winph5 Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected, processed, and stored by winph5 through our website (https://winph5.cam), mobile applications (iOS and Android), customer support channels, and any other platforms or services we operate (collectively, the "Platform"). By creating an account or using any winph5 service, you acknowledge that you have read, understood, and consent to the data processing practices described in this Privacy Policy.

winph5 operates as a data controller under Philippine law and is responsible for determining the purposes and means of processing your personal data. We are committed to transparency in our data handling practices and provide this Privacy Policy to inform you of your rights and our obligations under the Data Privacy Act of 2012.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the winph5 Platform. Where this Privacy Policy conflicts with other agreements between you and winph5, this Privacy Policy shall prevail with respect to data protection matters.

2. Information We Collect

2.1 Personal Information Provided by You

When you register for a winph5 account, we collect the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., passport number, driver's license number, SSS number)
• Contact Information: Residential address, email address, mobile phone number, and preferred language
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers
• Financial Information: Bank account details, GCash/PayMaya wallet numbers, credit/debit card information, payment history, deposit amounts, and withdrawal requests
• Verification Documents: Copies of government-issued IDs, proof of address (utility bills, bank statements), selfie photographs for facial recognition, and proof of payment method ownership
• Communication Records: Chat transcripts, email correspondence, phone call recordings with customer support, and survey responses

2.2 Information Collected Automatically

When you access the winph5 Platform, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information
• Usage Data: IP address, login timestamps, pages viewed, games played, bet history, time spent on platform, click patterns, and navigation paths
• Location Data: Geographic location derived from IP address or GPS coordinates (for mobile apps), ensuring compliance with geographic restrictions on online gambling
• Cookie Data: Session cookies, authentication tokens, preference settings, and analytics data (see Section 8 for detailed cookie information)
• Transaction History: Deposit and withdrawal records, bonus claims, wagering activity, game outcomes, and account balance changes

2.3 Information from Third Parties

winph5 may receive personal information about you from third-party sources, including:

• Payment Providers: Transaction verification data from GCash, PayMaya, banks, and card processors
• Identity Verification Services: Background check results and identity validation from third-party KYC (Know Your Customer) providers
• Gaming Software Providers: Game performance data, RNG (Random Number Generator) logs, and fraud detection signals from game suppliers like Pragmatic Play, Evolution Gaming, and others
• Marketing Partners: Referral sources, affiliate identification, and campaign performance data (where you have consented to such data sharing)

3. How We Use Your Information

winph5 processes your personal data for the following legitimate purposes:

3.1 Account Management and Service Provision

• Creating, maintaining, and authenticating your winph5 account
• Processing deposits, withdrawals, and other financial transactions
• Providing access to casino games, sports betting, and other gaming services
• Calculating winnings, losses, and account balances
• Managing bonuses, promotions, and loyalty rewards
• Responding to customer support inquiries and resolving disputes

3.2 Legal and Regulatory Compliance

• Verifying your age and identity to prevent underage gambling
• Complying with PAGCOR licensing requirements and reporting obligations
• Detecting and preventing fraud, money laundering, and other illegal activities
• Fulfilling anti-money laundering (AML) and counter-terrorist financing (CTF) obligations under Philippine law
• Responding to lawful requests from government authorities, courts, and law enforcement agencies
• Maintaining records as required by tax authorities and gaming regulators

3.3 Security and Risk Management

• Monitoring gameplay for irregular patterns, collusion, and bonus abuse
• Detecting and preventing unauthorized access, hacking attempts, and cyber attacks
• Protecting the integrity of games and ensuring fair play for all users
• Investigating suspicious transactions and account activities
• Enforcing our Terms and Conditions and protecting our legal rights

3.4 Marketing and Communication

With your consent, we may use your information to:

• Send promotional emails about new games, bonuses, and special offers
• Deliver SMS notifications about deposit bonuses, VIP rewards, and tournament invitations
• Display personalized advertisements based on your gaming preferences and history
• Conduct market research and request feedback through surveys
• Send birthday bonuses and anniversary rewards

You may opt out of marketing communications at any time by clicking "unsubscribe" in any promotional email, adjusting your account settings, or contacting customer support. Note that you cannot opt out of transactional or service-related communications (e.g., withdrawal confirmations, security alerts).

