winph3 Privacy Policy

winph3 ("we," "us," "our," "the Platform") is committed to protecting the privacy and personal data of all players and users of the winph3 online gaming platform. This Privacy Policy ("Policy") describes how winph3 collects, uses, stores, shares, and protects personal data in connection with the operation of the winph3 platform, accessible at winph3.net.

This Policy is drafted in compliance with the Data Privacy Act of 2012 of the Republic of the Philippines (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). winph3 takes its obligations under Philippine data privacy law seriously and has implemented appropriate technical and organisational measures to ensure the security and confidentiality of personal data entrusted to us by our players.

This Policy should be read together with the winph3 Terms & Conditions, which govern the overall relationship between winph3 and its registered players. Capitalised terms used in this Policy that are not defined herein have the meanings given to them in the winph3 Terms & Conditions.

For the purposes of the Data Privacy Act of 2012 and this Policy, winph3 acts as the personal information controller in respect of the personal data of its registered players and platform users. As personal information controller, winph3 determines the purposes and means of processing personal data collected through the winph3 platform.

winph3 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with applicable data privacy regulations. Players who wish to exercise their data privacy rights or raise concerns about winph3's data practices may contact the winph3 DPO using the contact details provided in Section 14 of this Policy.

winph3 collects the following categories of personal data from players and platform users:

winph3 does not intentionally collect sensitive personal information as defined under the Data Privacy Act of 2012 (such as health data, political opinions, or religious beliefs) unless specifically required for regulatory compliance purposes, in which case such collection will be conducted with your explicit consent.

winph3 collects personal data through the following means:

• Direct Collection: Data you provide when registering a winph3 account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions and surveys.
• Automated Collection: Data collected automatically when you access and use the winph3 platform, including IP address, device identifiers, browser information, session logs, and cookie data. This data is collected via server logs, cookies, and similar tracking technologies.
• Third-Party Sources: Data received from payment processors (such as GCash, PayMaya, BDO, BPI, and Metrobank) in connection with deposit and withdrawal transactions. winph3 may also receive identity verification data from third-party KYC service providers engaged to assist with regulatory compliance.
• Publicly Available Sources: In limited circumstances related to fraud prevention or regulatory compliance, winph3 may access publicly available data sources to verify information you have provided.

winph3 uses the personal data we collect for the following purposes:

• Account Registration and Management: To create and maintain your winph3 player account, verify your identity and age, and manage your account settings and preferences.
• Transaction Processing: To process deposits, withdrawals, and bonus credits to and from your winph3 player wallet via GCash, PayMaya, BDO, BPI, Metrobank, InstaPay, and PESONet.
• Regulatory Compliance: To comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any other applicable regulatory obligations under Philippine law, including reporting obligations to relevant authorities.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, abuse of promotional offers, unauthorised account access, and other security incidents on the winph3 platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance in connection with your use of the winph3 platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling behaviour and to administer responsible gaming tools such as deposit limits, session reminders, and self-exclusion arrangements.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may opt out of marketing communications at any time by updating your notification preferences in your account settings.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the winph3 platform, enhancing game offerings, and optimising the user experience for Philippine players.

winph3 processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and winph3, including account registration, transaction processing, and the provision of gaming services.
• Legal Obligation: Processing is necessary for winph3 to comply with its legal and regulatory obligations under Philippine law, including AML obligations, KYC requirements, and reporting obligations to regulatory authorities.
• Legitimate Interests: Processing is necessary for winph3's legitimate interests in operating a secure, fair, and commercially viable gaming platform, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and interests.
• Consent: Processing is based on your freely given, specific, and informed consent, particularly in the context of marketing communications and the use of non-essential cookies. You have the right to withdraw your consent at any time.

winph3 does not sell, rent, or trade your personal data to third parties for commercial purposes. winph3 may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BDO, BPI, Metrobank, InstaPay, and PESONet, as necessary to process deposits and withdrawals to and from your winph3 account.
• KYC and Identity Verification Providers: Third-party identity verification service providers engaged by winph3 to assist with age and identity verification in compliance with regulatory requirements.
• Regulatory and Law Enforcement Authorities: Philippine government agencies, law enforcement bodies, and regulatory authorities (including PAGCOR and the Anti-Money Laundering Council) where disclosure is required by law or pursuant to a valid legal order.
• Technology Service Providers: Cloud hosting providers, cybersecurity service providers, and IT infrastructure providers engaged by winph3 to support the technical operation of the platform. These providers process data on winph3's behalf and are bound by appropriate data processing agreements.
• Game Software Providers: Third-party game developers and live casino operators whose games are made available on the winph3 platform. Sharing is limited to the data necessary for game delivery and fairness auditing.
• Professional Advisers: Legal, accounting, and audit firms engaged by winph3 in connection with their professional services, subject to applicable professional confidentiality obligations.

