1 Introduction
1.1 winph 2 Casino is committed to protecting the privacy and personal data of all players and visitors to our platform. This Privacy Policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).
1.2 This Policy describes the types of personal information we collect, the purposes for which we use it, the circumstances under which we may share it with third parties, and the rights available to you as a data subject under Philippine law.
1.3 This Privacy Policy should be read together with our Terms and Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and winph 2.
1.4 If you have any questions about this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer using the details provided in Section 15.
2 Data Controller
2.1 For the purposes of the Data Privacy Act of 2012, winph 2 Casino acts as the Personal Information Controller (PIC) in respect of the personal data you provide to us or that we collect about you.
2.2 As a Personal Information Controller, winph 2 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable Philippine data protection law.
3 Personal Data We Collect
3.1 winph 2 collects the following categories of personal data:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, government-issued ID number | Account registration, KYC verification, age verification |
| Contact Data | Email address, mobile number, home address | Account communication, support, regulatory notices |
| Financial Data | GCash number, bank account details, transaction history | Processing deposits and withdrawals, fraud prevention |
| Technical Data | IP address, device type, browser type, operating system | Platform security, fraud detection, service optimisation |
| Usage Data | Games played, session duration, betting history, login times | Responsible gaming monitoring, personalisation, analytics |
| Communications Data | Support chat logs, email correspondence, feedback submissions | Customer support, dispute resolution, service improvement |
| Marketing Preferences | Opt-in/opt-out status, preferred communication channels | Sending relevant promotions and offers (with your consent) |
3.2 winph 2 does not intentionally collect sensitive personal information (as defined under the Data Privacy Act) unless strictly required by law or regulation, such as for anti-money laundering compliance. Where sensitive data is collected, we will seek your explicit consent and apply heightened security measures.
4 How We Collect Your Data
4.1 winph 2 collects personal data through the following means:
- Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
- Automated technologies: Data collected automatically when you use our platform, including cookies, web beacons, log files, and similar tracking technologies (see Section 8);
- Third-party sources: Data received from identity verification providers, payment processors (such as GCash and Maya), fraud prevention services, and regulatory databases, where permitted by law;
- Publicly available sources: Information from public records or social media profiles where relevant to fraud prevention or regulatory compliance.
5 How We Use Your Personal Data
5.1 winph 2 uses your personal data for the following purposes:
- To create and manage your player account and verify your identity;
- To process deposits, withdrawals, and other financial transactions;
- To comply with our legal and regulatory obligations, including anti-money laundering (AML) requirements under Republic Act No. 9160 and PAGCOR licensing conditions;
- To detect, investigate, and prevent fraud, cheating, and other prohibited activities;
- To monitor gaming activity for responsible gaming purposes, including identifying signs of problem gambling;
- To provide customer support and resolve disputes;
- To send you service-related communications, including account notifications, security alerts, and policy updates;
- To send you marketing communications about promotions and offers, where you have provided your consent;
- To analyse platform usage and improve our services, games, and user experience;
- To enforce our Terms and Conditions and other applicable policies.
6 Legal Basis for Processing
6.1 Under the Data Privacy Act of 2012, winph 2 processes your personal data on the following legal bases:
- Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and service delivery;
- Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, PAGCOR licensing requirements, and tax reporting;
- Legitimate interests: Processing necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights;
- Consent: Processing based on your freely given, specific, informed, and unambiguous consent, such as for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.
7 Sharing Your Personal Data
7.1 winph 2 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties only where necessary and in accordance with applicable law:
- Payment processors: GCash, Maya, and banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process financial transactions;
- Identity verification providers: Third-party KYC and AML service providers to verify your identity and comply with regulatory requirements;
- Technology providers: Cloud hosting, data analytics, and platform infrastructure providers who process data on our behalf under strict data processing agreements;
- Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other government bodies where required by law;
- Law enforcement: Philippine law enforcement agencies where we are legally required or permitted to disclose information;
- Professional advisers: Lawyers, auditors, and accountants where necessary for legal or compliance purposes.
7.2 All third-party service providers who process personal data on behalf of winph 2 are required to enter into data processing agreements and to implement appropriate technical and organisational security measures.
8 Cookies and Tracking Technologies
8.1 winph 2 uses cookies and similar tracking technologies to enhance your experience on our platform, analyse usage patterns, and support security functions. The types of cookies we use include:
- Strictly necessary cookies: Essential for the platform to function, including session management and security features. These cannot be disabled.
- Performance cookies: Collect anonymised data about how players use the platform to help us improve functionality and performance.
- Functional cookies: Remember your preferences, such as language settings and game history, to personalise your experience.
- Analytics cookies: Help us understand aggregate usage patterns and measure the effectiveness of our platform features.
8.2 You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the winph 2 platform. Strictly necessary cookies cannot be disabled as they are essential to the operation of the service.
9 Data Retention
9.1 winph 2 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. Our general retention periods are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | AML regulatory requirement |
| Financial transaction records | 10 years from transaction date | AMLC and tax law requirements |
| Gaming activity logs | 5 years from account closure | PAGCOR licensing obligation |
| Customer support records | 3 years from last interaction | Dispute resolution and legal claims |
| Marketing preferences | Until consent is withdrawn | Consent-based processing |
| Technical and usage data | 13 months from collection | Analytics and security purposes |
9.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data disposal procedures.
10 Data Security
10.1 winph 2 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:
- Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers;
- Encryption of sensitive data at rest, including financial information and identity documents;
- Role-based access controls limiting data access to authorised personnel only;
- Regular security audits, vulnerability assessments, and penetration testing;
- Multi-factor authentication for administrative access to systems containing personal data;
- Staff training on data protection obligations and security best practices.
10.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winph 2 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with the Data Privacy Act of 2012.
11 Your Data Subject Rights
11.1 Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by winph 2:
Right to Access
You have the right to request a copy of the personal data winph 2 holds about you, along with information about how it is being processed.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update most information directly through your account settings.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
Right to Withdraw Consent
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
11.2 To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 15. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.
11.3 If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
12 Children's Privacy
12.1 If you are a parent or guardian and believe that your child has provided personal data to winph 2, please contact us immediately at the details provided in Section 15 so that we can take appropriate action.
13 International Data Transfers
13.1 winph 2 primarily processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines, we will ensure that such transfers are carried out in accordance with the Data Privacy Act of 2012 and its implementing rules.
13.2 International transfers will only be made to countries or organisations that provide an adequate level of data protection, or where appropriate safeguards are in place, such as contractual clauses approved by the National Privacy Commission.
14 Changes to This Privacy Policy
14.1 winph 2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision will always be displayed at the top of this page.
14.2 For material changes to this Privacy Policy, winph 2 will provide reasonable advance notice to registered players via email or in-platform notification. Your continued use of the winph 2 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.
14.3 We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
15 Contact Us
15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:
winph 2 Casino — Data Protection Officer
Email: [email protected]
General Support: [email protected]
Live Chat: Available 24/7 via the Platform
Response Time: Within 30 days of receiving a verified request
15.2 You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.