winph2 Privacy Policy

1. Introduction

1.1 winph2 ("we," "us," "our," "the Company") operates the online gaming platform accessible at winph2.biz, providing casino games, sports betting, bingo, esports wagering, and related services to players in the Republic of the Philippines under PAGCOR regulatory oversight.

1.2 This Privacy Policy ("Policy") describes how winph2 collects, processes, uses, stores, shares, and protects personal data relating to registered players, prospective registrants, and visitors to the winph2 platform. This Policy forms part of the overall agreement between you and winph2 and should be read alongside our Terms & Conditions.

1.3 winph2 is committed to complying with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC). We are also subject to PAGCOR's data governance requirements as a licensed operator.

2. Data Controller Identity

2.1 For the purposes of the Data Privacy Act of 2012, winph2 is the personal information controller in respect of player data collected through the winph2.biz platform.

2.2 Our designated Data Protection Officer (DPO) is responsible for overseeing our data protection program and can be contacted as specified in Section 14 of this Policy. Players may contact the DPO directly regarding any data privacy concerns.

3. Personal Data We Collect

3.1 winph2 collects personal data through the following channels: registration forms, KYC verification processes, gameplay activity, payment transactions, customer support interactions, and platform usage analytics.

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, nationality, government ID numbers (passport, SSS/UMID, driver's license)	Registration & KYC
Contact Data	Philippine mobile number, email address, home address (city, province, barangay)	Registration
Financial Data	GCash number, Maya account, BPI/BDO account details, transaction history, deposit & withdrawal records	Payment processing
Gaming Data	Game history, bet records, session durations, win/loss records, bonus utilization	Ongoing gameplay
Technical Data	IP address, device type, operating system, browser type, session tokens	Platform access
Communications Data	Live chat transcripts, support ticket content, email correspondence with winph2	Support interactions

3.2 winph2 does not intentionally collect sensitive personal information beyond what is required for identity verification. Where government-issued IDs contain sensitive information (e.g., religion, blood type on some Philippine IDs), such information is not extracted, stored separately, or used for any processing purpose beyond identity confirmation.

4. How We Use Your Personal Data

4.1 winph2 processes your personal data for the following purposes:

• Account Management: Creating and maintaining your winph2 player account, verifying your identity, and managing your access to the platform.
• Service Delivery: Providing casino games, sports betting, bingo, esports wagering, and all other services available on the winph2 platform.
• Payment Processing: Processing deposits, withdrawals, and refunds via GCash, Maya, QR Ph, BPI, BDO, and other accepted methods. This requires sharing relevant financial data with payment processors.
• Regulatory Compliance: Fulfilling PAGCOR licensing obligations, including player verification, transaction reporting, and record-keeping. Complying with the Anti-Money Laundering Act (AMLA) and reporting obligations to the Anti-Money Laundering Council (AMLC) where triggered.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling indicators. Administering self-exclusion requests and deposit limit settings.
• Fraud Prevention & Security: Detecting and preventing fraud, money laundering, unauthorized account access, and other prohibited activities described in our Terms & Conditions.
• Customer Support: Responding to your enquiries, complaints, and support requests.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time via your account notification settings.
• Platform Improvement: Analyzing aggregated and anonymized usage data to improve the winph2 platform, game lobby, and user experience.

5. Legal Basis for Processing

5.1 winph2 processes your personal data on the following legal bases under RA 10173:

• Contractual Necessity: Processing required to perform the contract between you and winph2 (i.e., providing gaming services to your account).
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLA reporting obligations, and other applicable Philippine laws.
• Legitimate Interests: Processing for fraud prevention, platform security, and internal analytics, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and certain cookies, where your explicit consent has been obtained and can be withdrawn at any time.

6. Sharing Your Personal Data

6.1 winph2 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients in the circumstances described:

• Payment Service Providers: GCash (GXI), PayMaya (Voyager Innovations), BancNet, and other payment processors involved in processing your deposits and withdrawals. These processors handle your financial data under their own privacy policies and applicable financial industry regulations.
• Game Software Providers: Third-party game providers (including but not limited to Pragmatic Play, PG Soft, Evolution Gaming) receive anonymized player identifiers necessary to deliver game sessions. These providers do not receive your full identity data.
• Regulatory Bodies: PAGCOR, AMLC, the National Privacy Commission, and other Philippine government authorities as required by law, regulation, or court order.
• Technology & Infrastructure Providers: Cloud hosting providers, cybersecurity vendors, and analytics platforms that process data on our behalf under data processing agreements that require them to maintain appropriate security standards.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

6.2 winph2 requires all third-party service providers who process personal data on its behalf to maintain appropriate technical and organizational security measures consistent with RA 10173 requirements.

