Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how winph37 ("winph37," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of users ("Player," "User," or "you") who access or use the winph37 website at https://winph37.net, its mobile application, and all associated services (collectively, the "Platform").

winph37 operates in the Philippines and serves Filipino players. We are committed to handling your personal data responsibly and in accordance with applicable Philippine data privacy laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

This Policy applies to all personal data collected through your use of the winph37 Platform, including data collected during registration, account management, financial transactions, gameplay, customer support interactions, and any other engagement with winph37 services.

Please read this Policy carefully. If you do not agree with the practices described herein, you should not use the winph37 Platform. For questions about this Policy, please refer to the contact details in Section 14.

2 Personal Data We Collect

winph37 collects the following categories of personal data from players and users of the Platform:

winph37 collects only the personal data that is necessary for the purposes described in this Policy. We do not collect sensitive personal information beyond what is required for identity verification and regulatory compliance.

3 How We Collect Your Data

winph37 collects personal data through the following means:

• Direct Collection: Information you provide when registering a winph37 account, completing your player profile, submitting identity verification documents, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the winph37 Platform, including through cookies, web beacons, log files, and similar tracking technologies. See Section 7 for more details on cookies.
• Third-Party Sources: winph37 may receive data about you from third-party identity verification providers, payment processors (such as GCash and PayMaya), fraud prevention services, and analytics partners, where permitted by applicable law.
• Verification Processes: During Know Your Customer (KYC) procedures, winph37 may collect additional identity and address verification data to comply with anti-money laundering and regulatory requirements.

4 How We Use Your Personal Data

winph37 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your winph37 player account, including verifying your identity and age (21+ requirement), processing your registration, and enabling you to access Platform features.
• Transaction Processing: To process deposits, withdrawals, and bonus transactions in Philippine Peso via your chosen payment method, including GCash, PayMaya, BPI, BDO, and Metrobank.
• Regulatory Compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and responsible gaming mandates.
• Platform Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, cheating, and other prohibited conduct on the winph37 Platform.
• Customer Support: To respond to your inquiries, resolve disputes, and provide assistance with your winph37 account.
• Responsible Gaming: To monitor gameplay patterns and identify players who may be at risk of problem gambling, and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Marketing & Promotions: To send you information about winph37 bonuses, promotions, and new game releases, where you have consented to receive such communications. You may opt out at any time.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the winph37 Platform.
• Legal Obligations: To comply with court orders, regulatory requests, and other legal obligations applicable to winph37's operations in the Philippines.

5 Legal Basis for Processing

winph37 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable regulations:

• Contractual Necessity: Processing is necessary to perform the contract between you and winph37 — specifically, to provide you with access to the Platform, process your transactions, and manage your account.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including AML regulations, KYC requirements, and gaming regulations.
• Legitimate Interests: Processing is necessary for winph37's legitimate interests, including fraud prevention, Platform security, and service improvement, provided these interests are not overridden by your data protection rights.
• Consent: For certain processing activities — such as marketing communications and non-essential cookies — winph37 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

winph37 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only where necessary and permitted by law:

• Payment Processors: winph37 shares financial data with payment service providers such as GCash, PayMaya, BPI, BDO, and Metrobank solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own privacy policies and applicable data protection obligations.
• Identity Verification Providers: winph37 may share identity documents and personal details with third-party KYC and AML compliance service providers to verify your identity and comply with regulatory requirements.
• Technology & Platform Partners: winph37 works with game providers, software vendors, and infrastructure partners who may process limited technical data on our behalf under strict data processing agreements.
• Regulatory & Law Enforcement Authorities: winph37 may disclose personal data to Philippine government agencies, regulators, or law enforcement bodies where required by law, court order, or regulatory directive.
• Fraud Prevention Services: winph37 may share data with fraud detection and prevention partners to protect the integrity of the Platform and the security of all players.
• Professional Advisors: winph37 may share data with legal counsel, auditors, and other professional advisors where necessary for the conduct of winph37's business, subject to confidentiality obligations.

All third parties with whom winph37 shares personal data are required to handle that data securely and in accordance with applicable data protection laws. winph37 does not authorize third parties to use your personal data for their own independent purposes.

7 Cookies & Tracking Technologies

winph37 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the winph37 website. They help us recognize your browser, remember your preferences, and analyze how the Platform is used.

winph37 uses the following types of cookies:

• Essential Cookies: These cookies are strictly necessary for the winph37 Platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred language and display options — to provide a more personalized experience on winph37.
• Analytics Cookies: winph37 uses analytics cookies to understand how players interact with the Platform, which pages are most visited, and where improvements can be made. This data is aggregated and does not identify individual users.
• Security Cookies: These cookies help winph37 detect and prevent fraudulent activity, unauthorized access, and other security threats on the Platform.

