winph3 Privacy Policy

1. Data Controller Information

winph3 (hereinafter "winph3," "we," "us," or "our"), operating the online gaming platform at winph3.club, is the personal information controller ("PIC") as defined under Republic Act No. 10173 (Data Privacy Act of 2012) with respect to the personal data of registered Players and site visitors in the Philippines.

winph3 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with the DPA, the NPC's implementing rules, and this Privacy Policy. Contact details for the DPO are provided in Section 14.

2. Scope of This Policy

This Privacy Policy applies to all personal data collected by winph3 through the following channels:

• Registration and account creation on winph3.club;
• Use of any game, betting, or payment feature on the Platform;
• Communications with winph3 customer support via live chat or email;
• Participation in promotions, surveys, or bonus programs offered by winph3;
• Passive data collected via cookies, log files, and analytics tools when you browse winph3.club.

This Policy does not apply to third-party websites or services that may be referenced in content on the Platform. winph3 is not responsible for the privacy practices of any third party.

3. Personal Data We Collect

3.1 Registration Data

When you create a winph3 account, we collect: full legal name, date of birth (to verify 21+ eligibility), Philippine mobile number, email address (if provided), and chosen username.

3.2 Identity Verification (KYC) Data

To comply with applicable PAGCOR-related regulatory requirements and anti-money laundering obligations, winph3 collects government-issued ID documents (e.g., PhilSys National ID, Passport, Driver's License, UMID, Voter's ID), proof of address (e.g., utility bill, bank statement), and where required, proof of source of funds. KYC data is processed by winph3's designated third-party identity verification provider operating under binding data processing agreements.

3.3 Financial Data

winph3 collects transaction data necessary to process deposits and withdrawals, including GCash account reference numbers, Maya wallet details, bank account numbers (BPI, BDO, Metrobank), and Coins.ph wallet identifiers. Full payment credentials (e.g., card numbers) are never stored on winph3 servers — they are handled exclusively by PCI-DSS-compliant payment processors.

3.4 Gameplay and Wagering Data

winph3 records all gameplay sessions, wagers placed, game outcomes, bonus usage, and session durations. This data is used for dispute resolution, responsible gaming monitoring, fraud detection, and PAGCOR-related regulatory reporting.

3.5 Device and Technical Data

We automatically collect IP address, browser type and version, operating system, device identifiers, screen resolution, time zone, referring URL, and pages visited during each session on winph3.club. This data is used for security, fraud prevention, and platform optimization.

3.6 Communications Data

Records of all communications between you and winph3 customer support — including live chat transcripts and email correspondence — are retained for quality assurance, dispute resolution, and regulatory purposes.

4. How We Use Your Personal Data

winph3 uses the personal data collected for the following purposes:

• Account Management: Creating, verifying, maintaining, and securing your winph3 Player account;
• Age and Identity Verification: Confirming that you meet the 21+ minimum age requirement and that you are who you say you are;
• Payment Processing: Facilitating GCash, Maya, BPI, BDO, Metrobank, and other payment method transactions;
• Game Provision: Delivering the games, sports betting, sabong, bingo, and other entertainment services on the winph3 Platform;
• Responsible Gaming: Monitoring wagering patterns to identify potential signs of problem gambling and administering deposit limits, loss limits, and self-exclusion requests;
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, cheating, money laundering, and unauthorized account access;
• Regulatory Compliance: Meeting obligations under the Data Privacy Act of 2012, PAGCOR-related reporting requirements, and anti-money laundering regulations applicable in the Philippines;
• Customer Support: Responding to inquiries, resolving disputes, and providing technical assistance;
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Players who have opted in — with an easy opt-out available at any time;
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve the winph3 user experience.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, winph3 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to enter into and perform the Player Account Agreement, including account creation, game provision, and payment processing;
• Legal Obligation: Processing required to comply with applicable Philippine laws, including KYC obligations, AML reporting, and PAGCOR-related regulatory requirements;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and dispute resolution, where such interests do not override your fundamental rights;
• Consent: Processing for direct marketing communications, where consent has been explicitly obtained at registration or subsequently. Consent may be withdrawn at any time.

6. Data Sharing and Disclosure

6.1 Service Providers

winph3 shares personal data with carefully selected third-party service providers who process data on our behalf under binding data processing agreements that require them to maintain confidentiality and implement appropriate security measures. Categories of processors include: identity verification providers (KYC), payment processors (GCash, Maya, BPI, BDO, Metrobank, Coins.ph, etc.), game software providers (JILI, PG Soft, Evolution Gaming, and others), and cloud infrastructure providers.

6.2 Regulatory and Legal Disclosure

winph3 may disclose personal data to PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), or other Philippine government authorities where required by law, court order, or regulatory directive. winph3 will notify affected Players of such disclosures to the extent permitted by law.

6.3 No Sale of Data

winph3 does not sell, rent, trade, or otherwise transfer your personal data to third-party marketers or data brokers for any purpose. Data shared with third parties is limited to what is strictly necessary for the service purposes described in this Policy.

