winph8 Privacy Policy

1. Who We Are

winph8 ("winph8," "we," "us," or "our") operates the online casino platform accessible at winph8.app, including any associated mobile applications and related services (collectively, the "Platform"). winph8 acts as the data controller in respect of the personal data of its registered players and website visitors.

For all privacy-related inquiries, including requests to exercise your data subject rights, you may contact our Data Protection Officer (DPO) using the details provided in Section 14 of this policy.

2. Personal Data We Collect

winph8 collects only the personal data that is necessary for the purposes described in this policy. The categories of personal data we collect include:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (to verify you are 21 years of age or older);
• Nationality and country of residence;
• Residential address (including barangay, city/municipality, province);
• Email address and mobile phone number.

2.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (e.g., passport, driver's license, SSS/UMID card, PhilSys national ID);
• Proof of address documents (e.g., utility bill, bank statement);
• Selfie or liveness check images where required for enhanced verification.

2.3 Financial Data

• GCash mobile number or Maya account details used for deposits and withdrawals;
• Bank account details (bank name, account number) for bank transfer transactions;
• Transaction history, including deposit amounts, withdrawal amounts, and dates;
• Debit card details (card number, expiry date) where applicable — stored in tokenized form only.

2.4 Gaming & Behavioural Data

• Game history, including games played, bet amounts, win/loss records, and session durations;
• Bonus and promotion usage history;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status);
• Customer support interaction records, including chat transcripts and email correspondence.

2.5 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser type;
• Unique device identifiers;
• Platform access logs, including login timestamps and session activity.

3. How We Collect Your Data

winph8 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion;
• Automatically — through cookies, web beacons, and similar tracking technologies when you access the Platform (see Section 7);
• From third parties — including identity verification service providers, payment processors (GCash, Maya, Philippine banks), fraud prevention services, and PAGCOR where required by regulation.

4. Why We Use Your Personal Data

winph8 uses your personal data for the following purposes:

5. Legal Basis for Processing

winph8 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity — processing is required to perform our contract with you (i.e., to operate your account, process transactions, and provide gaming services);
• Legal obligation — processing is required to comply with PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws;
• Legitimate interests — processing is necessary for winph8's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights;
• Consent — for optional processing activities such as marketing communications, where we will always obtain your explicit consent and provide an easy way to withdraw it.

6. Data Sharing & Disclosure

winph8 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors — GCash, Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your financial transactions;
• KYC and identity verification providers — third-party services that assist winph8 in verifying your identity and age in compliance with PAGCOR requirements;
• Fraud prevention and AML services — providers that help winph8 detect and prevent fraudulent activity and money laundering;
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies where disclosure is required by law;
• IT and platform service providers — cloud hosting, data storage, and software providers who process data on winph8's behalf under strict data processing agreements;
• Professional advisers — lawyers, auditors, and insurers where necessary for winph8's legal and business operations.

All third-party service providers who process personal data on winph8's behalf are contractually required to maintain appropriate technical and organisational security measures and to process data only in accordance with winph8's instructions.

7. Cookies & Tracking Technologies

winph8 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The types of cookies we use include:

• Strictly necessary cookies — essential for the Platform to function, including session management and security tokens. These cannot be disabled;
• Functional cookies — remember your preferences such as language settings and game display options;
• Analytics cookies — help winph8 understand how players use the Platform so we can improve it. Data collected is aggregated and anonymised where possible;
• Marketing cookies — used only with your consent to deliver relevant promotional content about winph8 offers.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. winph8 does not use cookies to track your activity on third-party websites.

8. Data Retention

winph8 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law:

• Account and KYC records — retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR regulations and the AMLA;
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction;
• Gaming history — retained for a minimum of three (3) years from the date of each gaming session;
• Customer support records — retained for two (2) years from the date of the last interaction;
• Marketing consent records — retained until you withdraw consent, plus one (1) year thereafter as evidence of consent.

Upon expiry of the applicable retention period, winph8 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

9. Data Security

winph8 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the winph8 Platform;
• Encryption of sensitive data at rest, including financial and KYC records;
• Tokenisation of payment card details — winph8 never stores raw card numbers;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments;
• Multi-factor authentication requirements for account access and administrative systems.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winph8 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by winph8:

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. winph8 will respond to all verified data subject requests within fifteen (15) business days, as required by the Data Privacy Act.

11. Children's Privacy

The winph8 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing online gambling in the Philippines. winph8 does not knowingly collect personal data from persons under the age of 21.

If winph8 discovers that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all associated data will be deleted, and any deposits will be returned in accordance with applicable regulations. If you believe a minor has registered on the Platform, please contact us immediately.

12. Cross-Border Data Transfers

Some of winph8's third-party service providers — including cloud infrastructure providers and KYC verification services — may process personal data outside the Republic of the Philippines. Where such transfers occur, winph8 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring the recipient to maintain data protection standards equivalent to those required under Philippine law;
• Transfers only to countries or organisations that the National Privacy Commission has determined provide an adequate level of data protection;
• Your explicit consent where required for specific transfers.

winph8 will not transfer your personal data to any jurisdiction that does not provide adequate protections for data subjects' rights.

13. Updates to This Privacy Policy

winph8 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes, we will notify registered players by email or through an in-platform notification at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this policy will always reflect the most recent revision. We encourage you to review this policy periodically. Your continued use of the winph8 Platform following the effective date of any updated policy constitutes your acceptance of the changes.

The current version of this Privacy Policy is always available at winph8.app/privacy-policy.

14. Contact Us & Data Protection Officer

For all privacy-related inquiries, data subject rights requests, or complaints, please contact the winph8 Data Protection Officer: