winph11 Privacy Policy

1. Introduction and Scope

winph11 ("winph11", "we", "us", "our") is committed to protecting the personal data of every Filipino player who uses our online casino, sports betting, and gaming platform accessible at https://winph11.win (the "Platform"). This Privacy Policy ("Policy") sets out in clear, transparent terms how winph11 collects, uses, stores, discloses, and safeguards personal information in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the regulations issued by the National Privacy Commission (NPC) of the Philippines.

This Policy applies to all personal data collected through: the winph11 website and any associated subdomains; account registration and KYC verification processes; financial transactions including GCash, Maya, and bank transfers; customer support interactions; and marketing communications where you have given your consent.

By registering an account or using any winph11 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you must not create an account or use the Platform.

2. Data Controller Information

winph11 acts as the Data Controller in respect of personal data collected from players and visitors to the Platform. winph11 is operated under the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR). For all data privacy enquiries, requests, or complaints, you may contact our designated Data Protection Officer (DPO) at the following address:

• Email (plain text): [email protected] — subject line: "Data Privacy Enquiry"
• Platform: https://winph11.win
• Operating Jurisdiction: Republic of the Philippines

3. Personal Data We Collect

Depending on how you interact with the winph11 Platform, we may collect and process the following categories of personal data:

3.1 Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for mandatory age verification — 21+ requirement)
• Government-issued identification numbers (e.g., PhilSys ID, passport number, driver's licence number, UMID)
• Photograph or scanned copy of identification documents submitted during KYC

3.2 Contact Data

• Email address
• Philippine mobile number (in 09XX-XXX-XXXX format)
• Residential address (for address verification purposes)

3.3 Financial Data

• GCash account name and registered mobile number
• Maya / PayMaya account details
• Bank account names, numbers, and institution (BPI, BDO, Metrobank, etc.) as provided for withdrawal verification
• Transaction history: deposits, withdrawals, and bonus credits

3.4 Gaming and Behavioural Data

• Game play history, bet amounts, win/loss records, and session durations
• Sports betting activity including markets selected and stakes placed
• Bonus redemption history and promotional participation records

3.5 Technical Data

• IP address and approximate geographic location (derived from IP, not GPS)
• Device type, operating system, and browser version
• Session logs, login timestamps, and account activity records
• Cookies and similar tracking data (see Section 9)

3.6 Communications Data

• Records of live chat conversations with winph11 support agents
• Email correspondence sent to or received from winph11
• Feedback, complaint, and dispute records

4. How We Collect Your Data

winph11 collects personal data through the following channels:

• Direct provision: Data you submit during account registration, KYC verification, deposit and withdrawal requests, support interactions, and promotional opt-ins.
• Automated collection: Technical data collected automatically when you access the Platform, including cookies, server logs, and session tracking.
• Third-party sources: Identity verification agencies used for KYC compliance; payment processors (GCash, Maya, banks) for transaction verification; fraud prevention and anti-money laundering screening services; and PAGCOR's regulatory databases where applicable.

5. Legal Bases for Processing

winph11 processes your personal data only where we have a valid legal basis under the Data Privacy Act of 2012. The applicable legal bases are:

• Contractual necessity: Processing required to create and manage your winph11 account, process deposits and withdrawals, and deliver gaming services you have requested.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) obligations, Know Your Customer (KYC) requirements, and NPC data privacy regulations.
• Legitimate interests: Processing for fraud prevention, responsible gaming monitoring, platform security, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications (e.g., promotional emails, SMS offers), where you have given explicit opt-in consent. You may withdraw consent at any time by contacting [email protected].

6. How We Use Your Personal Data

winph11 uses collected personal data for the following purposes:

• To register and manage your winph11 account and verify your identity and age (21+ mandatory)
• To process deposits and withdrawals via GCash, Maya, and linked bank accounts
• To provide gaming services including live casino, slots, sports betting, bingo, and fishing games
• To administer bonus offers, promotions, and loyalty programmes
• To detect and prevent fraud, money laundering, and other prohibited activities
• To comply with PAGCOR reporting requirements and AMLC obligations
• To monitor and enforce responsible gaming limits, self-exclusion requests, and player protection measures
• To provide customer support via live chat and email
• To send transactional communications (e.g., deposit confirmations, withdrawal notifications, OTPs)
• To send marketing communications where you have given explicit consent
• To improve Platform functionality, user experience, and game offerings based on aggregated behavioural data

7. Disclosure of Personal Data to Third Parties

winph11 does not sell your personal data to third parties. We may share personal data with the following categories of recipients only to the extent necessary for the purposes described in Section 6:

• Payment processors: GCash (Mynt), Maya Philippines, BPI, BDO, Metrobank, and other payment service providers, for the sole purpose of processing your financial transactions.
• KYC and identity verification providers: Third-party identity verification services engaged to support age verification and anti-fraud measures in compliance with PAGCOR and AMLA requirements.
• Game providers: Licensed game studios (e.g., JILI Games, PG Soft, Pragmatic Play) receive session-level technical data necessary to deliver game content. Game providers do not receive your identity or financial data.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies as required by law.
• Legal and professional advisors: Where required in connection with legal proceedings, compliance audits, or regulatory investigations.

