winph7 Privacy Policy

1. Introduction

winph7 understands that the privacy of our players is not something to treat lightly. Filipino players entrust us with sensitive personal and financial information — their legal names, mobile numbers, GCash details, transaction histories, and betting records. We take that trust seriously, and this Policy is our clear commitment to you regarding how that information is handled from the moment you register an account to the moment your account is closed.

This Policy should be read alongside the winph7 Terms & Conditions. Together, these documents constitute the full agreement between you and winph7 regarding your use of the Platform. If you do not agree with any part of this Policy, you should not register an account or use the winph7 Platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, winph7 is the Personal Information Controller in respect of personal data processed through the Platform. winph7 determines the purposes and means by which your personal data is collected and processed.

winph7 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable Philippine data protection legislation. Players may contact the DPO regarding privacy matters using the contact details set out in Section 14 of this Policy.

3. Personal Data We Collect

winph7 collects the following categories of personal data from players:

winph7 does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance, and does not collect information regarding racial or ethnic origin, political opinions, religious beliefs, or health data except where specifically required by law.

4. How We Collect Your Personal Data

winph7 collects personal data through the following means:

• Direct interactions: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated technologies: Technical data collected automatically when you access and use the Platform, including through cookies, server logs, and similar tracking technologies (see Section 11);
• Third parties: Identity verification service providers, payment processors (GCash, PayMaya, banking institutions), fraud detection services, and analytics providers acting on winph7's behalf;
• Publicly available sources: Regulatory exclusion lists, sanctions databases, and other public registers used for compliance purposes.

5. How winph7 Uses Your Personal Data

winph7 processes your personal data for the following purposes:

• To create, manage, and maintain your winph7 player account;
• To verify your identity and age (21+ requirement) in compliance with applicable regulations;
• To process deposits, withdrawals, and financial transactions via GCash, PayMaya, and other Philippine payment channels;
• To operate, maintain, and improve the winph7 Platform and its game catalogue;
• To detect, prevent, and investigate fraud, money laundering, and other prohibited activity;
• To provide customer support via live chat, email, and other communication channels;
• To administer bonuses, promotions, and the winph7 VIP program;
• To comply with our legal, regulatory, and tax obligations under Philippine law;
• To monitor and support responsible gaming, including tracking patterns that may indicate problem gambling behaviour;
• To send you service communications, account notifications, and — where you have provided consent — promotional offers.

6. Legal Basis for Processing

winph7 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfil winph7's obligations to you under the Terms & Conditions, including operating your account, processing transactions, and providing the Services;
• Legal obligation: Processing necessary to comply with Philippine laws and regulations, including anti-money laundering obligations, tax reporting requirements, and gaming regulatory requirements;
• Legitimate interests: Processing for winph7's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming compliance, where such interests are not overridden by your data protection rights;
• Consent: Where required by law or where not covered by the above bases — for example, for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Disclosure and Sharing of Your Personal Data

winph7 may disclose your personal data to the following categories of recipients:

• Service providers and processors: Third-party companies that process data on winph7's behalf, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, fraud detection services, cloud hosting providers, and customer support platforms. These parties are bound by data processing agreements and may only use your data as instructed by winph7;
• Game software providers: Licensed game developers whose titles are available on the winph7 Platform may receive limited technical data necessary to operate their games (e.g., session tokens, bet parameters). Game providers do not receive personally identifiable information beyond what is technically necessary;
• Regulatory and law enforcement authorities: winph7 will disclose personal data to PAGCOR, the National Privacy Commission of the Philippines, the Anti-Money Laundering Council (AMLC), or other government authorities where required by law or pursuant to a valid legal order;
• Business transfers: In the event of a merger, acquisition, or sale of all or part of winph7's business, your personal data may be transferred to a successor entity. You will be notified of any such transfer via your registered contact details.

winph7 does not transfer personal data to entities outside the Philippines except where required by the operational needs described above and where appropriate data protection safeguards are in place.

