Winph 23 Privacy Policy – How We Protect Your Data

1. Introduction & Scope

This Privacy Policy applies to all personal data collected and processed by Winph 23 through the website winph23.click and any associated mobile-optimised platform. Winph 23 acts as the data controller for all personal data described in this policy.

Winph 23 takes data privacy seriously — not because we have to, but because our Filipino players deserve to know exactly how their information is handled. We wrote this policy in plain language so you can actually understand it, not just scroll past it. We encourage you to read it before you register and return to it any time you have questions.

By creating a Winph 23 account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you disagree with any part of this policy, please do not register or use the platform and contact us at support@winph23.click before proceeding.

2. Personal Data We Collect

2.1 Registration Data

When you create a Winph 23 account, we collect the information necessary to verify your identity and set up your account: your full legal name, date of birth, Philippine residential address, mobile number, and email address. This information is mandatory — without it, we cannot open an account for you or comply with our Know Your Customer obligations under Philippine law.

2.2 Identity Verification (KYC) Data

For withdrawals above the standard threshold and in response to any regulatory trigger, Winph 23 will request a copy of a valid Philippine government-issued ID (such as a PhilSys National ID, UMID, passport, or driver's licence). This document is stored securely and used solely for identity verification purposes.

2.3 Financial Data

To process deposits and withdrawals, Winph 23 collects your payment account details — GCash registered mobile number, Maya account details, bank account number, or card details as applicable. Full card numbers are never stored on Winph 23 servers; card transactions are processed via PCI-DSS compliant payment processors.

2.4 Gameplay and Transaction Data

The Winph 23 platform automatically records your gameplay sessions, bets placed, game outcomes, and transaction history. This data is essential for operating your account fairly, processing payouts accurately, and complying with Philippine gaming regulatory record-keeping requirements.

2.5 Technical and Device Data

When you access Winph 23, our servers automatically log your IP address, device type, operating system, browser type, screen resolution, and session timestamps. This information is used for platform security, fraud detection, and improving platform performance for Philippine mobile users.

3. How We Collect Your Data

Winph 23 collects your personal data through the following channels:

• Direct submission: Information you provide when registering, completing KYC verification, making deposits, contacting support, or participating in promotions.
• Automated platform logging: Technical and gameplay data recorded automatically by the Winph 23 platform as you use it.
• Payment processors: Transaction confirmation data shared by GCash, Maya, BDO, BPI, UnionBank, and other BSP-regulated payment partners to verify that deposits and withdrawals have been completed successfully.
• Identity verification services: For KYC compliance, Winph 23 may use third-party identity verification services to validate the authenticity of documents you submit. These services are bound by strict confidentiality obligations.
• Cookies and session storage: Browser-based data collection as described in Section 9 of this policy.

Winph 23 does not purchase data lists or obtain your personal information from data brokers, social media platforms, or any other third-party marketing sources without your explicit consent.

4. How Winph 23 Uses Your Personal Data

Winph 23 uses your personal data only for the following defined purposes:

• Account management: Creating, verifying, and maintaining your Winph 23 player account.
• Transaction processing: Handling deposits, withdrawals, bonus credits, and any financial adjustments to your account balance.
• Identity and age verification: Confirming that you meet the 18+ age requirement and that the account is held by the registered individual, as required by Philippine gaming regulations.
• AML and fraud prevention: Monitoring transactions for unusual patterns as required by Republic Act No. 9160 (Anti-Money Laundering Act) and related regulations.
• Customer support: Responding to your enquiries, resolving disputes, and improving support based on interaction history.
• Platform improvement: Using aggregated, anonymised gameplay and technical data to identify and fix bugs, improve game performance on Philippine mobile networks, and enhance the overall Winph 23 experience.
• Responsible gaming: Using session and gameplay data to identify patterns that may indicate problem gambling behaviour, and to operate our responsible gaming tools such as deposit limits and self-exclusion.
• Regulatory compliance: Maintaining records as required by PAGCOR, NPC, AMLC, and other applicable Philippine regulatory bodies.
• Promotional communications: Sending bonus offers, tournament announcements, and platform updates to players who have opted in. You can opt out at any time.

5. Data Sharing & Disclosure

Winph 23 shares your personal data only in the limited circumstances described below. We do not sell, rent, or trade your data under any circumstances.

5.1 Payment Service Providers

To process your deposits and withdrawals, Winph 23 shares your name, account reference, and transaction amount with BSP-regulated payment service providers including GCash (G-Xchange Inc.), Maya (Voyager Innovations), and Philippine banking institutions. These providers are bound by their own privacy obligations under Philippine law and may not use your data for any purpose other than processing your transaction.

5.2 Identity Verification Providers

For KYC and AML compliance, Winph 23 may engage accredited third-party identity verification services. These providers access only the specific data required for verification and are contractually prohibited from retaining your data beyond the verification process.

5.3 Regulatory Authorities

Winph 23 is legally required to disclose player account and transaction data to the Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission, and other Philippine regulatory bodies upon their lawful request. We cannot decline such legally mandated disclosures.

5.4 Legal Proceedings

Winph 23 may disclose personal data where required by a valid Philippine court order, subpoena, or other binding legal process. We will notify affected players of such disclosures where permitted by law and not doing so would compromise an ongoing investigation.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of the Winph 23 business, your personal data may be transferred to the successor entity. Any such transfer will be subject to the same data protection obligations contained in this policy, and affected players will be notified in advance.

6. Data Security Measures

Winph 23 implements multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your device and Winph 23 servers.
• AES-256 encryption at rest for all stored personal and financial data.
• Multi-factor authentication options for player accounts and mandatory MFA for all Winph 23 staff accessing personal data.
• Role-based access controls ensuring that only Winph 23 staff with a legitimate need can access specific categories of player data.
• Intrusion detection systems monitoring for unusual access patterns around the clock.
• Regular third-party security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Secure data deletion procedures for data that has reached the end of its retention period, using NIST-compliant data sanitisation methods.

