WinPH2 Privacy Policy for Filipino Players

1. Who We Are

WinPH2 (referred to throughout this document as "WinPH2," "we," "our," or "us") is an online gaming platform operating at winph2.best, licensed by PAGCOR (Philippine Amusement and Gaming Corporation). WinPH2 acts as the data controller for all personal information collected from players and visitors who use the platform.

This Privacy Policy applies to all users of the WinPH2 platform, including registered players, visitors who browse without an account, and individuals who contact our customer support team. It covers every interaction you have with WinPH2 — from the moment you visit the site to the point where your account is eventually closed.

If you have questions about how WinPH2 handles your data, contact our Data Protection Officer at support@winph2.best at any time.

2. Personal Data We Collect

WinPH2 collects personal data in two broad categories: information you provide directly, and information generated automatically through your use of the platform.

2.1 Information You Provide

• Identity data: Full legal name, date of birth, gender, nationality.
• Contact data: Email address, mobile number, residential address in the Philippines.
• Verification documents: Government-issued ID (PhilSys, passport, driver's licence, UMID), selfie photos where required, proof of address (utility bill, bank statement, barangay certificate).
• Financial data: GCash or Maya mobile number, bank account details (for withdrawals), Visa/Mastercard card details, transaction history.
• Account credentials: Username and encrypted password. WinPH2 never stores passwords in plain text.
• Communication records: Messages sent to our support team via email or live chat, including the content and timestamps of those conversations.

2.2 Automatically Collected Information

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution.
• Usage data: Pages visited, games played, bets placed, session duration, click patterns, and feature usage within the WinPH2 platform.
• Location data: Approximate geographic location derived from your IP address, used to comply with PAGCOR geographic restrictions.
• Cookie and tracking data: See Section 8 for full details on how WinPH2 uses cookies.

3. How We Collect Your Data

WinPH2 collects personal data through the following channels:

• Registration form: When you create a WinPH2 account, you submit your name, contact details, date of birth, and account credentials directly through the sign-up flow.
• KYC verification: When identity verification is triggered (for example, prior to a first withdrawal or when required by PAGCOR rules), WinPH2 requests document uploads and may use a third-party identity verification provider.
• Deposits and withdrawals: Payment method details are collected at the time of a transaction through the WinPH2 cashier interface.
• Support interactions: Any information you share when contacting WinPH2 support by email or live chat becomes part of your customer record.
• Automated technologies: Cookies, server logs, and analytics tools collect technical and behavioural data automatically as you use the platform. You can manage cookie preferences as described in Section 8.
• Third-party sources: WinPH2 may receive verification or fraud-flag data from identity check providers, payment processors, and regulatory authorities where we are legally required to conduct due diligence.

4. Why We Use Your Personal Data

WinPH2 uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, verifying, and ultimately closing your WinPH2 account.
• Payment processing: Executing deposits and withdrawals in Philippine pesos through your chosen payment method (GCash, Maya, bank transfer, card).
• Identity verification (KYC/AML): Confirming that you are who you say you are, that you are at least 18 years old, and that your account does not present a money laundering or fraud risk — as required by PAGCOR licensing conditions and the Anti-Money Laundering Act (AMLA).
• Service delivery: Running your sports bets, casino games, Tongits tables, bingo sessions, and poker games; resolving disputes and correcting errors.
• Customer support: Responding to your queries, resolving complaints, and providing account assistance.
• Security and fraud prevention: Detecting and investigating suspicious activity, multiple account attempts, and platform abuse.
• Responsible gaming: Identifying patterns of potentially problematic play and applying deposit limits, cooling-off periods, or self-exclusion in accordance with our Responsible Gaming Policy.
• Legal and regulatory compliance: Meeting reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent authorities.
• Platform improvement: Analysing anonymised usage data to improve the WinPH2 interface, game selection, and overall experience for Filipino players.
• Marketing communications: Sending you promotional emails or push notifications about WinPH2 offers — only if you have given explicit consent and only until you withdraw that consent.

5. Legal Basis for Processing

WinPH2 processes your personal data on the following legal grounds under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to fulfil the Terms and Conditions you agreed to when registering — account creation, payment processing, game delivery.
• Legal obligation: Processing required to comply with PAGCOR licence conditions, AMLA reporting requirements, NPC obligations, and other applicable Philippine law.
• Legitimate interest: Fraud prevention, platform security, and anonymised analytics — where our legitimate business interest is not overridden by your privacy rights.
• Consent: Direct marketing emails and optional analytics cookies — only where you have given clear, informed, and freely withdrawable consent.

