against sanctions and watchlists.
• Regulatory and law enforcement authorities: winph1 is obligated to report certain transactions and provide personal data to the Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission (NPC), and other Philippine government authorities when required by law.
• IT and security service providers: Cloud hosting providers, cybersecurity firms, and fraud detection services that process data on our behalf are bound by strict data processing agreements and may not use your data for any other purpose.
• Professional advisors: Lawyers, auditors, and accountants who require access to certain data to provide professional services to winph1, subject to professional confidentiality obligations.

winph1 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: These cookies are essential to the operation of the winph1 Platform. They enable you to log in, maintain your session, and navigate the Platform securely. These cookies cannot be disabled without preventing the Platform from functioning correctly.
• Performance and analytics cookies: These cookies collect aggregated, anonymized information about how players use the winph1 Platform — such as which games are most popular and where technical errors occur. This data helps us improve the Platform experience.
• Functional cookies: These cookies remember your preferences — such as your language setting and preferred deposit method — so that you do not need to re-enter them on each visit.
• Marketing cookies: Where you have consented, these cookies help us deliver relevant winph1 promotions and measure the effectiveness of our marketing campaigns. You may opt out of marketing cookies at any time through your browser settings.

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing certain features of the winph1 Platform, including your player account.

winph1 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, and destruction. Our key security measures include:

• TLS encryption: All data transmitted between your device and winph1 servers is encrypted using Transport Layer Security (TLS), preventing interception of your data in transit.
• Encryption at rest: Sensitive personal data — including KYC documents, financial records, and password hashes — is stored in encrypted form on our servers using strong encryption standards.
• Access controls: Access to personal data within winph1 is strictly limited to authorized personnel who require it to perform their job functions. All staff with access to personal data are subject to confidentiality obligations.
• Multi-factor authentication: Player accounts and internal administrative systems are protected by multi-factor authentication to prevent unauthorized access.
• Regular security testing: winph1 conducts regular penetration testing and vulnerability assessments to identify and remediate security weaknesses in our Platform.
• Incident response: winph1 maintains a data breach response plan. In the event of a personal data breach that is likely to result in harm to affected players, we will notify the National Privacy Commission (NPC) and affected individuals within the timeframes required by Philippine law.

winph1 retains your personal data for only as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Philippine law. Our standard retention periods are as follows:

• Active account data: Personal data associated with your active winph1 account is retained for the duration of your account and for a period of five (5) years following account closure, in accordance with our AML and tax compliance obligations.
• KYC and identity documents: Copies of identity documents and KYC verification records are retained for a minimum of five (5) years following the end of the business relationship, as required by Philippine AML regulations.
• Transaction and gaming records: Financial transaction records and gaming history are retained for five (5) years following the date of each transaction, for audit, dispute resolution, and regulatory compliance purposes.
• Marketing data: Where you have consented to receive marketing communications, we retain your marketing preferences until you withdraw your consent. Following withdrawal of consent, your data will be suppressed to ensure no further communications are sent.
• Technical and log data: Server logs and technical data are typically retained for up to ninety (90) days for security monitoring purposes, after which they are deleted or anonymized.

Upon expiry of the applicable retention period, winph1 will securely delete or irreversibly anonymize your personal data so that it can no longer be associated with you.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by winph1. To exercise any of these rights, please contact our Data Protection Officer (see Section 14):

The winph1 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. winph1 does not knowingly collect personal data from any person under the age of 21.

If you believe that winph1 has inadvertently collected personal data from a person under 21 years of age, please contact our Data Protection Officer immediately at the contact details provided in Section 14. Upon confirmation, winph1 will promptly delete all personal data associated with the underage individual and permanently close the associated account. Any funds held in the account will be handled in accordance with our underage gambling policy.

We employ age verification measures during registration and KYC to detect and prevent underage access. However, we also rely on parents and guardians to monitor the online activities of minors and to take appropriate steps to prevent underage access to gaming platforms.

winph1 primarily processes and stores personal data within servers located in Asia. However, some of our third-party service providers — including certain game providers, cloud infrastructure partners, and fraud detection services — may process personal data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, winph1 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Philippine law. These safeguards may include:

• Data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission.
• Transfers to countries that have been assessed as providing an adequate level of data protection equivalent to Philippine standards.
• Binding corporate rules or other approved transfer mechanisms where applicable.

By using the winph1 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines in accordance with the safeguards described above.

winph1 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When we make material changes to this Policy, we will notify you through one or more of the following means:

• A prominent notice on the winph1 Platform homepage and login page.
• A notification sent to the email address associated with your winph1 account.
• An in-platform notification visible upon your next login following the change.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how winph1 protects your personal data. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

winph1 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact us through the following channels:

• Live Chat: Available 24/7 directly on the winph1 Platform — the fastest way to reach our team for general inquiries.
• Email (General Support): [email protected] — for general account and service inquiries.
• Email (Data Privacy): [email protected] — for all data rights requests, privacy complaints, and DPO correspondence. Please mark your subject line clearly as a "Data Privacy Request."

winph1 is committed to resolving all privacy-related inquiries promptly and transparently. If you are not satisfied with our response to your data rights request or privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.