01 Introduction
This Privacy Policy ("Policy") describes how WinPH24 ("WinPH24," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "Player," or "User") who access or use the WinPH24 online gaming platform, available at winph24.net and through the WinPH24 mobile application.
WinPH24 is committed to protecting the privacy and personal data of all players in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all other applicable data protection laws and regulations in the Philippines.
This Policy should be read alongside the WinPH24 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. If you have any questions about this Policy or how WinPH24 handles your data, please refer to Section 15 for contact details.
02 Data Controller
For the purposes of the Philippine Data Privacy Act of 2012 and applicable data protection legislation, WinPH24 is the data controller responsible for the personal data collected through the winph24.net platform and the WinPH24 mobile application.
As data controller, WinPH24 determines the purposes and means by which your personal data is processed. WinPH24 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO using the details provided in Section 15 of this Policy.
03 Personal Data We Collect
WinPH24 collects the following categories of personal data from players and platform users:
3.1 Registration and Identity Data
- Full legal name
- Date of birth (for age verification purposes)
- Residential address (including city, province, and postal code)
- Email address
- Mobile phone number
- Username and encrypted password
3.2 Identity Verification (KYC) Data
- Government-issued identification documents (e.g., Philippine National ID, passport, driver's license, SSS/GSIS ID)
- Proof of address documents (e.g., utility bills, bank statements)
- Selfie or facial image submitted for identity verification purposes
- Payment method ownership documentation where required
3.3 Financial and Transaction Data
- Deposit and withdrawal transaction records
- Payment method details (GCash account reference, PayMaya reference, BPI/BDO/Metrobank account details — stored in tokenized or masked form only)
- Account balance history
- Bonus and promotional credit records
3.4 Gaming Activity Data
- Game session records, including games played, wager amounts, and outcomes
- Login and logout timestamps
- Session duration and frequency data
- Responsible gaming tool usage (deposit limits, session limits, self-exclusion requests)
3.5 Technical and Device Data
- IP address and approximate geolocation
- Device type, operating system, and browser information
- Cookie identifiers and session tokens
- Platform interaction logs and error reports
3.6 Communications Data
- Support chat transcripts and email correspondence with WinPH24 support staff
- Feedback, complaints, and dispute records
- Marketing preference settings
04 How We Collect Your Data
WinPH24 collects personal data through the following means:
4.1 Directly From You
The majority of personal data WinPH24 holds is provided directly by you when you register an account, complete identity verification, make deposits or withdrawals, contact our support team, or interact with platform features such as responsible gaming tools and promotional offers.
4.2 Automatically Through Platform Use
When you access the WinPH24 platform — whether via web browser or the WinPH24 mobile application — certain technical data is collected automatically. This includes your IP address, device identifiers, browser type, session timestamps, and interaction logs. This data is collected through cookies, session tokens, and server-side logging systems.
4.3 From Third-Party Service Providers
WinPH24 may receive personal data from third-party service providers engaged to support platform operations, including:
- Payment processors (GCash, PayMaya, BPI, BDO, Metrobank) — for transaction verification and fraud prevention
- Identity verification service providers — for KYC compliance
- Anti-fraud and anti-money laundering screening services
- Analytics providers — for aggregated, anonymized platform performance data
All third-party service providers engaged by WinPH24 are contractually required to handle your personal data in accordance with applicable data protection laws and WinPH24's data processing standards.
05 How We Use Your Personal Data
WinPH24 uses the personal data it collects for the following purposes:
| Purpose | Data Used |
|---|---|
| Account registration and management | Registration data, identity data |
| Identity verification (KYC/AML compliance) | KYC documents, financial data |
| Processing deposits and withdrawals | Financial data, transaction records |
| Delivering gaming services and features | Gaming activity data, technical data |
| Fraud detection and platform security | Technical data, financial data, gaming data |
| Responsible gaming monitoring and intervention | Gaming activity data, communications data |
| Customer support and dispute resolution | Communications data, account data |
| Legal and regulatory compliance | All categories as required by law |
| Platform analytics and improvement | Technical data (aggregated/anonymized) |
| Promotional communications (with consent) | Registration data, marketing preferences |
WinPH24 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by applicable law.
06 Legal Basis for Processing
WinPH24 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:
- Contractual Necessity: Processing is necessary to perform the contract between you and WinPH24 — specifically, to provide you with access to the WinPH24 gaming platform, process your transactions, and manage your account.
- Legal Obligation: Processing is required to comply with WinPH24's legal obligations, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and applicable gaming regulations in the Philippines.
- Legitimate Interests: Processing is necessary for WinPH24's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services — provided these interests are not overridden by your data protection rights.
- Consent: Where WinPH24 relies on your consent as the legal basis for processing — such as for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
07 Data Sharing & Disclosure
WinPH24 does not sell, rent, or trade your personal data to third parties for commercial purposes. WinPH24 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
7.1 Service Providers
WinPH24 engages trusted third-party service providers to support platform operations, including payment processors, identity verification providers, cloud hosting providers, and customer support platforms. These providers are contractually bound to process your data only on WinPH24's instructions and in accordance with applicable data protection law.
7.2 Regulatory and Law Enforcement Authorities
WinPH24 may disclose personal data to Philippine regulatory authorities, law enforcement agencies, or other government bodies where required to do so by law, court order, or regulatory directive. This includes disclosures required under anti-money laundering regulations and gaming compliance obligations.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of WinPH24's business, your personal data may be transferred to the relevant successor entity. WinPH24 will notify affected players of any such transfer and ensure that the receiving entity is bound by data protection obligations no less protective than those set out in this Policy.
7.4 With Your Consent
WinPH24 may share your personal data with third parties in circumstances not described above where you have provided your explicit prior consent to such sharing.
08 Cookies & Tracking Technologies
WinPH24 uses cookies and similar tracking technologies on the winph24.net platform and the WinPH24 mobile application. Cookies are small text files stored on your device that help WinPH24 recognize you, maintain your session, and improve your experience on the platform.
8.1 Types of Cookies Used
| Cookie Type | Purpose | Required? |
|---|---|---|
| Essential / Session Cookies | Maintain your login session, prevent session hijacking, and enable core platform functionality | Yes — cannot be disabled |
| Security Cookies | Detect and prevent fraudulent activity, bot access, and unauthorized account access | Yes — cannot be disabled |
| Preference Cookies | Remember your language, display, and notification preferences | Optional |
| Analytics Cookies | Collect anonymized data on platform usage patterns to help WinPH24 improve performance and user experience | Optional |
8.2 Managing Cookies
You may manage or disable optional cookies through your browser settings or the WinPH24 cookie preference center. Please note that disabling essential or security cookies may impair the functionality of the WinPH24 platform and prevent you from accessing certain features, including your account.
WinPH24 does not use cookies to track your activity across unrelated third-party websites, and does not share cookie data with advertising networks for targeted marketing purposes.
09 Data Retention
WinPH24 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:
- Account and Registration Data: Retained for the duration of your active WinPH24 account, plus a minimum of five (5) years following account closure, in accordance with Philippine AML and gaming regulatory requirements.
- KYC and Identity Verification Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, as required by applicable AML regulations.
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with Philippine financial record-keeping requirements.
- Gaming Activity Logs: Retained for a minimum of two (2) years from the date of each session, or longer where required for dispute resolution or regulatory compliance purposes.
- Support Communications: Retained for a minimum of two (2) years from the date of the last communication, or until any related dispute is fully resolved.
- Technical and Device Data: Retained for up to twelve (12) months from collection, unless required for longer periods for security or fraud investigation purposes.
Upon expiry of the applicable retention period, WinPH24 will securely delete or anonymize your personal data in accordance with its data disposal procedures.
10 Data Security
WinPH24 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
- SSL/TLS Encryption: All data transmitted between your device and the WinPH24 platform is encrypted using industry-standard SSL/TLS protocols.
- Data Encryption at Rest: Sensitive personal data stored on WinPH24 servers is encrypted at rest using AES-256 encryption.
- Two-Factor Authentication (2FA): WinPH24 offers and encourages the use of two-factor authentication to protect player accounts from unauthorized access.
- Access Controls: Access to personal data within WinPH24's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data protection training.
- Automated Fraud Detection: WinPH24 operates automated systems that continuously monitor for suspicious account activity, unauthorized access attempts, and potential data breaches.
- Regular Security Audits: WinPH24's security infrastructure is subject to regular independent security audits and penetration testing to identify and remediate vulnerabilities.
11 Your Data Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by WinPH24:
- Right to be Informed: You have the right to be informed about how WinPH24 collects and processes your personal data, as set out in this Privacy Policy.
- Right of Access: You have the right to request a copy of the personal data WinPH24 holds about you, along with information about how it is being used.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data WinPH24 holds about you.
- Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to WinPH24's legal retention obligations.
- Right to Object: You have the right to object to the processing of your personal data where WinPH24 relies on legitimate interests as the legal basis for processing.
- Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
- Right to Withdraw Consent: Where WinPH24 processes your data on the basis of your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
- Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe WinPH24 has processed your personal data in violation of applicable data protection law.
To exercise any of the above rights, please contact WinPH24's Data Protection Officer using the contact details provided in Section 15. WinPH24 will respond to all valid data rights requests within thirty (30) days of receipt, or within such extended period as permitted by applicable law where the request is complex or numerous.
12 Children's Privacy
The WinPH24 platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. WinPH24 does not knowingly collect personal data from individuals under the age of 21.
If WinPH24 becomes aware that personal data has been collected from an individual under the age of 21, it will take immediate steps to delete that data and terminate the associated account. Any deposits made by an underage player will be returned to the payment source, less any amounts already wagered, in accordance with WinPH24's Terms & Conditions.
If you believe that WinPH24 may have inadvertently collected personal data from an individual under the age of 21, please contact WinPH24 immediately using the details in Section 15.
13 Third-Party Links
The WinPH24 platform may contain links to third-party websites or services for informational or operational purposes. WinPH24 is not responsible for the privacy practices or content of any third-party websites. This Privacy Policy applies solely to the WinPH24 platform at winph24.net and the WinPH24 mobile application.
WinPH24 encourages you to review the privacy policies of any third-party websites you visit through links on the WinPH24 platform before providing any personal information to those sites.
14 Amendments to This Policy
WinPH24 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, WinPH24 will notify registered players via email or through a prominent notice on the platform prior to the changes taking effect.
The date of the most recent revision will always be displayed at the top of this page. Your continued use of the WinPH24 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the amended Policy, you must cease using the platform and may request account closure in accordance with the WinPH24 Terms & Conditions.
15 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or WinPH24's handling of your personal data, please contact our Data Protection Officer:
WinPH24's support and compliance team is available 24 hours a day, 7 days a week via live chat and email. For data rights requests, please include your registered account email address and a clear description of your request to help us process it efficiently.
You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with WinPH24's response to your data rights request or if you believe your data protection rights have been violated.