winph 99 Privacy Policy

This Privacy Policy ("Policy") describes how winph 99 ("we," "us," "our," or "winph 99"), operating the online gaming platform at winph99.lat, collects, processes, stores, shares, and protects personal data relating to individuals ("you," "your," "Data Subject") who access, register with, or use the winph 99 platform and its associated services.

This Policy applies to all personal data processed by winph 99 in connection with the operation of its online casino, sports betting, bingo, slots, arcade, and live dealer services accessible to players in the Philippines. It covers data collected through the winph99.lat website, any winph 99 mobile applications, live chat and email support channels, and any other touchpoint through which you interact with winph 99.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (the "DPA"), and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. This Policy should be read in conjunction with the winph 99 Terms & Conditions.

For the purposes of the Philippine Data Privacy Act of 2012, the personal information controller responsible for your data is winph 99, the operator of the platform at winph99.lat. winph 99 determines the purposes and means of processing your personal data and is accountable for ensuring that all processing activities are lawful, fair, and transparent.

winph 99 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA and serving as the primary point of contact for data privacy matters. Contact details for the winph 99 DPO are provided in Section 14 of this Policy.

Where winph 99 engages third-party service providers to process personal data on its behalf ("processors"), winph 99 remains the data controller and ensures that all processors operate under written data processing agreements that comply with the DPA and its Implementing Rules.

winph 99 collects the following categories of personal data, depending on how you interact with the platform:

3.1 Identity and Registration Data

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — must be 21 or older)
• Nationality and country of residence
• Philippine mobile number and email address
• Government-issued identification document number and images (PhilSys ID, passport, driver's license, SSS/UMID, voter's ID, or PRC license)
• Account username and encrypted password

3.2 Financial and Transaction Data

• GCash and PayMaya account identifiers (mobile number)
• Bank account details for BPI, BDO, or Metrobank transactions
• Deposit and withdrawal transaction history
• Account balance and bonus balance information
• Wagering and gaming history, including game logs, bet amounts, and outcomes

3.3 Technical and Usage Data

• IP address and geolocation data (region-level)
• Device type, operating system, and browser version
• Session logs, including login timestamps and duration
• Pages visited and features accessed on the winph 99 platform
• Performance and error logs generated during gameplay

3.4 Communications Data

• Records of live chat and email communications with winph 99 support
• Feedback and survey responses submitted through the platform
• Marketing communication preferences (opt-in or opt-out status)

winph 99 collects personal data through the following means:

4.1 Directly From You

The majority of personal data winph 99 holds is provided directly by you during account registration, KYC verification, transaction initiation, support interactions, and when you voluntarily provide information through surveys or feedback forms.

4.2 Automatically Through the Platform

When you use the winph 99 platform, technical data is collected automatically through cookies, server logs, and analytics tools. This includes your IP address, session duration, device information, and gameplay data. See Section 9 for full details on our use of cookies and tracking technologies.

4.3 From Third-Party Sources

winph 99 may receive personal data from third-party sources in limited circumstances, including: identity verification service providers used during KYC checks; payment processors such as GCash and PayMaya for transaction confirmation; and fraud detection services that flag suspicious account activity. All third-party sources used by winph 99 are required to have a lawful basis for sharing your data with us.

winph 99 processes your personal data for the following specific purposes:

winph 99 does not use your personal data for any purpose not listed above without first obtaining your explicit consent or establishing a new lawful basis for processing under the DPA.

Under the Philippine Data Privacy Act, winph 99 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the winph 99 Terms & Conditions — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with PAGCOR regulations, Anti-Money Laundering Act (AMLA) obligations, tax reporting requirements, and other applicable Philippine laws.
• Legitimate Interests: Processing necessary for winph 99's legitimate interests, including fraud prevention, platform security, and responsible gaming monitoring — where these interests are not overridden by your data protection rights.
• Consent: For marketing communications and certain non-essential cookies, winph 99 processes data only with your explicit, freely given, and withdrawable consent.

Where winph 99 relies on consent as the legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw consent, contact winph 99 at [email protected] or update your preferences in your account settings.

winph 99 does not sell, rent, or trade your personal data to third parties for their commercial benefit. winph 99 may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

7.1 Service Providers and Processors

winph 99 engages third-party processors for: KYC and identity verification; payment processing (GCash, PayMaya, BPI, BDO, Metrobank); fraud detection and anti-money laundering screening; platform hosting and cloud infrastructure; customer support software; and email and SMS communication services. All processors operate under written agreements that require them to protect your data in accordance with the DPA.

7.2 Regulatory and Government Authorities

winph 99 is required by law to share certain personal data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other Philippine government agencies upon lawful request. winph 99 will not disclose data to government authorities beyond what is legally required.

