winp Privacy Policy

1. About This Privacy Policy

This Privacy Policy applies to all personal data collected and processed by winp in connection with your use of the winp platform at winp.bet ("Platform"). This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its implementing rules and regulations issued by the National Privacy Commission (NPC) of the Philippines.

By registering for a winp account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not use the winp Platform.

This Policy should be read alongside the winp Terms & Conditions, which govern the overall relationship between winp and its registered players.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register for, use, or interact with the winp Platform, winp collects personal data that you provide directly, including:

• Identity data: Legal full name, date of birth, nationality, and government-issued identification document details (e.g., PhilSys National ID number, UMID, driver's licence, or passport number);
• Contact data: Philippine mobile number and email address;
• Address data: Residential address in the Philippines, used for identity verification and compliance with PAGCOR requirements;
• Financial data: GCash account number, PayMaya account number, bank account details (BPI, BDO, Metrobank, or other supported banks), and transaction history on the winp Platform;
• Account credentials: Username and encrypted password;
• Communications: Messages you send to winp support, feedback submissions, and any other correspondence you initiate.

2.2 Data Collected Automatically

When you access the winp Platform, certain data is collected automatically by our systems:

• Device data: Device type, operating system, browser type and version, device identifiers;
• Usage data: Pages visited on the Platform, games played, bet amounts, session duration, login timestamps, and navigation patterns;
• Network data: IP address, internet service provider (Globe, Smart, PLDT, Converge, etc.), and approximate geographic location derived from IP address;
• Cookie data: As described in Section 8 of this Policy.

2.3 Data from Third Parties

winp may receive personal data about you from third parties in limited circumstances, including:

• Payment processors (e.g., GCash, PayMaya) confirming the status of transactions;
• Identity verification service providers used to validate government-issued IDs;
• Fraud prevention and anti-money laundering screening providers;
• PAGCOR and other Philippine regulatory authorities where legally required.

3. How winp Uses Your Personal Data

winp uses the personal data it collects for the following purposes:

• Account creation and management: Creating and maintaining your winp account, verifying your identity, processing deposits and withdrawals, and providing customer support;
• PAGCOR regulatory compliance: Meeting all obligations imposed by winp's PAGCOR licence, including KYC verification, player activity monitoring, and reporting requirements;
• Anti-money laundering (AML) and fraud prevention: Monitoring transactions for suspicious activity, investigating potential fraud, and complying with the Anti-Money Laundering Act (AMLA) of the Philippines and related regulations;
• Responsible gaming: Monitoring player activity for indicators of problem gambling, administering self-exclusion requests, and enforcing deposit and session limits set by players;
• Platform improvement: Analysing usage patterns to improve the functionality, security, and user experience of the winp Platform;
• Marketing communications: Sending you promotional offers, bonuses, and updates about the winp Platform, subject to your communication preferences — you may opt out at any time via your account settings;
• Legal and dispute resolution: Enforcing the winp Terms & Conditions, resolving disputes, and complying with legal obligations or court orders.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act, winp processes your personal data on the following legal bases:

• Contractual necessity: Processing necessary to perform the contract between winp and you (i.e., the winp Terms & Conditions), including operating your account and processing transactions;
• Legal obligation: Processing necessary for winp to comply with applicable Philippine laws, including PAGCOR licence conditions, AMLA, and NPC regulations;
• Legitimate interests: Processing necessary for winp's legitimate interests in fraud prevention, platform security, and responsible gaming programme administration, where those interests are not overridden by your rights;
• Consent: Processing for marketing communications, where you have provided explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. Sharing Your Personal Data

winp does not sell your personal data to unaffiliated third parties. winp shares your personal data only in the following circumstances:

• Payment processors: GCash, PayMaya, and banking partners (BPI, BDO, Metrobank) receive transaction data necessary to process your deposits and withdrawals;
• Identity verification providers: Third-party KYC service providers receive identity document data solely for the purpose of verifying your identity as required by PAGCOR;
• PAGCOR and regulatory authorities: winp is required by law to share player data with PAGCOR and other competent Philippine authorities upon lawful request or as required by licence conditions;
• Fraud prevention and AML providers: Specialist third-party providers that assist winp in detecting fraud and complying with AMLA requirements;
• Legal proceedings: Courts, law enforcement agencies, or other authorities where winp is compelled to disclose data by Philippine law or court order;
• Technology service providers: Cloud infrastructure, data hosting, and security service providers that process data on winp's behalf under strict data processing agreements compliant with the DPA.

All third parties with whom winp shares personal data are required to handle that data in accordance with the Philippine Data Privacy Act and in a manner consistent with this Privacy Policy.

6. Data Retention

winp retains your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. Specific retention periods include:

• Account data: Retained for the duration of your active winp account plus a minimum of five (5) years following account closure, in accordance with PAGCOR licence requirements and applicable AML regulations;
• Transaction data: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act;
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the last transaction date, whichever is later;
• Support communications: Retained for three (3) years from the date of last interaction;
• Marketing consent records: Retained for three (3) years from the date consent was last given or withdrawn.

After the applicable retention period, winp will securely delete or anonymise your personal data in accordance with industry-standard data destruction practices.

7. Security Measures

winp implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and winp's servers;
• Encryption of sensitive data at rest, including payment information and identity documents;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Regular security audits and vulnerability assessments;
• Multi-factor authentication requirements for all winp staff with access to personal data systems;
• Incident response procedures compliant with NPC breach notification requirements.

8. Cookies & Tracking Technologies

The winp Platform uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The types of cookies used include:

• Strictly necessary cookies: Required for the Platform to function, including session management, login state, and security tokens. These cannot be disabled;
• Functional cookies: Remember your preferences such as language settings and display options to improve your experience on the winp Platform;
• Analytics cookies: Collect anonymised data about how players navigate and use the winp Platform, used to improve Platform performance and user experience;
• Security cookies: Used to detect and prevent fraudulent activity and enforce responsible gaming controls.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the winp Platform. winp does not use cookies for cross-site advertising tracking or for selling your data to advertising networks.

9. Your Rights Under the Philippine Data Privacy Act

As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by winp:

• Right to be informed: The right to be informed of how your personal data is collected, used, and stored — as set out in this Privacy Policy;
• Right of access: The right to request a copy of the personal data winp holds about you;
• Right to rectification: The right to correct inaccurate or incomplete personal data in your winp account;
• Right to erasure: The right to request deletion of your personal data, subject to winp's legal retention obligations (see Section 6);
• Right to object: The right to object to processing of your personal data for marketing purposes at any time;
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact winp's Data Protection Officer using the contact details in Section 12. winp will respond to verified requests within thirty (30) calendar days.

10. Children's Privacy

11. Changes to This Privacy Policy

winp reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to registered players via the contact details associated with their winp Account, or by prominent notice on the Platform, at least seven (7) calendar days before the changes take effect.

Your continued use of the winp Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised Policy. The date at the top of this Policy indicates when it was last updated.

12. Contact & Data Protection Officer

For any enquiries regarding this Privacy Policy, to exercise your data subject rights, or to report a data privacy concern, please contact winp's Data Protection Officer:

This Privacy Policy was last updated in June 2026 and supersedes all prior versions. winp's data processing practices comply with Republic Act No. 10173 (Data Privacy Act of 2012) and the implementing rules and regulations issued by the National Privacy Commission of the Philippines.