7. Cookies and Tracking Technologies

winph3.club uses cookies and similar tracking technologies to operate the Platform, maintain session state, prevent fraud, and analyze aggregate usage patterns. The following cookie categories are used:

• Strictly Necessary Cookies: Required for the Platform to function, including session authentication, security tokens, and payment gateway integration. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences (e.g., language, game lobby layout, "Remember me" login setting) to improve your experience across sessions.
• Analytics Cookies: Collect aggregated, anonymized data about Platform usage to help winph3 improve performance. No personally identifying data is included in analytics reports.
• Marketing Cookies: Used only if you have opted in to promotional communications. These help winph3 understand which promotions are relevant to you. You may opt out at any time via Account Settings.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from using the winph3 Platform.

8. Data Retention

winph3 retains personal data for the following periods:

• Account and KYC Data: For the duration of your active Player account plus five (5) years following account closure, in compliance with applicable AML and PAGCOR-related record-keeping obligations under Philippine law.
• Transaction and Wagering Records: Five (5) years from the date of each transaction, consistent with AMLC reporting requirements.
• Customer Support Records: Three (3) years from the date of each communication, for dispute resolution and quality assurance purposes.
• Marketing Data: Until you withdraw consent or request deletion, whichever occurs first.
• Technical/Log Data: Twelve (12) months from collection, unless retained longer for active fraud or security investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with winph3's data disposal procedures.

9. Security Measures

winph3 implements a multi-layered security framework to protect your personal data against unauthorized access, disclosure, alteration, and destruction:

• Encryption in Transit: All data transmitted between your device and winph3 servers is protected by 256-bit TLS/SSL encryption;
• Encryption at Rest: Sensitive data stored on winph3 servers (including KYC documents and financial identifiers) is encrypted using AES-256;
• Access Controls: Personal data is accessible only to winph3 personnel who require it for their job function, governed by role-based access controls and least-privilege principles;
• Two-Factor Authentication: winph3 offers and strongly recommends 2FA via OTP to all Players to protect Account access;
• Penetration Testing: The Platform undergoes regular security assessments by independent third-party security professionals;
• Incident Response: winph3 maintains a documented data breach response procedure. In the event of a qualifying personal data breach, winph3 will notify the National Privacy Commission and affected Players within seventy-two (72) hours of becoming aware of the breach, as required by NPC Circular 16-03.

10. Your Data Rights Under the Philippine DPA

Under the Data Privacy Act of 2012, Filipino Players have the following rights with respect to their personal data held by winph3:

• Right to Be Informed: The right to know what personal data winph3 holds about you, how it is used, and with whom it is shared — as described in this Privacy Policy;
• Right of Access: The right to request a copy of the personal data winph3 holds about you;
• Right to Rectification: The right to correct inaccurate or incomplete personal data in your Account;
• Right to Erasure / Blocking: The right to request deletion or blocking of personal data where it is no longer necessary for the purposes for which it was collected, subject to applicable legal retention obligations;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to Object: The right to object to the processing of your personal data for direct marketing at any time. Opt-out requests are honored immediately;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe winph3 has violated your data privacy rights.

To exercise any of the above rights, contact the winph3 Data Protection Officer at the address provided in Section 14. winph3 will respond to verified requests within fifteen (15) business days of receipt.

11. Children's Privacy and 21+ Policy

The winph3 Platform is strictly for adults aged 21 years or older, consistent with the minimum legal gambling age applicable under PAGCOR-regulated online gaming standards in the Philippines. winph3 does not knowingly collect personal data from individuals under 21 years of age.

If winph3 discovers that personal data has been collected from an individual under 21, the Account will be immediately suspended, all associated data will be deleted, and any deposits (excluding bonus funds and wagering winnings) will be returned to the original payment source. Parents or guardians who believe their minor child has registered an account on winph3.club should contact the DPO immediately at the contact details in Section 14.

12. Cross-Border Data Transfers

winph3 may transfer personal data to service providers operating outside the Philippines — for example, cloud infrastructure providers or game software suppliers with servers in other jurisdictions. Any such cross-border transfer is conducted only where: (a) the recipient country provides an adequate level of data protection as determined by the NPC; or (b) appropriate safeguards are in place, such as standard contractual clauses or binding corporate rules; or (c) the transfer is necessary for the performance of the Player Account Agreement.

winph3 maintains a register of all third-party processors and cross-border transfer arrangements, available to the DPO upon request.

13. Changes to This Privacy Policy

winph3 reserves the right to update or modify this Privacy Policy at any time. Material changes — those that affect your rights or how we use your personal data — will be communicated to registered Players via their registered contact information and/or through a prominent notice on the Platform at least seven (7) days before the change takes effect.

The "Effective Date" at the top of this document reflects the date of the most recent update. Continued use of the winph3 Platform following the effective date of any revision constitutes acceptance of the updated Policy. Players who do not agree with material changes are encouraged to exercise their right to account closure and data erasure prior to the effective date.

14. Contact & Data Protection Officer

For privacy-related inquiries, data rights requests, or to contact the winph3 Data Protection Officer, please use the following channels:

• Live Chat: Available 24/7 through the in-Platform live chat widget — fastest route for urgent privacy concerns
• Email (plain text — not a link): [email protected] — subject line: "Privacy / Data Rights Request"
• Response Time: DPO responds to verified data rights requests within fifteen (15) business days
• NPC Complaints: Players may also file a complaint directly with the National Privacy Commission of the Philippines at privacy.gov.ph (external link — not accessible from this page per site policy)

When submitting a data rights request, please provide your registered mobile number, full name, and a brief description of the request to allow winph3 to verify your identity and process the request efficiently.