winph55 Privacy Policy

01 Introduction

winph55 is an online casino and gaming platform operating under PAGCOR regulations and serving players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. We take the privacy and security of your personal data seriously, and we are committed to being transparent about how we handle it.

This Privacy Policy has been prepared in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations as issued by the National Privacy Commission (NPC). It applies to all personal data collected through the winph55 website, mobile platform, customer support channels, and any other service operated under the winph55 brand.

This Privacy Policy should be read alongside the winph55 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and winph55.

02 Data Controller

For the purposes of the Data Privacy Act of 2012 and applicable PAGCOR regulations, winph55 is the personal information controller responsible for the personal data collected through this platform. winph55 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

winph55 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection law. You may contact the DPO through the support channel described in Section 13 of this Policy.

03 Personal Data We Collect

winph55 collects personal data that is necessary to provide you with a safe, compliant, and functional gaming experience. The categories of personal data we collect are described in the table below.

winph55 does not collect sensitive personal information — such as racial or ethnic origin, political opinions, religious beliefs, or health data — unless specifically required by law or expressly provided by you in the context of a responsible gaming self-assessment.

Where you choose not to provide personal data that is required for a specific purpose (such as identity verification for withdrawals), winph55 may be unable to provide the relevant service until the required information is supplied.

04 How We Use Your Personal Data

winph55 uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and administer your winph55 player account, including verifying your identity and age (21+ requirement) at registration and during ongoing use;
• Transaction Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and any other supported payment method;
• Legal and Regulatory Compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and any other applicable Philippine law or regulation;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, and other prohibited conduct as defined in the winph55 Terms & Conditions;
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our live chat and email support channels;
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling and to administer self-exclusion, deposit limit, and cooling-off requests;
• Platform Improvement: To analyze usage data and improve the functionality, performance, and user experience of the winph55 platform;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may withdraw this consent at any time by contacting support.

winph55 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

05 Legal Basis for Processing

Under the Data Privacy Act of 2012, winph55 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and winph55 — specifically, to operate your player account, process transactions, and deliver the gaming services you have registered to use;
• Legal Obligation: Processing is required to comply with applicable Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act of 2012;
• Legitimate Interests: Processing is necessary for the legitimate interests of winph55, including fraud prevention, platform security, and responsible gaming monitoring, provided that such interests are not overridden by your rights and freedoms;
• Consent: For marketing communications and certain non-essential data processing activities, winph55 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Sharing Your Personal Data

winph55 may share your personal data with the following categories of recipients:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely for the purpose of processing your deposits and withdrawals;
• Identity Verification Providers: Third-party KYC and identity verification service providers engaged to assist with age verification and document authentication;
• Game Software Providers: Licensed game developers and content providers whose games are available on the winph55 platform, to the extent necessary to deliver game services and resolve disputes;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law or regulation;
• Law Enforcement: Philippine law enforcement agencies, where winph55 is legally required or permitted to disclose information in connection with a criminal investigation or legal proceeding;
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by winph55, subject to confidentiality obligations;
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of winph55's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom winph55 shares personal data are required to handle that data in accordance with applicable Philippine data protection law and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

07 Cookies & Tracking Technologies

winph55 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the winph55 website. Cookies allow winph55 to recognize your device, maintain your session, and collect usage data.

winph55 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled;
• Functional Cookies: Remember your preferences, such as language settings and display options, to provide a more personalized experience;
• Analytics Cookies: Collect anonymized data about how players use the platform, including pages visited and session duration, to help winph55 improve performance and usability;
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access, and bot traffic.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the winph55 platform. winph55 does not use third-party advertising cookies or behavioral tracking cookies for the purpose of serving targeted advertisements on external platforms.

08 Data Security

winph55 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the winph55 platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security professionals;
• Multi-factor authentication requirements for administrative access to winph55 systems;
• Continuous monitoring of platform activity for signs of unauthorized access or suspicious behavior;
• Incident response procedures to detect, contain, and report data breaches in accordance with NPC notification requirements.

While winph55 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your winph55 account credentials and for notifying support immediately if you suspect unauthorized access to your account.

09 Data Retention

winph55 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act;
• Transaction and Financial Data: Retained for a minimum of five (5) years following the date of each transaction, in accordance with AMLA requirements;
• Communications Data: Support correspondence and chat transcripts are retained for up to two (2) years from the date of the communication;
• Technical and Usage Data: Log data and session records are retained for up to twelve (12) months, after which they are anonymized or deleted;
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of the consent given.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with you as an individual. Where data is anonymized rather than deleted, the anonymized data may be retained indefinitely for statistical and analytical purposes.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by winph55:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy;
• Right of Access: The right to request a copy of the personal data winph55 holds about you, along with information about how it is being processed;
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data winph55 holds about you;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to winph55's legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that winph55 has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact the winph55 Data Protection Officer through the support channel described in Section 13. winph55 will respond to all data subject requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further fifteen (15) business days, with prior notice to you.

winph55 may request proof of identity before processing a data subject request to ensure that personal data is not disclosed to unauthorized parties.

11 Children & Minors

winph55 employs age verification measures at registration and during ongoing account use to prevent access by minors. Where winph55 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that your child has registered on winph55 or provided personal data to the platform, please contact support immediately so that the matter can be investigated and resolved without delay.

12 Changes to This Privacy Policy

winph55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they significantly affect your rights or the way winph55 processes your personal data — winph55 will provide advance notice via a platform notification or email to your registered address before the changes take effect. For non-material changes, the updated Policy will be published on this page without prior notice.

Your continued use of the winph55 platform following the publication of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the revised Policy, you should cease using the platform and may request account closure by contacting support.

13 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way winph55 handles your personal data, please contact the winph55 Data Protection Officer through the following channel:

If you are not satisfied with winph55's response to your privacy inquiry or data subject request, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012 and protecting the privacy rights of Filipino data subjects.

winph55 is committed to resolving all privacy concerns promptly and fairly, and to cooperating fully with any NPC investigation or inquiry.