3.5 Analytics and Service Improvement

• Analyzing user behavior to improve website and app functionality
• Conducting A/B testing to optimize user experience
• Identifying popular games and betting patterns to inform content decisions
• Measuring the effectiveness of marketing campaigns
• Generating aggregate, anonymized statistics about platform usage

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, winph5 processes your personal data based on the following legal grounds:

• Consent: You have explicitly agreed to the processing of your personal data for specific purposes, such as receiving marketing communications or sharing data with partners
• Contract Performance: Processing is necessary to fulfill our contractual obligations to provide gaming services under the Terms and Conditions you accepted when creating your account
• Legal Obligation: Processing is required to comply with Philippine laws, including PAGCOR regulations, anti-money laundering laws, tax obligations, and court orders
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, and service improvement, provided these interests do not override your fundamental rights and freedoms

Where we rely on consent as the legal basis, you have the right to withdraw your consent at any time. However, withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal, and may limit your ability to use certain features of the Platform.

5. How We Share Your Information

winph5 does not sell your personal data to third parties. However, we may share your information with the following categories of recipients for legitimate business purposes:

5.1 Service Providers and Business Partners

• Payment Processors: GCash, PayMaya, banks, and card networks to process deposits and withdrawals
• Gaming Software Providers: Pragmatic Play, Evolution Gaming, NetEnt, and other game suppliers to deliver gaming content and validate outcomes
• Cloud Hosting Providers: Secure data centers that host our servers and databases
• Identity Verification Services: Third-party KYC providers that verify your identity documents and conduct background checks
• Customer Support Platforms: Chat software and ticketing systems used to manage customer inquiries
• Analytics Services: Google Analytics and similar tools to analyze platform usage (in aggregated, anonymized form where possible)
• Marketing Partners: Email service providers, SMS gateways, and advertising platforms (only where you have consented to marketing)

All service providers are contractually bound to process your data only for specified purposes, maintain appropriate security measures, and comply with Philippine data protection laws. We conduct due diligence on all partners before sharing any personal information.

5.2 Legal and Regulatory Authorities

We may disclose your personal data to government agencies, regulators, and law enforcement when required by law or necessary to:

• Comply with PAGCOR reporting requirements and audit requests
• Respond to subpoenas, court orders, or lawful requests from authorities
• Cooperate with Anti-Money Laundering Council (AMLC) investigations
• Report suspicious transactions to the Bureau of Internal Revenue (BIR) or other tax authorities
• Assist in criminal investigations or prevent imminent harm to persons or property

5.3 Business Transfers

In the event of a merger, acquisition, asset sale, or bankruptcy, your personal data may be transferred to the successor entity. We will notify you via email and prominent notice on our website at least thirty (30) days before any such transfer, and the acquiring entity will be bound by this Privacy Policy until you are provided with an updated policy.

6. Data Security Measures

winph5 implements industry-leading technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, or alteration:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest (passwords, payment details) is encrypted using AES-256 encryption
• Access Controls: Employee access to personal data is restricted on a need-to-know basis. Multi-factor authentication is required for all administrator accounts
• Secure Infrastructure: Our servers are hosted in Tier III+ data centers with physical security, redundant power supplies, and DDoS protection. Regular security patches and updates are applied
• Network Security: Firewalls, intrusion detection systems, and regular vulnerability scans protect against cyber attacks
• Data Minimization: We collect only the personal data necessary for specified purposes and delete data when it is no longer needed
• Regular Audits: Third-party security audits and penetration testing are conducted at least annually to identify and remediate vulnerabilities
• Incident Response: We maintain a data breach response plan and will notify affected users and the National Privacy Commission within seventy-two (72) hours of discovering any breach that poses a risk to your rights and freedoms

While we employ robust security measures, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect unauthorized access to your account.

