Privacy Policy

1. Introduction

winph2 is committed to protecting the privacy and personal data of every player who uses our online gaming platform. We understand that trust is the foundation of any good relationship — and that goes double when real money and personal information are involved. This Policy has been prepared in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its implementing rules and regulations.

This Policy applies to all personal data collected through the winph2 website, mobile application, customer support channels, and any other touchpoint through which you interact with winph2. Please read this Policy carefully. If you have questions about how winph2 handles your data, our contact details are provided at the end of this document.

2. Data Controller

For the purposes of applicable data protection law, winph2 is the data controller responsible for your personal data. As data controller, winph2 determines the purposes and means by which your personal data is processed. winph2 is accountable for ensuring that all data processing activities comply with the Data Privacy Act of 2012 and other applicable Philippine regulations.

winph2 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection law. You may contact the DPO through the support email address listed in Section 15 of this Policy.

3. Personal Data We Collect

winph2 collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Email address
• Mobile number
• Residential address (including city — e.g., Manila, Cebu, Davao, Makati, Quezon City)
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license)
• Proof of address documents
• Selfie or facial image for identity verification purposes
• Source of funds documentation where required by AML regulations

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (e.g., GCash account reference, PayMaya reference, BDO/BPI/Metrobank account details — stored in tokenized or masked form)
• Account balance history
• Bonus and promotional transaction records

3.4 Gaming Activity Data

• Game session logs, bet history, and game outcomes
• Wagering patterns and session duration
• Responsible gaming tool usage (e.g., deposit limits set, self-exclusion requests)

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session timestamps and login history
• Cookie identifiers and similar tracking data (see Section 9)

3.6 Communications Data

• Customer support correspondence (chat logs, email exchanges)
• Survey responses and feedback submissions
• Marketing preference records

4. How We Use Your Personal Data

winph2 uses the personal data we collect for the following purposes:

5. Legal Basis for Processing

winph2 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfill our obligations under the winph2 Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine law, including AML regulations, tax obligations, and regulatory reporting requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw this consent at any time.

6. Data Sharing & Disclosure

winph2 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only where necessary and lawful:

• Payment processors: GCash, PayMaya, BDO, BPI, Metrobank, and other payment service providers, solely for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML compliance service providers who assist winph2 in verifying player identities and monitoring for suspicious activity.
• Game technology providers: Software providers whose games are available on the winph2 platform, to the extent necessary for game operation and fairness auditing.
• Regulatory authorities: Philippine government agencies, including the National Privacy Commission, and other competent authorities, where disclosure is required by law or court order.
• Professional advisors: Legal counsel, auditors, and other professional advisors bound by confidentiality obligations.

7. Data Retention

winph2 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your account and for a period of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• KYC documents: Retained for five (5) years following the end of the business relationship.
• Customer support records: Retained for two (2) years from the date of the last interaction.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year for compliance documentation purposes.

Upon expiry of the applicable retention period, winph2 will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

8. Security Measures

winph2 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and the winph2 platform
• AES-256 encryption for sensitive data stored on our servers
• Multi-factor authentication options for player accounts
• Regular security audits and penetration testing of the winph2 platform
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Secure data centers with physical access controls
• Incident response procedures for detecting and responding to data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winph2 will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012 and its implementing rules.

9. Cookies & Similar Technologies

winph2 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use are as follows:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytics cookies: Used to collect anonymized data about how players use the winph2 platform, helping us identify areas for improvement. This data is not linked to your personal identity.

winph2 does not use third-party advertising or retargeting cookies. You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the winph2 platform.

10. Your Data Protection Rights

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by winph2:

• Right to be informed: You have the right to be informed about how your personal data is collected and processed, as set out in this Policy.
• Right of access: You may request a copy of the personal data winph2 holds about you at any time.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact the winph2 Data Protection Officer using the contact details in Section 15. winph2 will respond to all valid requests within thirty (30) days of receipt.

11. Children & Minors

The winph2 platform is strictly intended for individuals aged 21 years and above, in accordance with Philippine gaming regulations. winph2 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on the winph2 platform, please contact our support team immediately so that we can investigate and take appropriate action.

12. International Data Transfers

winph2 primarily processes and stores personal data within the Philippines. In certain circumstances — for example, where we use technology providers or KYC service providers whose infrastructure is located outside the Philippines — your personal data may be transferred to and processed in other countries.

Where such transfers occur, winph2 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to apply data protection standards equivalent to those required under Philippine law. winph2 will not transfer your personal data to countries that do not provide an adequate level of data protection without implementing appropriate safeguards.

13. Third-Party Links

The winph2 platform may contain links to third-party websites or services. This Privacy Policy applies solely to the winph2 platform and does not cover the privacy practices of any third-party websites. winph2 is not responsible for the content or privacy practices of any third-party site. We encourage you to review the privacy policies of any third-party sites you visit.

14. Updates to This Privacy Policy

winph2 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. The date of the most recent revision is displayed at the top of this page. Where changes are material, winph2 will notify registered players via email or an in-platform notification prior to the changes taking effect.

Your continued use of the winph2 platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, you must cease using the platform and may request account closure by contacting our support team.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by winph2, please contact our Data Protection Officer. Our support contact details are displayed in the footer of this page. When submitting a data-related request, please include your registered username and a clear description of your request to help us respond efficiently.