You may control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the winph37 Platform. By continuing to use the Platform after being presented with our cookie notice, you consent to the use of non-essential cookies as described above.

8 Data Retention

winph37 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your active winph37 account and for a minimum of five (5) years following account closure, in accordance with AML and regulatory record-keeping requirements.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• KYC & Identity Documents: Identity verification documents are retained for the period required by applicable regulatory obligations, typically five (5) years from the end of the business relationship.
• Customer Support Records: Communications with winph37 support are retained for up to three (3) years from the date of the interaction, or longer where required for dispute resolution or legal proceedings.
• Technical & Usage Data: Log files and technical data are typically retained for up to twelve (12) months, unless required for longer periods for security or fraud investigation purposes.
• Marketing Data: Where you have consented to marketing communications, your contact details are retained until you withdraw consent or request removal from our marketing list.

Upon expiry of the applicable retention period, winph37 will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

9 Data Security

winph37 takes the security of your personal data seriously. We implement appropriate technical and organizational measures to protect your data against unauthorized access, accidental loss, destruction, alteration, or disclosure.

Our security measures include, but are not limited to:

• Encryption: All data transmitted between your device and the winph37 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. Sensitive data stored on our systems is encrypted at rest.
• Access Controls: Access to personal data within winph37 is restricted to authorized personnel who require it to perform their job functions. All staff with access to personal data are subject to confidentiality obligations.
• Secure Payment Processing: Financial transactions on winph37 are processed through certified payment gateways. winph37 does not store full payment card details on its servers.
• Fraud Monitoring: winph37 employs automated and manual monitoring systems to detect suspicious activity, unauthorized login attempts, and potential data breaches in real time.
• Regular Security Reviews: winph37 conducts periodic security assessments and vulnerability testing to identify and address potential weaknesses in our systems.

While winph37 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, winph37 will notify affected players and relevant authorities in accordance with applicable Philippine law.

10 Your Data Privacy Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by winph37:

• Right to Be Informed: You have the right to be informed about how winph37 collects and processes your personal data, as set out in this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data winph37 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data winph37 holds about you. You may update certain account details directly through your winph37 account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to winph37's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Withdraw Consent: Where winph37 processes your data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe winph37 has not handled your personal data in accordance with applicable law.

To exercise any of the above rights, please contact winph37 using the details provided in Section 14. winph37 will respond to all verified data subject requests within the timeframes required by applicable law.

11 Children & Minors

The winph37 Platform is strictly intended for individuals who are at least 21 years of age. winph37 does not knowingly collect personal data from individuals under the age of 21.

If winph37 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any deposits made by an underage player will be handled in accordance with applicable regulations.

If you are a parent or guardian and believe that your child has registered on the winph37 Platform or provided personal data to winph37, please contact us immediately using the details in Section 14 so that we can take appropriate action.

winph37 employs age verification procedures at registration and during the KYC process to prevent underage access to the Platform. We take our responsibility to protect minors seriously and cooperate fully with any regulatory investigation related to underage gambling.

12 Third-Party Links & Services

The winph37 Platform may contain references to third-party payment services and other service providers that are necessary for the operation of the Platform. winph37 is not responsible for the privacy practices of any third-party service providers.

When you use a third-party payment service such as GCash or PayMaya to fund your winph37 account, you are also subject to that provider's own privacy policy and terms of service. winph37 encourages you to review the privacy policies of any third-party services you use in connection with the winph37 Platform.

winph37 does not control the data practices of third-party providers and accepts no liability for how those providers collect, use, or share your personal data.

13 Updates to This Privacy Policy

winph37 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, winph37 will update the effective date at the top of this page and, where practicable, notify registered players via email or an in-platform notification.

Your continued use of the winph37 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you must cease using the Platform and may request account closure by contacting winph37 support.

winph37 recommends that you review this Privacy Policy periodically to stay informed of how we are protecting your personal data. The current version of this Policy is always available at https://winph37.net/privacy-policy.

14 Contact & Data Privacy Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by winph37, please contact our Data Privacy Officer (DPO) or our general support team using the details below.

All privacy-related inquiries are handled with strict confidentiality. winph37 aims to acknowledge all data privacy requests within three (3) business days and to resolve them within the timeframes required by the Data Privacy Act of 2012.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines.