Privacy Policy

01 Who We Are

winzirph is an online gaming and casino platform operating at winzirph.vip, serving Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. winzirph is regulated by the Philippine Amusement and Gaming Corporation (PAGCOR).

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), winzirph acts as the Personal Information Controller in respect of the personal data of its registered players and website visitors. This means winzirph determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through the winzirph website, mobile-optimized platform, customer support channels, and any other touchpoints through which you interact with winzirph.

02 Personal Data We Collect

winzirph collects the following categories of personal data from players and website visitors:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification number (e.g., PhilSys ID, passport, driver's licence, SSS/GSIS number).
• Contact Data: Email address, mobile number, and residential address (including barangay, city/municipality, province, and postal code).
• Account Data: Username, encrypted password, account registration date, account status, and player preferences.
• Financial Data: Deposit and withdrawal transaction records, payment method details (e.g., GCash account reference, bank account details for BPI, BDO, UnionBank, or other approved banks), and transaction history. winzirph does not store full payment credentials — these are handled by our regulated payment processors.
• Gaming Data: Game history, wagering records, bonus usage, session duration, and responsible gaming tool settings (e.g., deposit limits, self-exclusion status).
• Technical Data: IP address, device type, browser type and version, operating system, screen resolution, and session logs.
• Communications Data: Records of your interactions with winzirph customer support, including live chat transcripts, email correspondence, and support ticket history.
• Marketing Data: Your preferences regarding receiving promotional communications from winzirph, and records of your engagement with such communications.

03 How We Collect Your Data

winzirph collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing identity verification (KYC), making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the winzirph platform, including through cookies, web beacons, and server logs. See Section 7 for more detail on cookies.
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from anti-fraud partners; payment transaction data from our regulated payment processors (GCash, Maya, and banking partners).
• Regulatory sources: Information received from PAGCOR or other competent authorities in connection with our regulatory obligations.

04 Why We Use Your Personal Data

winzirph uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your winzirph player account.
• Identity verification: To verify your identity and age (21+) in compliance with PAGCOR regulations and anti-money laundering (AML) requirements.
• Service delivery: To provide access to games, process deposits and withdrawals, and deliver customer support.
• Regulatory compliance: To comply with our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the platform.
• Responsible gaming: To monitor gaming behaviour, enforce responsible gaming tools (deposit limits, self-exclusion), and identify players who may be at risk of problem gambling.
• Platform improvement: To analyse usage patterns, conduct research, and improve the winzirph platform, games, and user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications or where we have a legitimate interest in doing so.

05 Legal Basis for Processing

winzirph processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you (i.e., to operate your winzirph account and deliver gaming services).
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, AMLA obligations, and NPC requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Sharing Your Personal Data

winzirph does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this policy:

• Payment processors: GCash, Maya, and our banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process deposits and withdrawals.
• KYC and identity verification providers: Third-party services that assist winzirph in verifying player identity and age in compliance with PAGCOR and AML requirements.
• Fraud prevention and security partners: Service providers that assist winzirph in detecting and preventing fraudulent activity on the platform.
• Game content providers: Third-party game studios and providers whose games are available on the winzirph platform, to the extent necessary to deliver game services.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where required by law or regulatory obligation.
• Professional advisers: Legal, accounting, and auditing firms engaged by winzirph, subject to professional confidentiality obligations.

All third-party service providers engaged by winzirph are required to process personal data only on winzirph's instructions and in accordance with applicable data protection laws.

07 Cookies & Tracking Technologies

winzirph uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. A cookie is a small text file placed on your device when you visit the winzirph website.

winzirph uses the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in to your winzirph account. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised experience on the winzirph platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the winzirph platform, including pages visited, session duration, and navigation paths. This data helps us improve the platform experience.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of winzirph marketing campaigns. These cookies are only placed with your consent.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the winzirph platform. Withdrawing consent for non-essential cookies will not affect your ability to access your account or place wagers.

08 Data Retention

winzirph retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law.

The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR regulations and AMLA record-keeping requirements.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act.
• Gaming and wagering records: Retained for a minimum of three (3) years following account closure or the date of the relevant gaming activity, whichever is later.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution or regulatory purposes.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, after which it will be deleted or anonymised within thirty (30) days.

Upon expiry of the applicable retention period, winzirph will securely delete or anonymise your personal data in accordance with our data disposal procedures.

09 Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by winzirph:

• Right to be informed: The right to be notified of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data winzirph holds about you, together with information about how it is being used.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data winzirph holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to winzirph's legal retention obligations.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe winzirph has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact our Data Protection Officer at the details provided in Section 13. winzirph will respond to all valid data subject requests within fifteen (15) business days of receipt, as required by NPC regulations.

10 Data Security

winzirph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS encryption for all data in transit between your device and the winzirph platform.
• AES-256 encryption for sensitive data stored at rest on winzirph servers.
• Role-based access controls limiting access to personal data to authorised winzirph personnel on a need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of the winzirph platform.
• Multi-factor authentication requirements for winzirph staff accessing systems that process personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winzirph will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.

While winzirph takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your winzirph login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

11 Children's Privacy and Age Restriction

The winzirph platform is strictly intended for individuals aged 21 years and above, in compliance with PAGCOR regulations governing online gaming in the Philippines. winzirph does not knowingly collect personal data from individuals under the age of 21.

If winzirph becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, void any associated transactions, and delete the personal data in question in accordance with our data disposal procedures.

If you are a parent or guardian and believe that a minor has registered on the winzirph platform, please contact us immediately at [email protected] so that we can take prompt action.

12 Changes to This Privacy Policy

winzirph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is indicated at the top of this page.

Where changes are material, winzirph will provide reasonable advance notice to registered players via email or a prominent notice on the platform. Your continued use of the winzirph platform following the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy.

We recommend that you review this Privacy Policy periodically to stay informed of how winzirph is protecting your personal data.

13 Contact & Data Protection Officer

winzirph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact our DPO:

• Email: [email protected]
• General Support: [email protected]
• Response Time: We aim to acknowledge all privacy requests within 3 business days and resolve them within 15 business days.

If you are not satisfied with winzirph's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act.

For responsible gaming concerns, please visit our Responsible Gaming page or contact support directly. For a full overview of your rights and obligations on the platform, please review our Terms & Conditions.