6. Sharing Your Personal Data

WinPH2 does not sell, rent, or share your personal data with third-party marketers. We may share your data with the following categories of recipient, only to the extent necessary for the stated purpose:

• Payment processors: GCash, Maya, GrabPay, Coins.ph, Instapay/PESONet providers, and card networks (Visa/Mastercard) receive transaction data needed to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC vendors process document uploads and selfie images to verify identity. These providers are contractually bound to process data only for verification purposes.
• Regulatory authorities: PAGCOR, AMLC, the NPC, and other competent Philippine government bodies may receive data when WinPH2 is under a legal obligation to disclose, including during audits, investigations, or mandatory reporting.
• Technology providers: Hosting, security, customer support software, and analytics tools used to operate the WinPH2 platform. All providers are required to maintain data security standards consistent with this Policy.
• Professional advisers: Lawyers, auditors, and consultants where necessary for legal, compliance, or business purposes, subject to confidentiality obligations.

7. Data Storage and Security

WinPH2 stores personal data on secure servers protected by industry-standard encryption, access controls, and regular security audits. The specific measures we maintain include:

• TLS/SSL encryption for all data transmitted between your device and WinPH2 servers.
• Encryption at rest for sensitive data fields including financial information and identity documents.
• Role-based access controls that limit which WinPH2 staff can view personal data to those with a genuine operational need.
• Regular penetration testing and vulnerability assessments of our platform infrastructure.
• Incident response procedures aligned with NPC breach notification requirements under RA 10173 — we will notify affected players and the NPC within 72 hours of discovering a breach that poses a real risk to your rights.

No security system is completely infallible. WinPH2 commits to using all reasonable technical and organisational measures to protect your data and to responding promptly and transparently if a breach occurs.

8. Cookies and Tracking Technologies

WinPH2 uses cookies and similar technologies on the platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookie:

• Strictly necessary cookies: Required for the platform to function — login sessions, security tokens, load balancing. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences (language, display settings, last game played) to improve your experience on return visits.
• Performance / analytics cookies: Collect anonymised data on how players use the WinPH2 platform — page visits, session duration, error rates. Used to improve the product. Activated only with your consent.
• Marketing cookies: Track whether you clicked a WinPH2 promotion. Only placed with your explicit consent and never shared with external advertising networks.

You can manage cookie preferences through your browser settings or through the WinPH2 cookie consent banner when you first visit the site. Refusing non-essential cookies will not prevent you from using the core platform.

9. Your Privacy Rights

Under the Data Privacy Act of 2012, every Filipino player has the following rights regarding their personal data held by WinPH2:

To exercise any of these rights, email support@winph2.best with the subject line "Data Privacy Request" and describe what you are requesting. WinPH2 will acknowledge your request within three business days and respond fully within 15 business days, or notify you if additional time is required.

10. Children's Privacy

WinPH2 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under 18 years of age. If WinPH2 discovers that a person under 18 has registered an account, we will immediately close the account, forfeit any associated balance, and delete the personal data collected — or transfer it to a lawful guardian if required by law.

If you believe a minor has been using WinPH2, contact us at support@winph2.best immediately. We treat reports of underage account use as a priority matter.

11. Data Retention

WinPH2 retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by law. The following general retention periods apply:

• Active account data: Retained throughout the active life of your WinPH2 account.
• Transaction and financial records: Retained for a minimum of five years after the transaction date, in line with AMLA and tax requirements under Philippine law.
• KYC and identity documents: Retained for five years after account closure, or longer if required by regulatory directive.
• Support communications: Retained for two years after the case is resolved, unless the communication relates to a dispute that requires longer retention.
• Marketing consent records: Retained until you withdraw consent, then kept as a record of opt-out for one additional year.
• Self-exclusion records: Retained for the full duration of the exclusion period plus five years, to prevent re-registration in violation of the exclusion.

When data is no longer needed, WinPH2 securely deletes or anonymises it using procedures designed to make recovery impossible.

12. International Data Transfers

WinPH2 primarily stores and processes data within the Philippines. In some cases, data may be processed by technology service providers whose servers are located outside the Philippines. Where such transfers occur, WinPH2 ensures that adequate safeguards are in place — including data processing agreements that obligate the third party to maintain protection standards equivalent to those required under RA 10173. WinPH2 will not transfer your data to a jurisdiction that does not provide an adequate level of privacy protection without your knowledge and appropriate contractual protections in place.

13. Updates to This Privacy Policy

WinPH2 may update this Privacy Policy from time to time to reflect changes in law, technology, or our data processing practices. When material changes are made, we will notify registered players by email and post a prominent notice on the WinPH2 platform at least seven days before the new policy takes effect. The "Last updated" date at the top of this page always reflects the current version.

Continued use of WinPH2 after an update becomes effective constitutes your acceptance of the revised Privacy Policy. If you do not accept the changes, you should stop using the platform and request account closure before they take effect.

14. Contact Us and Filing a Complaint

For any privacy-related queries, data subject rights requests, or concerns about how WinPH2 handles your personal information:

• Email: support@winph2.best (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 through your logged-in WinPH2 account dashboard

If you are not satisfied with WinPH2's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for enforcing RA 10173 and can be reached through the official government channels.

WinPH2 takes all privacy complaints seriously. We will investigate every concern raised and respond with a clear explanation of our findings and the steps we have taken or intend to take.