Privacy Policy – winph9 Online Casino

1. Introduction

winph9 ("winph9," "we," "our," or "us") operates the online casino and sports betting platform accessible at winph9.co and its associated subdomains (the "Platform"). This Privacy Policy describes our practices with respect to the collection, use, storage, disclosure, and protection of personal data provided by individuals ("Players," "you," or "your") who register for or use the winph9 Platform.

winph9 is committed to protecting the privacy of Filipino players in accordance with the requirements of Republic Act No. 10173, known as the Data Privacy Act of 2012, and the implementing rules and regulations issued by the National Privacy Commission of the Philippines. This Policy should be read in conjunction with the winph9 Terms & Conditions.

By accessing the winph9 Platform, registering an account, or submitting personal data through any winph9 interface, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your data as described herein.

2. Data Controller

For the purposes of Philippine data privacy law, winph9 acts as the personal information controller with respect to player data collected through the Platform. winph9 determines the purposes and means of processing personal data in connection with the operation of its online casino and sports betting services.

winph9 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data privacy laws. Players may contact the DPO through the support channels described in Section 14 of this Policy.

3. Categories of Personal Data We Collect

winph9 collects the following categories of personal data from players and prospective players:

4. How We Collect Personal Data

winph9 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting winph9 support.
• Automated collection: Technical and gameplay data collected automatically through the Platform's logging systems, session management infrastructure, and analytics tools as you use the winph9 Platform.
• Payment providers: Financial data received from GCash, PayMaya, BPI, BDO, and Metrobank as part of transaction processing. winph9 receives transaction confirmation data; full payment credentials are processed by the respective payment providers, not stored by winph9.
• Identity verification services: Data returned from third-party KYC verification services used to validate government ID documents submitted by players.
• Cookies and similar technologies: Session and preference data collected through browser cookies as described in Section 11.

5. Purposes of Processing

winph9 processes player personal data for the following purposes:

1. Account management: Creating, maintaining, and administering player accounts, including authentication and security monitoring.
2. Age and identity verification: Confirming that players meet the 21+ minimum age requirement under applicable Philippine gaming regulations and completing KYC as required by PAGCOR compliance standards.
3. Payment processing: Facilitating deposits to and withdrawals from player accounts via GCash, PayMaya, and Philippine bank transfers.
4. Platform provision: Delivering live casino, slots, bingo, sports betting, sabong, and other gaming services to authenticated players.
5. Regulatory compliance: Meeting obligations under PAGCOR regulations, the Data Privacy Act of 2012, the Anti-Money Laundering Act, and other applicable Philippine laws.
6. Anti-fraud and security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and unauthorized account access.
7. Responsible gaming: Monitoring player activity to identify patterns consistent with problem gambling and administering player-requested responsible gaming tools including deposit limits and self-exclusion.
8. Customer support: Responding to player inquiries, complaints, and support requests.
9. Platform improvement: Analyzing aggregated and anonymized usage data to improve Platform performance, user experience, and game catalog curation.

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, winph9 processes player personal data on the following legal bases:

• Contractual necessity: Processing required to perform the winph9 platform services under the Terms & Conditions accepted at account registration (account management, payment processing, game delivery).
• Legal obligation: Processing required to comply with PAGCOR regulations, anti-money laundering obligations, age verification requirements, and other mandatory Philippine legal obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such processing is proportionate and does not override player rights.
• Consent: Processing for non-essential communications and analytics purposes, where player consent has been obtained at registration or through platform settings.

7. Data Sharing and Disclosure

7.1 winph9 does not sell, rent, or trade player personal data to third parties for marketing or commercial purposes.

7.2 winph9 may share player data with the following categories of third parties where necessary for legitimate purposes:

• Payment service providers: GCash, PayMaya, BPI, BDO, and Metrobank — for transaction processing. Data shared is limited to what is required for the specific transaction.
• KYC and identity verification providers: Third-party services engaged to verify government ID documents and confirm player identity.
• Game content providers: Game software providers (e.g., Pragmatic Play, Jili Games, PG Soft) whose games are integrated into the winph9 Platform. Game providers receive session and bet data necessary for game delivery; they do not receive payment or identity data beyond what is contractually required.
• Regulatory authorities: PAGCOR and other Philippine government agencies, where disclosure is required by law, court order, or regulatory demand.
• Law enforcement: Philippine law enforcement agencies in connection with legitimate investigations, fraud referrals, or anti-money laundering reporting obligations.

7.3 All third parties who receive player data from winph9 are contractually required to handle such data in accordance with applicable Philippine data privacy law and winph9's data protection requirements.

8. Data Retention

8.1 winph9 retains player personal data for as long as the player's account is active and for such additional periods as are required by applicable law and regulation.

8.2 The following retention periods apply as a general framework:

• Account and identity data: Retained for the duration of the account plus a minimum of 5 years after account closure, as required by PAGCOR record-keeping obligations and anti-money laundering regulations.
• Transaction and financial data: Retained for a minimum of 7 years from the date of the transaction, as required by Philippine financial record-keeping requirements.
• Gameplay data: Retained for the duration of the account plus 3 years after account closure for responsible gaming monitoring and dispute resolution purposes.
• Technical and log data: Retained for up to 12 months from collection unless retained for longer periods in connection with a security investigation or legal proceeding.
• Support communications: Retained for up to 3 years from the date of the last communication in a support thread.

8.3 Upon expiry of applicable retention periods, winph9 will securely delete or irreversibly anonymize retained data.

9. Data Security

9.1 winph9 implements appropriate technical and organizational measures to protect player personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between player devices and winph9 servers
• Encryption of sensitive data fields (including financial data) at rest
• Access controls limiting employee access to player data to those with a demonstrated operational need
• Multi-factor authentication requirements for winph9 staff accessing production systems
• Regular security assessments and penetration testing of platform infrastructure
• Incident response procedures for data breach detection, containment, and notification

9.2 In the event of a personal data breach that is likely to result in harm to Filipino players, winph9 will notify the National Privacy Commission and affected players within the timeframes prescribed by the Data Privacy Act of 2012.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, Filipino players have the following rights with respect to their personal data held by winph9:

To exercise any of these rights, contact the winph9 Data Protection Officer using the details in Section 14. winph9 will respond to data subject requests within 30 calendar days of receipt, consistent with the requirements of Philippine data privacy law.

11. Cookies and Tracking Technologies

11.1 winph9 uses cookies and similar browser-based technologies for the following purposes:

• Session cookies: Required for platform login, authentication, and maintaining session state during active play. These cookies are deleted when you close your browser and are essential to the functioning of the winph9 Platform.
• Preference cookies: Store player interface preferences (language settings, last-used game category, display options) to improve usability across sessions. These cookies are retained for up to 12 months.
• Security cookies: Used to detect fraudulent login attempts, verify session integrity, and monitor for account takeover activity. These are essential security cookies.
• Analytics cookies: Aggregated, anonymized data used to understand how players interact with the Platform, which game categories are most used, and where usability improvements can be made. Individual player data is not transmitted to external analytics services.

11.2 winph9 does not use third-party advertising or tracking cookies. Your gameplay and browsing behavior on winph9 is not shared with advertising networks or data brokers.

11.3 You can manage or disable cookies through your browser settings. Note that disabling session cookies will prevent you from logging in to the winph9 Platform.

12. Minors and Age Restriction

12.1 The winph9 Platform is strictly restricted to individuals aged 21 years and above, consistent with applicable Philippine gaming law. winph9 does not knowingly collect personal data from individuals under the age of 21.

12.2 If winph9 discovers that personal data has been submitted by an individual under the age of 21, the associated account will be immediately suspended, all collected data will be deleted (subject to any mandatory legal retention requirements related to underage access), and the matter will be referred to appropriate internal review.

12.3 If you believe a minor has registered or attempted to register a winph9 account, please notify winph9 support immediately.

13. Updates to This Privacy Policy

13.1 winph9 reserves the right to update this Privacy Policy to reflect changes in our data practices, applicable law, or regulatory requirements. The current version of this Policy, together with the effective date, will always be available at winph9.co/privacy-policy.

13.2 For material changes — particularly those affecting how player data is used or shared — winph9 will provide advance notice via account notification before the change takes effect. Players who do not accept a material change to this Policy should close their account and request data deletion before the change becomes effective.

13.3 Continued use of the winph9 Platform following any update to this Policy constitutes acceptance of the revised Privacy Policy.

14. Contact & Data Subject Requests

For privacy-related inquiries, data subject access requests, or complaints regarding winph9's data practices, please contact the winph9 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 through the winph9 Platform. Select "Privacy / Data Request" as the inquiry type.
• Email: support@winph9.co — subject line: "Data Privacy Request – [Your Registered Mobile Number]"

winph9 will acknowledge receipt of data subject requests within 3 business days and provide a substantive response within 30 calendar days, as required by the Data Privacy Act of 2012. Complex requests may require additional time; winph9 will notify you if an extension is necessary.