winph5 Privacy Policy

1 Introduction

winph5 ("winph5," "we," "us," "our") is committed to protecting the privacy and personal data of all individuals who use the winph5 online casino platform accessible at winph5.vip (the "Platform"). This Privacy Policy describes how winph5 collects, uses, discloses, stores, and protects personal data in connection with the operation of the Platform.

This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines. winph5 is committed to upholding the data privacy rights of all Players, particularly those based in Metro Manila, Cebu, Davao, Quezon City, Makati, and across the Philippine archipelago.

By accessing or using the winph5 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, please discontinue use of the Platform immediately.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for your personal data is:

winph5 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection law. If you have any questions or concerns about how winph5 handles your personal data, you may contact the DPO directly using the contact details provided in Section 16 of this Policy.

3 Personal Data We Collect

winph5 collects the following categories of personal data from Players and Platform users:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — 21+ requirement)
• Gender
• Nationality and country of residence
• Government-issued ID number (e.g., Philippine passport, SSS, UMID, driver's license)
• Username and encrypted password

3.2 Contact Data

• Philippine mobile number
• Email address
• Residential address (province, city/municipality, barangay, ZIP code)

3.3 Financial Data

• GCash or PayMaya / Maya account details (mobile number linked to e-wallet)
• Philippine bank account details (bank name, account number) for bank transfer transactions
• Debit card details (card number, expiry — stored in tokenized form only)
• Transaction history, including deposits, withdrawals, wagers, and winnings

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, pages visited, and features used on the Platform
• Login timestamps and access logs
• Cookie identifiers and similar tracking data (see Section 8)

3.5 KYC & Verification Documents

• Scanned or photographed copies of government-issued photo ID
• Proof of address documents (e.g., utility bill, bank statement)
• Selfie or liveness verification image for identity matching
• Proof of payment method ownership where required

3.6 Communications Data

• Records of your communications with winph5 customer support via live chat or email
• Feedback, complaints, and survey responses submitted to winph5
• Responsible gaming requests, including self-exclusion and limit-setting records

4 How We Collect Your Data

winph5 collects personal data through the following means:

• Direct Collection: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access and interact with the Platform, including through cookies, web beacons, and server logs.
• Third-Party Sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance service providers; payment verification data from payment processors such as GCash and Maya.
• Regulatory Sources: Information received from PAGCOR or other regulatory authorities in connection with licensing, compliance, or investigation requirements.

5 How We Use Your Personal Data

winph5 uses your personal data for the following purposes:

winph5 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

6 Legal Basis for Processing

Under the Data Privacy Act of 2012, winph5 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your winph5 Account, process transactions, and provide gaming services.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulations, anti-money laundering legislation, and tax reporting requirements.
• Legitimate Interests: Processing necessary for winph5's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your data privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

winph5 does not sell your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the processing of deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party service providers engaged to perform identity verification, age verification, and document authentication on winph5's behalf.
• Fraud & AML Compliance Providers: Service providers engaged to assist with fraud detection, anti-money laundering screening, and sanctions checking.
• IT & Cloud Infrastructure Providers: Hosting, database, and cloud service providers who process data on winph5's behalf under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other Philippine government authorities, where disclosure is required by law or regulatory order.
• Law Enforcement: Philippine law enforcement agencies where disclosure is required by a valid legal process, court order, or to protect the rights, property, or safety of winph5, its Players, or the public.
• Professional Advisors: Legal counsel, auditors, and accountants engaged by winph5, subject to professional confidentiality obligations.

All third-party service providers who process personal data on winph5's behalf are required to enter into data processing agreements that obligate them to process data only on winph5's instructions and to implement appropriate security measures.

8 Cookies & Tracking Technologies

winph5 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your login state and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game preferences, and responsible gaming limits to provide a personalized experience.
• Analytics Cookies: Collect aggregated, anonymized data about how Players use the Platform to help winph5 improve features and performance. Used with your consent.
• Marketing Cookies: Used to deliver relevant promotional content about winph5 to you. Used only with your explicit consent.

You may manage your cookie preferences through your browser settings or through the cookie consent tool available on the Platform. Please note that disabling certain cookies may affect the functionality of the Platform.

9 Data Retention

winph5 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymized:

Where winph5 is required by law to retain data for a longer period, the statutory retention period will apply. winph5 will not retain personal data beyond the periods specified above unless required by a valid legal hold or ongoing legal proceedings.

10 Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by winph5. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 16.

winph5 will respond to all data privacy rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with prior notice to you.

11 Data Security

winph5 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: AES-256 encryption for data at rest; TLS 1.3 for all data in transit between your device and winph5 servers.
• Access Controls: Role-based access controls ensuring that only authorized winph5 personnel with a legitimate need can access personal data.
• Two-Factor Authentication: Available to all Players for Account login; mandatory for winph5 administrative systems.
• Penetration Testing: Regular third-party security assessments and penetration testing of the Platform and underlying infrastructure.
• Secure Development: Security-by-design principles applied throughout the Platform's software development lifecycle.
• Staff Training: Regular data privacy and security training for all winph5 personnel who handle personal data.
• Incident Response: A documented data breach response plan enabling rapid detection, containment, and notification in the event of a security incident.

While winph5 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. winph5 cannot guarantee absolute security and encourages Players to use strong, unique passwords and to enable two-factor authentication on their Accounts.

12 Children's Privacy

The winph5 Platform is strictly intended for individuals who are at least twenty-one (21) years of age, in accordance with Philippine law governing casino-style gambling. winph5 does not knowingly collect personal data from individuals under the age of 21.

If winph5 discovers or has reason to believe that personal data has been collected from an individual under the age of 21, winph5 will immediately suspend the associated Account, delete the personal data in question, and report the matter to the appropriate authorities where required by law.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to winph5, please contact our Data Protection Officer immediately using the contact details in Section 16.

13 Cross-Border Data Transfers

winph5 primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to, or accessed by, service providers located outside the Philippines — for example, cloud infrastructure providers or KYC technology vendors.

Where such cross-border transfers occur, winph5 ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012 and NPC guidelines, including:

• Entering into data transfer agreements that incorporate the NPC's standard contractual clauses or equivalent protections.
• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized by the NPC.
• Obtaining your explicit consent for transfers where required by applicable law.

14 Third-Party Links

The winph5 Platform may contain links to third-party websites or services for informational purposes. winph5 is not responsible for the privacy practices or content of any third-party websites. This Privacy Policy applies solely to personal data collected by winph5 through the winph5 Platform.

winph5 encourages you to review the privacy policies of any third-party websites you visit. The inclusion of a link on the winph5 Platform does not constitute an endorsement of the linked website or its privacy practices.

15 Updates to This Privacy Policy

winph5 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, winph5 will notify registered Players by posting a prominent notice on the Platform and, where practicable, by sending a notification to your registered email address.

The date of the most recent revision is indicated at the top of this page. Your continued use of the winph5 Platform following the effective date of any update constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with the updated Policy, you must cease using the Platform and may request Account closure in accordance with our Terms & Conditions.

winph5 recommends that you review this Privacy Policy periodically to stay informed of how we protect your personal data.

16 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by winph5, please contact our Data Protection Officer:

winph5 aims to respond to all data privacy inquiries and rights requests within thirty (30) days. If you are not satisfied with winph5's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through its official channels.

For responsible gaming concerns, including self-exclusion requests, please visit our Responsible Gaming page or contact our support team directly.