All third parties engaged by winph11 are required to implement appropriate data protection measures and are prohibited from using your personal data for any purpose other than the specific service they provide to winph11.

8. Data Retention

winph11 retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods:

• Account data and KYC records: Retained for a minimum of 5 years from account closure, in compliance with PAGCOR and AMLA record-keeping requirements.
• Transaction and gaming records: Retained for a minimum of 5 years from the date of each transaction, in compliance with AMLA obligations.
• Support and communications records: Retained for 2 years from the date of the last interaction.
• Marketing consent records: Retained until consent is withdrawn plus 1 year for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised aggregate data (which cannot identify any individual) may be retained indefinitely for statistical and service improvement purposes.

9. Cookies and Tracking Technologies

winph11 uses cookies and similar technologies (e.g., web beacons, pixel tags) to operate and improve the Platform. The categories of cookies we use are:

• Strictly necessary cookies: Essential for Platform functionality, including maintaining your logged-in session and processing transactions. These cannot be disabled without impairing Platform use.
• Performance and analytics cookies: Collect anonymised data on how players navigate the Platform, which games are most popular, and where technical errors occur. Used to improve Platform performance.
• Functional cookies: Remember your preferences such as language settings and preferred games.
• Marketing cookies: Used only where you have given explicit consent, to deliver relevant promotional content and measure campaign effectiveness.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may affect your ability to use the winph11 Platform, including the winph11 Login function.

10. Data Security

winph11 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and winph11 servers
• Encryption of sensitive data fields (passwords, payment details) at rest using industry-standard algorithms
• Multi-factor authentication options for player account access
• Regular security audits and penetration testing conducted by qualified third-party security firms
• Strict access controls ensuring that winph11 staff can only access personal data on a need-to-know basis
• Incident response procedures that include mandatory notification to the NPC within 72 hours of a qualifying personal data breach

While winph11 employs all reasonable security measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your winph11 Login credentials. If you suspect unauthorised access to your account, contact [email protected] immediately.

11. Your Rights Under Philippine Data Privacy Law

As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights in relation to your personal data held by winph11:

• Right to be Informed: The right to know what personal data winph11 collects about you and how it is processed — as set out in this Policy.
• Right of Access: The right to obtain a copy of the personal data winph11 holds about you.
• Right to Rectification: The right to correct inaccurate or incomplete personal data.
• Right to Erasure or Blocking: The right to request deletion or blocking of personal data where processing is no longer necessary or was based on withdrawn consent — subject to our legal retention obligations under PAGCOR and AMLA requirements.
• Right to Object: The right to object to processing based on legitimate interests, including processing for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format for transfer to another controller.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your privacy rights have been violated.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Subject Rights Request". winph11 will respond within 15 business days. Identity verification may be required before processing your request.

12. Children's Privacy

The winph11 Platform is strictly for persons aged 21 years and above. winph11 does not knowingly collect personal data from individuals under the age of 21. Age verification is performed during account registration and as part of our ongoing KYC compliance process. If winph11 discovers that personal data has been collected from an individual under 21, the account will be immediately closed, personal data deleted in accordance with our obligations, and the matter reported to PAGCOR as required by our licensing conditions. If you believe a minor may have registered on the Platform, contact [email protected] immediately.

13. Changes to This Privacy Policy

winph11 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform functionality. Material changes will be communicated to registered players via email or in-platform notification prior to the effective date. The updated Policy will be published on this page with a revised "Last Updated" date. Continued use of the winph11 Platform following the effective date of any change constitutes acceptance of the revised Privacy Policy.

14. Contact and Complaints

For any questions, requests, or complaints regarding this Privacy Policy or winph11's data practices, contact our Data Protection Officer:

• Email: [email protected] — subject: "Data Privacy Enquiry" (plain text only — not a clickable link)
• Response time: Within 15 business days for formal data subject requests; within 24 hours for general enquiries via live chat

If you are not satisfied with winph11's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines through their official channels.