8. Data Retention

winph7 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law:

• Active accounts: Personal and financial data is retained for the duration of your account and for a minimum of five (5) years following account closure, to comply with Philippine AML and tax record-keeping requirements;
• Transaction records: Financial transaction records are retained for a minimum of five (5) years as required by the Anti-Money Laundering Act;
• Support communications: Live chat transcripts and email correspondence are retained for three (3) years for quality assurance and dispute resolution purposes;
• Marketing data: If you have consented to marketing communications, your contact preferences are retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, winph7 will securely delete or anonymise your personal data in a manner that prevents recovery or reconstruction.

9. Data Security

winph7 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and winph7's servers;
• Passwords stored using industry-standard one-way hashing algorithms — winph7 staff cannot access your password in plain text;
• Multi-factor authentication options for player accounts, including SMS OTP to your registered Philippine mobile number;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning;
• Incident response procedures providing for prompt notification of affected players in the event of a confirmed data breach.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely secure. winph7 cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity conducted under your account.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012 of the Republic of the Philippines, you are entitled to exercise the following rights with respect to your personal data held by winph7:

• Right to be Informed: The right to be informed of how winph7 collects, processes, and uses your personal data — as described in this Policy;
• Right to Access: The right to request a copy of the personal data winph7 holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by winph7;
• Right to Erasure or Blocking: The right to request deletion or blocking of personal data where processing is no longer necessary, unlawful, or where consent has been withdrawn, subject to winph7's legal retention obligations;
• Right to Object: The right to object to processing of your personal data for direct marketing or where winph7 relies on legitimate interests as the legal basis;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where processing is carried out by automated means;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact winph7's Data Protection Officer via live chat or the support email address listed in Section 14. winph7 will respond to valid data subject requests within thirty (30) days of receipt.

11. Cookies and Tracking Technologies

winph7 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device when you visit winph7.one. winph7 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without affecting Platform functionality;
• Performance cookies: Used to analyse how players interact with the Platform — which pages are visited most frequently, where errors occur, and how the Platform loads on different devices and connection speeds common in the Philippines (including mobile data on Globe and Smart networks);
• Functional cookies: Remember your preferences, such as language settings and bet history display options;
• Targeting/analytics cookies: Used with your consent to understand Platform usage patterns and improve our services.

You may control cookie settings through your browser's privacy settings. Disabling non-essential cookies will not prevent you from using winph7 but may affect certain Platform features. Most mobile browsers used by Filipino players — Chrome on Android, Safari on iOS — provide accessible cookie management options in their settings menus.

12. Minors and Age Restrictions

winph7 strictly does not collect personal data from, or provide Services to, individuals under the age of 21 years. The Platform is intended exclusively for adult players as defined under applicable Philippine gaming regulations.

winph7 implements age verification procedures at registration to prevent access by minors. If winph7 becomes aware that personal data has been collected from an individual under 21 years of age, that account will be immediately suspended, all associated data will be deleted, and any balances will be returned to the payment source following investigation.

Parents and guardians who believe a minor may have registered on winph7 should contact our support team immediately via live chat for urgent assistance.

13. Changes to This Privacy Policy

winph7 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable Philippine law. When material changes are made, winph7 will notify registered players via their registered email address or through a prominent notice on the Platform at least seven (7) days before the revised Policy takes effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of winph7 following notification of changes constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must close your account before the changes take effect.

14. Contact — Data Protection Officer

For all privacy-related enquiries, data subject access requests, or concerns regarding winph7's handling of your personal data, please contact our Data Protection Officer:

• Live Chat: Available 24/7 within the winph7 Platform — fastest response channel
• Support Email: support winph7.one (plain text — not a clickable link)
• Response Time: Data subject requests acknowledged within 3 business days; full response within 30 days

If you are not satisfied with winph7's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). winph7 cooperates fully with NPC investigations and will provide requested information within the timelines prescribed by the NPC.

For players who prefer to communicate in Filipino, our support team includes Filipino-speaking agents available at all hours to assist players from Metro Manila, Cebu, Davao, Quezon City, Makati, and across the provinces. Nandito kami para sa inyong katanungan.