winph4 Privacy Policy

The data controller for personal information collected through winph4.org is WinPH4 Entertainment Group, incorporated in the Philippines and operating the winph4 online casino and sports betting platform under a valid license issued by the Philippine Amusement and Gaming Corporation (PAGCOR).

As the personal information controller, winph4 determines the purposes and means by which personal data submitted by players and visitors of winph4.org is processed. All processing activities described in this Privacy Policy are carried out by winph4 or authorized personal information processors acting on its behalf, subject to appropriate contractual data processing agreements.

winph4 collects personal information that is necessary for the provision of its regulated gaming services, compliance with applicable laws, and improvement of the platform experience. The categories of personal data collected include:

• Identity Data: Full legal name, date of birth, nationality, government-issued ID number (e.g., PhilSys ID, passport, driver's license, UMID), and a photograph or copy of the ID document;
• Contact Data: Registered email address, Philippine mobile number, and residential address;
• Financial Data: GCash mobile number, PayMaya account, bank account details (for BPI, BDO, Metrobank transfers), and transaction history within the winph4 platform;
• Account Data: Username, account balance, game history, bonus redemption history, and responsible gaming preferences;
• Technical Data: IP address, device identifier, browser type and version, operating system, and session log data;
• Usage Data: Pages visited, games played, time spent on the platform, and click-stream data;
• Communications Data: Records of support chat conversations, email correspondence, and feedback submitted to winph4.

winph4 does not intentionally collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. Special categories of data (such as health information) are not collected unless voluntarily provided by the player in the context of a responsible gaming self-assessment.

winph4 collects personal data through the following primary channels:

• Direct submission: Information provided by you during registration, KYC verification, deposit and withdrawal processing, or customer support interactions on winph4.org;
• Automated technologies: Cookies, session tokens, and server-side logging that capture technical and usage data when you access and navigate the winph4 platform;
• Third-party verification providers: Identity and age verification data obtained through KYC service providers who cross-check submitted documents against official Philippine government databases;
• Payment processors: Transaction confirmation data relayed by GCash, PayMaya, and partner banking institutions to confirm successful deposits and withdrawals.

winph4 uses the personal data collected for the following specific purposes:

• To create, verify, and manage your winph4 account, including age verification as required by PAGCOR;
• To process deposits, withdrawals, and other financial transactions via GCash, PayMaya, and banking channels;
• To fulfill legal and regulatory obligations, including anti-money laundering (AML) compliance under Republic Act No. 9160 and PAGCOR reporting requirements;
• To detect and prevent fraud, unauthorized account access, and prohibited conduct as defined in the winph4 Terms & Conditions;
• To deliver customer support, respond to inquiries, and resolve disputes;
• To send transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where consent has been given, promotional communications about winph4 offers;
• To analyze platform usage, improve game offerings, and personalize the winph4 experience for Filipino players;
• To administer responsible gaming programs, including processing self-exclusion requests and enforcing deposit limits.

winph4 does not use your personal data for automated individual decision-making or profiling that produces legal effects, except where required by PAGCOR or Philippine law for fraud prevention and AML screening.

Under the Data Privacy Act of 2012, winph4 processes personal data on the following lawful bases:

• Contractual necessity: Processing required to fulfil the winph4 Terms & Conditions agreement, including account management and payment processing;
• Legal obligation: Processing required for compliance with PAGCOR regulations, the Anti-Money Laundering Act (R.A. 9160), and applicable Philippine tax laws;
• Legitimate interest: Processing for fraud prevention, platform security, and analytics that do not override your fundamental rights and freedoms;
• Consent: Processing of data for marketing communications and optional features, where winph4 has obtained your freely given, specific, and informed consent.

Where winph4 relies on consent as its legal basis, you have the right to withdraw that consent at any time by contacting the winph4 Data Protection Officer or updating your account communication preferences.

winph4 does not sell or rent your personal data. We may disclose your information to the following categories of recipients only to the extent necessary:

• PAGCOR and government authorities: As required by the winph4 operating license, applicable gaming regulations, and lawful orders from Philippine law enforcement or courts;
• Payment processors: GCash (G-Xchange Inc.), PayMaya, BPI, BDO, and Metrobank for transaction processing and reconciliation;
• KYC and fraud prevention providers: Third-party identity verification services used to validate government-issued IDs against official databases;
• Game software providers: Select technical data (such as player session tokens) shared with licensed game providers (e.g., Pragmatic Play, PG Soft, Evolution) strictly for game delivery purposes;
• IT and platform service providers: Cloud hosting, cybersecurity, and analytics partners who process data solely on winph4's documented instructions under binding data processing agreements.

All third-party service providers engaged by winph4 are contractually required to implement appropriate technical and organizational security measures and to process personal data only for the purposes specified by winph4. Cross-border transfers of personal data, if any, are governed by contractual clauses meeting the adequacy standards of the National Privacy Commission of the Philippines.

winph4 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with applicable legal and regulatory retention requirements, and resolve any disputes or enforce agreements. Specific retention periods include:

• Account registration and KYC documents are retained for a minimum of five (5) years following account closure, as required under PAGCOR anti-money laundering guidelines;
• Financial transaction records are retained for seven (7) years in accordance with Philippine tax regulations;
• Customer support communications are retained for three (3) years from the date of the final communication;
• Marketing consent records are retained until consent is withdrawn, plus an additional period sufficient to demonstrate the lawfulness of historical processing.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with an identifiable individual.

winph4 implements appropriate technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Security measures in place include, but are not limited to:

• 256-bit TLS/SSL encryption for all data in transit between your device and winph4 servers;
• AES-256 encryption for sensitive data stored in winph4 databases;
• Role-based access controls limiting winph4 staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication for internal winph4 administrative systems;
• Regular penetration testing and vulnerability assessments of the winph4 platform;
• Automated intrusion detection and suspicious activity monitoring on all production systems.

In the event of a personal data breach that is likely to harm your rights and freedoms, winph4 will notify you and the National Privacy Commission of the Philippines within the timeframes prescribed by the Data Privacy Act and NPC Circular No. 16-03.

winph4 uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, remember your preferences, and analyze usage patterns. The types of cookies used include:

• Strictly necessary cookies: Essential for winph4 login sessions and core platform functionality; cannot be disabled without affecting your ability to use the site;
• Functional cookies: Remember your language, game preferences, and responsible gaming settings across sessions;
• Analytics cookies: Used by winph4 to understand how members navigate the platform and identify areas for improvement. Data is aggregated and anonymized where possible.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to log in to winph4 or access core gaming features.

Under the Data Privacy Act of 2012, you as a winph4 member have the following rights regarding your personal data:

• Right to be informed: To know what personal data winph4 holds about you and how it is being processed;
• Right of access: To request a copy of your personal data held by winph4;
• Right to rectification: To have inaccurate or incomplete personal data corrected;
• Right to erasure: To request deletion of your personal data where it is no longer necessary for the purposes collected and no legal retention obligation applies;
• Right to data portability: To receive your personal data in a structured, commonly used format for transfer to another controller;
• Right to object: To object to processing of your data for direct marketing or legitimate interest purposes;
• Right to lodge a complaint: To file a complaint with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact the winph4 Data Protection Officer using the details in Section 13. winph4 will respond to verified data subject requests within fifteen (15) business days of receipt.

The winph4 platform is strictly intended for persons who are 21 years of age or older, as required by PAGCOR regulations governing online gambling in the Philippines. winph4 does not knowingly collect, use, or retain personal data from individuals under the age of 21.

If winph4 discovers that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all associated funds will be held pending investigation, and the personal data will be deleted in accordance with applicable law. If you believe a minor has registered on winph4, please notify the winph4 Data Protection Officer immediately.

winph4 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. The "Last Updated" date at the top of this page indicates when the most recent revision was made. Material changes will be communicated to registered winph4 members via the email address or mobile number on file, or by posting a prominent notice on winph4.org.

Your continued use of the winph4 platform following publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. We encourage you to review this Privacy Policy periodically.

For privacy inquiries, data subject access requests, or complaints regarding winph4's handling of your personal information, please contact the winph4 Data Protection Officer:

You also have the right to file a complaint directly with the National Privacy Commission of the Philippines (NPC) at the NPC's official office or website if you believe that winph4 has violated your rights under the Data Privacy Act of 2012.