7.3 Game Providers

Certified game providers whose games appear in the winph 99 lobby may receive aggregated or anonymized gameplay data for the purpose of technical support, game integrity verification, and RNG audit compliance. Identifiable personal data is not shared with game providers for marketing or commercial use.

winph 99 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, to comply with applicable legal retention obligations, or to resolve disputes. The following retention periods apply:

• Account and identity data: For the duration of your account and for five (5) years following account closure, as required by PAGCOR and AMLA regulations.
• Transaction and financial records: Five (5) years from the date of the transaction, in compliance with AMLA obligations.
• KYC documents: Five (5) years following account closure or the expiry of the relevant regulatory investigation period, whichever is longer.
• Support communications: Two (2) years from the date of the communication, unless the matter involves an ongoing dispute or legal proceeding.
• Marketing preferences and consent records: For the duration of your account plus three (3) years after closure.
• Technical and usage logs: Twelve (12) months on an active rolling basis, after which they are anonymized or deleted.

Upon the expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with winph 99's data disposal procedures. Data subject to ongoing legal proceedings or regulatory investigations will be retained until the matter is fully resolved.

winph 99 uses cookies and similar tracking technologies on the winph99.lat platform. Cookies are small text files stored on your device that help us provide a functional and personalized experience.

Essential Cookies

These cookies are strictly necessary for the winph 99 platform to function. They maintain your login session, protect against cross-site request forgery, and ensure secure transaction processing. Essential cookies cannot be disabled without preventing you from using core platform features.

Analytics Cookies

winph 99 uses analytics cookies to understand how players use the platform — which pages are visited most frequently, where players encounter errors, and how the platform performs across different devices and connections. Analytics data is aggregated and not used to identify individual players for marketing purposes.

Preference Cookies

These cookies remember your platform preferences — such as language settings and display options — to provide a more consistent experience across sessions.

Marketing Cookies

winph 99 may use marketing cookies to deliver relevant promotional content. Marketing cookies are only activated with your explicit consent. You may withdraw consent and clear marketing cookies from your browser settings at any time.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use the winph 99 platform.

The winph 99 platform is strictly intended for individuals aged twenty-one (21) years and older. winph 99 does not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step in the winph 99 registration process, and access to real-money gaming is not granted until age has been confirmed through government-issued identification.

If winph 99 becomes aware that personal data has been collected from an individual under the age of 21 — whether due to fraudulent age representation or a failure in our age verification process — we will immediately close the account, void all associated transactions, and securely delete all personal data related to that individual.

Parents and guardians are encouraged to use parental control software and internet filtering tools to prevent minors from accessing online gambling platforms, including winph 99. If you have reason to believe that a minor under the age of 21 has accessed or registered on the winph 99 platform, please contact us immediately at [email protected].

winph 99 implements technical and organizational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include, but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and winph 99 servers is encrypted using current-generation SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data, including ID document images and financial account identifiers, is stored in encrypted form.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. winph 99 staff are granted access only to the categories of data necessary for their specific role.
• Two-Factor Authentication (2FA): winph 99 offers 2FA for all member accounts and requires it for administrative access to data systems.
• Regular Security Audits: winph 99 conducts periodic security assessments, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses.
• Incident Response Plan: winph 99 maintains a documented incident response plan. In the event of a data breach, the plan includes notification procedures for the NPC and affected data subjects as required by the DPA.

While winph 99 applies robust security measures, no platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. winph 99 strongly recommends enabling 2FA and using a unique, strong password for your account.

Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by winph 99. These rights can be exercised by submitting a request to our Data Protection Officer at [email protected].

• Right to be Informed: You have the right to know that winph 99 is processing your personal data, for what purposes, and on what legal basis — which this Privacy Policy provides.
• Right to Access: You may request a copy of all personal data winph 99 holds about you. winph 99 will respond to access requests within fifteen (15) business days.
• Right to Rectification: You may request correction of inaccurate or outdated personal data. Account profile corrections can often be made directly from your winph 99 dashboard.
• Right to Erasure / "Right to be Forgotten": You may request deletion of your personal data, subject to legal retention obligations under PAGCOR and AMLA requirements.
• Right to Object: You may object to the processing of your data for direct marketing at any time. You may also object to processing based on legitimate interests on grounds relating to your particular situation.
• Right to Data Portability: You may request your personal data in a structured, commonly used, and machine-readable format.
• Right to File a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data rights have not been respected. The NPC may be contacted at privacy.gov.ph.

winph 99 will verify your identity before processing any privacy rights request. Requests are processed within fifteen (15) business days. Where a request requires additional time due to complexity, winph 99 will notify you within the initial response period.

winph 99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes — defined as changes that significantly affect how we process your personal data or reduce your rights — will be communicated to registered members via email notification at least fourteen (14) days before the new Policy takes effect.

Non-material changes, such as clarifications of existing practices or corrections of typographical errors, may be made without advance notice. The "Last Updated" date at the top of this page will reflect the most recent revision.

Your continued use of the winph 99 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with a material change, you should discontinue use of the platform and request account closure before the new Policy takes effect.

For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data by winph 99, please contact our Data Protection Officer (DPO) through the following channels:

• Email: [email protected] (mark the subject line: "Privacy / Data Request")
• Live Chat: Available 24/7 from your winph 99 account dashboard — request transfer to the Privacy team
• Website: winph99.lat

winph 99 aims to acknowledge all privacy-related correspondence within two (2) Philippine business days and to resolve requests within fifteen (15) business days. If your matter requires additional time, you will be notified with an estimated resolution timeline.