Despite these measures, no platform can guarantee absolute security over the internet. In the event of a data breach affecting your personal data, Winph 23 will notify affected players and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by NPC Circular 16-03.

7. Data Retention Periods

Winph 23 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, plus any additional period required by Philippine law. Key retention periods are:

• Identity and KYC data: Retained for the lifetime of your account plus 5 years after account closure, in accordance with PAGCOR and AMLC record-keeping requirements.
• Financial transaction records: Retained for the lifetime of your account plus 7 years, as required by Philippine banking and anti-money laundering regulations.
• Gameplay session records: Retained for 3 years from the date of each session.
• Technical and device logs: Retained for 12 months on a rolling basis.
• Support and communication records: Retained for 3 years from the date of the last interaction.
• Marketing preference data: Retained until you withdraw consent or close your account.

When data reaches the end of its retention period, Winph 23 securely deletes or anonymises it so it can no longer be attributed to a specific individual. Anonymised data may be retained indefinitely for aggregate analytics purposes.

8. Your Rights Under Philippine Law

Under the Data Privacy Act of 2012, every Filipino data subject has the following rights with respect to their personal data held by Winph 23:

• Right to be Informed: You have the right to know what personal data Winph 23 collects about you, why it is collected, and how it is used — which is the purpose of this policy.
• Right of Access: You may request a copy of all personal data Winph 23 holds about you at any time. We will respond to access requests within 15 business days.
• Right to Rectification: If any of your personal data on Winph 23 is inaccurate or out of date, you have the right to have it corrected. You can update most account details directly in your account settings.
• Right to Erasure: You may request deletion of your personal data. Note that Winph 23 cannot delete data that it is legally required to retain under Philippine law (e.g., AML records). We will inform you of any data we cannot delete and the reason why.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your personal data for marketing purposes at any time. You may also object to other processing activities where our basis for processing is legitimate interest.
• Right to Damages: If you suffer damages due to Winph 23's non-compliance with the Data Privacy Act, you may be entitled to compensation as provided under RA 10173.
• Right to Lodge a Complaint: If you believe Winph 23 has violated your data privacy rights, you may file a complaint with the National Privacy Commission at privacy.gov.ph.

To exercise any of these rights, contact our Data Protection Officer at support@winph23.click with the subject line "Data Privacy Request". Please include your registered name and account email address to help us process your request efficiently.

9. Cookies & Tracking Technologies

9.1 What Cookies Winph 23 Uses

Winph 23 uses the following categories of cookies on the platform:

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that keep you logged in, security tokens, and form submission tokens. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game lobby layout preferences, and whether you've previously seen certain notifications. These improve your Winph 23 experience but the platform works without them.
• Analytics Cookies: Anonymised usage data that helps Winph 23 understand how players navigate the platform, which games are most popular, and where technical issues occur most frequently. Data from analytics cookies is aggregated and never linked back to your individual identity.

9.2 What Winph 23 Does Not Use

Winph 23 does not use advertising or retargeting cookies. We do not allow third-party advertising networks to place tracking cookies on the Winph 23 platform. There are no Facebook Pixel, Google Ads, or similar advertising trackers operating on this site.

9.3 Managing Cookies

You can manage and delete cookies through your browser settings. Instructions for the most common browsers used by Filipino players — Chrome on Android, Safari on iOS, and Mozilla Firefox — are available through each browser's help section. Deleting strictly necessary cookies will log you out of your Winph 23 session.

10. Minors & Age Protection

The Winph 23 platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If Winph 23 discovers that a minor has registered an account by misrepresenting their age, the account will be immediately suspended, all deposits returned to the depositing payment method, and all winnings forfeited. The data associated with the account will be deleted as promptly as our legal obligations allow.

If you are a parent or guardian and believe that a minor in your household has accessed or registered on Winph 23, please contact us immediately at support@winph23.click. We will investigate and take appropriate action within 24 hours of notification.

11. Cross-Border Data Transfers

Winph 23 primarily stores and processes your personal data within the Philippines. In limited circumstances — such as the use of internationally hosted identity verification services or cloud infrastructure with Philippine data residency requirements — your data may be processed outside the Philippines.

Where cross-border transfers occur, Winph 23 ensures that appropriate safeguards are in place as required by Section 21 of the Data Privacy Act of 2012 and NPC Advisory Opinion No. 2018-044. These safeguards include contractual data processing agreements that impose equivalent data protection standards on recipient parties regardless of their jurisdiction.

Winph 23 does not transfer personal data to jurisdictions that the NPC has determined to lack adequate data protection frameworks without implementing additional contractual or technical safeguards.

12. Changes to This Privacy Policy

Winph 23 may update this Privacy Policy from time to time to reflect changes in our data practices, new platform features, or updates to Philippine data protection law. When material changes are made, we will notify registered players via their registered email address at least 7 days before the changes take effect.

The updated Privacy Policy will be published on this page with a revised effective date at the top. Your continued use of the Winph 23 platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you disagree with any changes, you may close your account before the effective date by contacting support@winph23.click.

13. Contact Our Data Protection Officer

Winph 23 has a designated Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. You may contact the Winph 23 DPO for any data privacy-related matter:

• Email: support@winph23.click (subject line: "Data Privacy Request")
• Response Time: Within 3 business days for general enquiries; 15 business days for formal data subject access, rectification, or erasure requests
• Language: Requests accepted in Filipino or English

If you are not satisfied with our response to a data privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. For information on how to file a complaint with the NPC, visit the NPC's official website.