WinPH 26 Privacy Policy – How We Protect Your Personal Data

1. Who We Are

WinPH 26 is the trade name of the online gaming platform operating at winph26.app, licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR). As the operator of this platform, WinPH 26 acts as the Personal Information Controller with respect to the data of registered players and site visitors, as defined under the Data Privacy Act of 2012 (Republic Act 10173) of the Philippines.

This Privacy Policy governs all personal data processing activities conducted by WinPH 26 in connection with your use of the platform — whether you access it via web browser on desktop or mobile, or through any affiliated channel. This Policy should be read alongside our Terms and Conditions and Responsible Gaming Policy.

2. What Personal Data We Collect

WinPH 26 collects the following categories of personal data in the course of providing our services to registered players and platform visitors:

2.1 Registration and Identity Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Residential address in the Philippines
• Email address
• Mobile number (Philippine format)
• Username and encrypted password
• Government-issued ID details (PhilSys, driver's licence, or passport number) when identity verification is required

2.2 Financial and Payment Data

• GCash or Maya mobile number linked to your account
• Bank account details (for InstaPay/PESONet withdrawals)
• Visa/Mastercard number (last four digits only, full numbers are handled by the payment processor)
• Transaction history: deposits, withdrawals, and gaming activity records

2.3 Gaming and Betting Activity Data

• Game sessions played, bets placed, and outcomes
• Sports betting history including markets, stakes, and results
• Bonus and promotion usage history
• Account balance history

2.4 Technical and Device Data

• IP address and approximate geolocation (city/province level)
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited and features used within the platform
• Cookie and similar tracking technology data (see Section 7)

2.5 Communications Data

• Records of support chat conversations, emails, and Viber messages with the WinPH 26 support team
• Survey responses and feedback you choose to submit
• Marketing preference settings

3. How We Collect Your Data

WinPH 26 collects personal data through the following channels and methods:

4. Why We Use Your Personal Data

WinPH 26 uses your personal data only for the following specific purposes. We do not use your data for any purpose that conflicts with the reason it was collected:

4.1 Account Management and Service Delivery

We use your registration data to create and maintain your WinPH 26 account, authenticate your login, manage your wallet balance, and deliver the gaming and sports betting products you have requested. This is the core operational use of your data — without it, we simply cannot run your account.

4.2 Identity Verification and Age Compliance

Philippine law and our PAGCOR license require us to verify that every player is at least 21 years of age and is genuinely who they claim to be. We use identity documents and verification technology to fulfil this requirement. This is a legal obligation — WinPH 26 cannot waive it for any player regardless of their account history or transaction volume.

4.3 Payment Processing and Financial Record-Keeping

Your payment data is used to process deposits via GCash, Maya, and other Philippine payment methods, to process withdrawals back to your nominated account, and to maintain the transaction records that Philippine financial regulations and our PAGCOR license require us to keep. Financial records are retained for a minimum of five years as required by law.

4.4 Platform Security and Fraud Prevention

Technical data including IP addresses, device identifiers, and session logs is used to protect the WinPH 26 platform and your account from unauthorised access, detect fraudulent activity, identify multi-accounting, and investigate suspicious behaviour. This processing is necessary to maintain a safe environment for all legitimate Filipino players on the platform.

4.5 Customer Support

Communication records from live chat, email, and Viber interactions are retained to provide effective support, resolve disputes, and improve support quality. Our Filipino support team refers to account history and communication records when assisting you.

4.6 Responsible Gaming Compliance

Gaming activity data is monitored as part of WinPH 26's responsible gaming obligations. This includes checking whether players have active self-exclusions, identifying patterns that may suggest problematic gaming behaviour, and applying deposit limits or other restrictions where required by our license or requested by the player.

4.7 Legal and Regulatory Compliance

WinPH 26 processes and retains data to the extent required to comply with our PAGCOR operating license, Philippine anti-money laundering laws (AMLA), the Data Privacy Act of 2012, court orders, and other applicable legal obligations. In some cases we are legally required to report certain transactions or player information to regulatory authorities.

4.8 Marketing Communications (With Consent)

If you have opted in to marketing communications, WinPH 26 may send you emails or push notifications about promotions, new games, or platform updates relevant to you. You can withdraw this consent at any time through your account settings or by contacting support. Withdrawing marketing consent does not affect your ability to use the platform.

5. Legal Basis for Processing Your Data

Under the Data Privacy Act of 2012 (RA 10173), WinPH 26 must have a valid legal basis for each category of data processing. The following legal bases apply to our processing activities:

• Contractual necessity: Processing your registration data, payment data, and gaming activity records is necessary to perform the service you have contracted us to provide through your WinPH 26 account.
• Legal obligation: Age verification, AML monitoring, PAGCOR reporting, and financial record retention are all required by Philippine law or our regulatory license.
• Legitimate interests: Platform security, fraud prevention, and responsible gaming monitoring are conducted on the basis of WinPH 26's and our players' legitimate interests in maintaining a secure and fair gaming environment.
• Consent: Marketing communications and the use of non-essential cookies are processed only where you have given explicit consent, which you may withdraw at any time.

6. Who We Share Your Data With

WinPH 26 does not sell your personal data. We share it only in the following limited and controlled circumstances:

6.1 Payment Processors

To process GCash, Maya, InstaPay, bank transfers, and card transactions, we share the minimum necessary payment data with our licensed payment processing partners. These processors handle your payment information under strict data security agreements and are subject to Bangko Sentral ng Pilipinas (BSP) regulations.

6.2 Identity Verification Providers

When KYC (Know Your Customer) verification is required, your identity documents are processed by certified verification technology partners. These providers are contracted under data processing agreements that restrict their use of your data to identity verification only.

6.3 Game and Platform Technology Suppliers

Some of the casino games and platform features on WinPH 26 are provided by licensed third-party technology suppliers. These suppliers may receive the minimum account data necessary to deliver their product functionality — for example, your account ID may be passed to a live dealer game provider to track your session. Full identity data is not shared with game suppliers.

6.4 PAGCOR and Regulatory Authorities

As a PAGCOR licensee, WinPH 26 is required to report certain player data and transaction records to PAGCOR and, where applicable, to the Anti-Money Laundering Council (AMLC) in compliance with Philippine anti-money laundering laws. These disclosures are mandatory and cannot be waived by player request.

6.5 Law Enforcement

WinPH 26 will disclose personal data to Philippine law enforcement agencies where required by valid legal process — such as court orders, subpoenas, or lawful government requests. We will notify affected players where legally permitted to do so.

6.6 Professional Advisors

Legal counsel, auditors, and other professional advisors retained by WinPH 26 may have access to account and transaction data in the course of performing their professional services. These parties are bound by confidentiality obligations.

7. Cookies and Tracking Technologies

WinPH 26 uses cookies and similar tracking technologies on the platform. Here is a plain-language explanation of how we use them:

7.1 Essential Cookies

These are strictly necessary for the platform to function. They manage your login session, maintain your cart/bet slip state, and ensure platform security. You cannot opt out of essential cookies — without them, the WinPH 26 platform cannot work. No consent is required for these cookies under Philippine data privacy law.

7.2 Analytical Cookies

We use analytical cookies to understand how players use the WinPH 26 platform — which pages are visited most, where players drop off, and how quickly pages load. This data helps us improve the platform experience. Analytical cookies are used only in aggregate form and do not identify you individually. You may opt out via the cookie preference centre accessible from the platform footer.

7.3 Functional Cookies

Functional cookies remember your preferences — such as your preferred language, interface settings, and display options — so you don't have to reset them on every visit. These are not strictly essential but significantly improve your experience. You may disable them without affecting your ability to use core platform features.

7.4 Marketing Cookies

If you have consented to marketing communications, we may use marketing cookies to ensure that WinPH 26 promotions you see online are relevant to your interests and are not shown to you more times than necessary. Marketing cookies are only activated with your explicit consent and can be withdrawn at any time through the cookie preference centre.

Most modern browsers allow you to manage cookie settings directly. Disabling all cookies may affect your experience on WinPH 26, particularly features that require an active login session.

8. How Long We Retain Your Data

WinPH 26 retains personal data only for as long as necessary for the purposes described in this Policy, subject to minimum retention periods required by Philippine law:

• Account data (name, contact details, date of birth): Retained for the duration of your active account plus five years after account closure, as required by PAGCOR and AML regulations.
• Financial and transaction records: Retained for a minimum of five years from the date of each transaction, in compliance with the Anti-Money Laundering Act and BSP regulations.
• Identity verification documents: Retained for five years from the date of verification, or longer if required by an active legal or regulatory investigation.
• Gaming activity logs: Retained for three years from the date of each session, unless a dispute or regulatory inquiry requires longer retention.
• Support communications: Retained for two years from the date of each interaction, to support dispute resolution and quality assurance.
• Marketing preference records: Retained for the duration of your account to record consent history, even if you subsequently withdraw marketing consent.

After the applicable retention period, data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

9. How We Keep Your Data Secure

WinPH 26 takes data security seriously and applies technical and organisational measures appropriate to the sensitivity of the data we hold. Current security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and the WinPH 26 platform.
• Encrypted storage for sensitive data at rest, including identity documents and financial records.
• Access controls limiting staff access to personal data on a strict need-to-know basis, with all access logged.
• Multi-factor authentication on internal systems used by WinPH 26 staff.
• Regular security audits and vulnerability assessments conducted by independent security professionals.
• Penetration testing performed at least annually on the WinPH 26 platform and associated infrastructure.
• Incident response procedures that activate in the event of a suspected data breach, including mandatory notification to the National Privacy Commission within 72 hours of confirmation.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, registered WinPH 26 players have the following rights regarding their personal data. WinPH 26 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers:

To exercise any of these rights, contact our Data Protection Officer at privacy@winph26.app with the subject line "Data Privacy Request" and your registered email address or mobile number. We will respond within 15 business days and may request identity verification before processing your request.

11. Children's Privacy

WinPH 26 is strictly a 21+ platform and does not knowingly collect personal data from any person under the age of 21. The platform is not designed for, marketed to, or accessible to minors, and we take multiple steps to prevent underage registration including age declaration at registration, identity verification requirements, and ongoing monitoring.

If WinPH 26 identifies or is notified that a registered account belongs to a person under 21, the account will be immediately closed, all data will be deleted to the extent permitted by legal obligations, and the matter will be reported to PAGCOR as required by our license. If you believe a minor has registered on WinPH 26, please notify us immediately at privacy@winph26.app.

12. Cross-Border Data Transfers

WinPH 26 is a Philippine-focused platform and processes most data within the Philippines. Some of our technology infrastructure and third-party service providers may be located in other countries. Where personal data is transferred outside the Philippines, WinPH 26 ensures that appropriate safeguards are in place in accordance with the Data Privacy Act of 2012, including contractual protections that require the receiving party to apply equivalent data protection standards.

WinPH 26 does not transfer personal data to jurisdictions that the National Privacy Commission has determined to provide inadequate data protection without implementing additional safeguards. Players who have concerns about specific international data transfers may contact our Data Protection Officer for details.

13. Third-Party Links

The WinPH 26 platform may occasionally contain references or links to third-party websites or services — for example, payment provider portals or regulatory body websites. This Privacy Policy applies only to WinPH 26 and does not govern the data practices of third-party sites. WinPH 26 is not responsible for the privacy practices of external sites. We recommend reviewing the privacy policies of any third-party site you visit separately.

14. Changes to This Privacy Policy

WinPH 26 may update this Privacy Policy from time to time to reflect changes in our data practices, new products or services, updates to Philippine law or PAGCOR regulations, or improvements to how we describe our practices. The effective date at the top of this page will always reflect the most recent revision.

For material changes — particularly those that affect how we use your personal data, your rights, or the categories of data we collect — WinPH 26 will notify registered players by email to the address on file and via a prominent notice on the platform at least 14 days before the changes take effect. For non-material updates such as clarifications or administrative corrections, we may update the Policy without individual notification.

Continued use of WinPH 26 after the effective date of a revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with updated Privacy Policy terms, you may close your account by contacting support before the effective date.

15. How to Contact Us and Our Data Protection Officer

For all privacy-related matters — including data access requests, correction requests, deletion requests, marketing opt-outs, or complaints — please contact WinPH 26 through the following channels:

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines, which oversees compliance with the Data Privacy Act of 2012. Visit privacy.gov.ph for complaint procedures and contact details.

We take all privacy concerns seriously and aim to respond to all data privacy requests within 15 business days of receipt and verification.