7. Cookies and Tracking Technologies

7.1 winph2 uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, detect fraud, and analyze aggregate platform usage.

7.2 Essential Cookies are necessary for the platform to function and cannot be disabled. They maintain your login session, remember your language preference, and support security features including CSRF protection.

7.3 Analytics Cookies collect anonymized information about how players use the winph2 platform, which pages are visited, and which features are used most frequently. This data is used to improve the platform and is not linked to your personal identity.

7.4 Marketing Cookies may be used to deliver relevant promotional content within the winph2 platform. These are subject to your consent preferences, which can be managed in your browser settings or account preferences.

7.5 Most web browsers allow you to manage cookie preferences. Disabling essential cookies may impair your ability to log in and use the winph2 platform.

8. Data Retention

8.1 winph2 retains your personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods required by Philippine law:

• Account and identity records: Minimum 5 years from account closure, as required by PAGCOR and AMLA regulations.
• Financial transaction records: Minimum 5 years from the date of the transaction, in compliance with AMLA requirements.
• Customer support records: 2 years from the date of the support interaction, unless a longer period is required by an ongoing dispute or legal proceeding.
• Marketing consent records: Retained for the duration of the marketing relationship and 2 years thereafter to evidence consent status.

8.2 Following the expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with winph2's data disposal procedures.

9. Data Security

9.1 winph2 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS 1.3 encryption for all data in transit between your device and winph2 servers
• Encryption of sensitive personal and financial data at rest
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Multi-factor authentication for all administrative access to systems holding personal data
• Regular security assessments, penetration testing, and vulnerability management programs
• Employee data privacy and security training

9.2 Despite these measures, no data transmission over the internet or storage system is completely secure. winph2 cannot guarantee absolute security of your data. In the event of a security incident, winph2 will respond in accordance with its incident response procedures and applicable NPC notification requirements.

10. Your Rights as a Data Subject

10.1 Under RA 10173, you have the following rights with respect to your personal data held by winph2:

• Right to be Informed: The right to know what personal data winph2 collects about you and how it is processed — which this Policy fulfils.
• Right of Access: The right to request a copy of the personal data winph2 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data, subject to our legal and regulatory retention obligations.
• Right to Object: The right to object to processing of your personal data for direct marketing purposes. You may also object to other processing activities on grounds relating to your particular situation.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

10.2 To exercise any of these rights, please contact winph2's Data Protection Officer using the contact details in Section 14. winph2 will respond to data subject requests within the timeframes required by RA 10173 — generally within 30 days of receipt of a verifiable request.

10.3 Some requests may be subject to identity verification before winph2 can process them, to ensure we are responding to the correct data subject.

11. Children and Minors

11.1 winph2 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. The minimum age to register a winph2 account is 21 years, as required by PAGCOR regulations.

11.2 If winph2 becomes aware that personal data has been collected from a person under 21, such data will be deleted promptly and the account closed. If you believe an underage person has registered on winph2, please contact us immediately.

12. Cross-Border Data Transfers

12.1 Some of winph2's service providers and game software partners are based outside the Philippines. Where personal data is transferred to entities in other jurisdictions, winph2 ensures that appropriate safeguards are in place as required by RA 10173 and NPC regulations, including contractual protections requiring the receiving entity to maintain data protection standards equivalent to Philippine requirements.

12.2 Financial data shared with payment processors is subject to the security and compliance requirements of the Philippine payments ecosystem, including BSP regulations applicable to e-money issuers such as GCash and Maya.

13. Updates to This Privacy Policy

13.1 winph2 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be notified to registered players via email and/or a notice on the winph2 platform before the updated Policy takes effect.

13.2 The effective date at the top of this Policy indicates when the current version was last revised. Continued use of the winph2 platform following notification of changes constitutes acceptance of the updated Policy.

14. Contact and Data Protection Officer

For privacy-related enquiries, data subject rights requests, or to contact our Data Protection Officer, please use the following details:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• VIP & Priority: [email protected]
• Live Chat: Available 24/7 on winph2.biz

Email addresses are displayed as plain text and are not clickable links. Please copy them manually when contacting us.

For complaints that cannot be resolved directly with winph2, you may contact the National Privacy Commission (NPC) of the Philippines through its official government channels.