7. Data Retention and Deletion

winph5 retains your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy and comply with legal obligations:

• Active Accounts: Personal data is retained for the duration of your account's active status and for a period of six (6) months after voluntary account closure to allow for reopening and to resolve any pending disputes
• Transactional Records: Financial transaction records, bet history, and payment details are retained for five (5) years from the date of the transaction, as required by PAGCOR regulations and tax laws
• Identity Verification Documents: Copies of IDs and verification documents are retained for seven (7) years after account closure to comply with anti-money laundering record-keeping requirements
• Marketing Communications: Records of marketing consents and opt-outs are retained until you withdraw consent or close your account, plus an additional two (2) years to defend against potential legal claims
• Legal Holds: Data may be retained beyond standard retention periods if required for ongoing legal proceedings, investigations, or regulatory audits

After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be associated with you. You may request early deletion of certain data that is not subject to legal retention requirements by contacting our Data Protection Officer.

8. Cookies and Tracking Technologies

winph5 uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that enable various functionalities.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for basic platform functionality, including authentication, session management, and security features. These cannot be disabled without impairing site functionality
• Performance Cookies: Collect anonymous information about how users interact with the Platform (pages visited, time spent, error messages) to help us improve performance and user experience
• Functionality Cookies: Remember your preferences (language, display settings, game favorites) to provide a personalized experience
• Targeting/Advertising Cookies: Track your browsing behavior across websites to deliver relevant advertisements. These are only used with your explicit consent

8.2 Managing Cookie Preferences

You can manage cookie settings through your browser preferences or our cookie consent tool available in your account settings. Disabling cookies may limit certain features of the Platform. Most browsers allow you to refuse all cookies or accept only certain types. Refer to your browser's help documentation for instructions on managing cookies.

9. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal data we hold about you, including information about how it is processed
• Right to Rectification: You may request correction of inaccurate or incomplete personal data
• Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to legal retention requirements
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes
• Right to Data Portability: You may request a machine-readable copy of your personal data for transfer to another service provider
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time
• Right to Lodge a Complaint: You may file a complaint with the National Privacy Commission if you believe your rights have been violated

To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond to your request within fifteen (15) days and may require verification of your identity before fulfilling your request. Some requests may be subject to exceptions under Philippine law, such as when data retention is required for legal compliance or when disclosure would compromise security.

10. International Data Transfers

Your personal data is primarily stored and processed within the Philippines. However, some of our service providers and partners may be located in other countries. When we transfer personal data outside the Philippines, we ensure that adequate safeguards are in place, including:

• Transferring data only to countries recognized by the National Privacy Commission as providing adequate data protection
• Using Standard Contractual Clauses approved by the National Privacy Commission
• Obtaining your explicit consent for the transfer where required by law
• Ensuring the recipient is certified under an approved cross-border data transfer framework

11. Children's Privacy

The winph5 Platform is not intended for persons under twenty-one (21) years of age. We do not knowingly collect personal data from minors. If we discover that we have inadvertently collected information from a person under 21, we will immediately delete such data and close the associated account. Parents or guardians who believe their child has provided personal data to winph5 should contact us immediately at [email protected].

12. Changes to This Privacy Policy

winph5 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. Material changes will be communicated via email to your registered address and through a prominent notice on our website at least thirty (30) days before taking effect. Your continued use of the Platform after the effective date of changes constitutes acceptance of the updated Privacy Policy.

We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your personal information.

13. Contact Information

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, please contact:

Data Protection Officer
winph5
Email: [email protected]
Customer Support: [email protected] (available 24/7)

You may also contact the National Privacy Commission if you believe your data protection rights have been violated:

National Privacy Commission
5th Floor, Philippine International Convention Center
Vicente Sotto Street, Pasay City, 1308 Metro Manila
Email: [email protected]
Website: privacy.gov.ph