winph3 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general principle, winph3 applies the following retention periods:

• Account and Identity Data: Retained for the duration of your winph3 account relationship and for a minimum period of five (5) years following account closure, in compliance with AML record-keeping requirements under Philippine law.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping obligations.
• Gaming Activity Data: Retained for a minimum of three (3) years from the date of each gaming session or transaction, for the purposes of dispute resolution and regulatory compliance.
• Communication and Support Records: Retained for a minimum of two (2) years from the date of each communication, for the purposes of customer service quality assurance and dispute resolution.
• Marketing Preference Data: Retained until you withdraw your consent to marketing communications, at which point marketing preference data will be updated accordingly. Suppression records (i.e., records confirming that you have opted out) will be retained indefinitely to prevent inadvertent future marketing contact.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with winph3's data retention and destruction procedures.

winph3 has implemented appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmissions between your device and the winph3 platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls limiting access to personal data to winph3 personnel who require it for legitimate operational purposes.
• Regular security audits, penetration testing, and vulnerability assessments of the winph3 platform and supporting infrastructure.
• Multi-factor authentication requirements for access to winph3 internal systems that contain personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with the notification requirements of the Data Privacy Act of 2012.

In the event of a personal data breach that poses a risk to your rights and freedoms, winph3 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.

winph3 uses cookies and similar tracking technologies (such as pixel tags and local storage) on the winph3 platform. Cookies are small text files placed on your device by the winph3 platform when you access it. They help winph3 deliver a better, more personalised experience and enable essential platform functions.

winph3 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the winph3 platform. These cookies enable core functions such as account login, session management, and security features. They cannot be disabled without significantly impairing the functionality of the platform.
• Performance and Analytics Cookies: Used to collect anonymised information about how players use the winph3 platform, including which pages are visited most frequently and any error messages encountered. This data helps winph3 improve the platform experience.
• Functional Cookies: Used to remember your preferences and settings, such as your language preference and responsible gaming limit settings, so that you do not need to re-enter them on each visit.
• Marketing Cookies: Used to deliver promotional content and offers that are relevant to your interests, based on your gaming activity and preferences. These cookies are only placed with your consent.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies or to be notified before a cookie is placed. Please note that disabling strictly necessary cookies may affect your ability to use the winph3 platform. For more information on managing cookies, refer to your browser's help documentation.

Under the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, you have the following rights in relation to the personal data that winph3 holds about you:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, and shared, as set out in this Privacy Policy.
• Right to Access: The right to request a copy of the personal data that winph3 holds about you, together with information about how that data is processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data that winph3 holds about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to winph3's legal and regulatory retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or, in certain circumstances, to processing based on winph3's legitimate interests.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that winph3 has violated your data privacy rights.

To exercise any of the above rights, please contact the winph3 Data Protection Officer at [email protected] with the subject line "Data Privacy Request". winph3 will acknowledge your request within five (5) business days and will endeavour to fulfil it within thirty (30) days, subject to any legal limitations.

The winph3 platform is strictly intended for adults aged 21 years and above. winph3 does not knowingly collect personal data from individuals under the age of 21. The minimum legal age for participation in casino-style gambling in the Philippines is 21 years, and winph3 enforces this requirement through its registration and KYC verification processes.

If winph3 discovers or has reason to believe that personal data has been collected from an individual under the age of 21, that Account will be immediately suspended, all balances will be forfeited in accordance with applicable regulations, and the personal data in question will be deleted as soon as practicable. If you believe that a minor may have registered on the winph3 platform, please contact our support team immediately.

winph3 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine data privacy law, or changes to the winph3 platform. The date of the most recent revision will always be displayed at the top of this page.

Where changes to this Policy are material, winph3 will notify registered players by email to the address on file or by displaying a prominent notice on the winph3 platform. Your continued use of the winph3 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes.

winph3 encourages you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. The most current version of this Policy will always be available at winph3.net/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to winph3's handling of your personal data, please do not hesitate to get in touch with us. winph3 is committed to addressing all data privacy enquiries promptly and transparently.

You may contact the winph3 Data Protection Officer through any of the following channels:

If you are not satisfied with winph3's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data protection matters in the Philippines.

This Privacy Policy was last reviewed and updated in January 2026 and is effective as of that date for all registered winph3 players and platform users.