Privacy Policy — Winzir PH Data Protection

Introduction

Winzir PH ("we", "us", "our") operates the online gaming platform at winzirph.best. In the course of providing our services to players in the Philippines, we collect and process certain personal information. This Privacy Policy explains what information we collect, how and why we use it, who we may share it with, and what rights you have over your own data.

This policy applies to all users of the Winzir PH platform — whether you are simply browsing the site, in the process of registering, or an active account holder. It should be read alongside our Terms and Conditions and our Responsible Gaming Policy, which together form the complete agreement between you and Winzir PH.

Winzir PH is committed to full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules and regulations. Our Data Protection Officer (DPO) oversees all data handling practices and can be contacted directly — see Section 12 for details.

What Personal Data We Collect

Winzir PH collects only the information necessary to operate your account, fulfil our regulatory obligations, and deliver a safe and personalised gaming experience. Here is a breakdown of the categories of data we collect and the typical source of each:

We do not collect sensitive personal information such as race, religion, health data, sexual orientation, or political affiliations unless legally required in exceptional circumstances.

How Winzir PH Uses Your Data

Your data is used only for purposes that are directly connected to the operation of the Winzir PH platform and our obligations under Philippine law. Specifically, we use your personal data to:

• Create and manage your account — to register you as a player, verify your identity, and maintain your account settings and balance.
• Process transactions — to accept deposits and process withdrawal requests to your GCash, Maya, bank account, or other registered payment method.
• Comply with PAGCOR regulations — our PAGCOR licence requires us to maintain records of player identity, transaction history, and gaming activity for regulatory audit purposes.
• Prevent fraud and money laundering — to monitor for suspicious account behaviour, verify the source of funds, and report to authorities where legally obligated.
• Enforce responsible gaming — to apply deposit limits, session reminders, cool-off periods, and self-exclusion measures that you have requested, and to monitor for signs of problem gambling.
• Provide customer support — to understand and resolve issues you raise through live chat, email, or any other support channel.
• Personalise your experience — to display relevant promotions and game recommendations based on your activity on the platform. You can opt out of personalised marketing at any time from your account settings.
• Improve the platform — using aggregated, anonymised activity data to identify performance issues, improve game loading, and enhance the mobile experience.
• Communicate with you — to send transaction confirmations, security alerts, promotional offers (where you have opted in), and policy updates.

Legal Basis for Processing

Under the Data Privacy Act of 2012, Winzir PH processes your personal data on one or more of the following lawful bases:

• Consent — Where you have provided explicit, freely given, and informed consent at the time of registration or when opting into specific features (such as marketing communications).
• Contractual necessity — Processing that is required to fulfil our obligations to you under the Terms and Conditions, including operating your account, processing bets, and paying out winnings.
• Legal obligation — Processing required to comply with PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, Bureau of Internal Revenue (BIR) requirements, and other applicable Philippine laws.
• Legitimate interests — Processing for fraud prevention, platform security, and the responsible gaming monitoring that protects players and the integrity of the platform — provided these interests are not overridden by your fundamental rights.

Where we rely on consent as the legal basis, you may withdraw that consent at any time. Withdrawal of consent does not affect the legality of processing carried out prior to the withdrawal, and may limit our ability to continue providing certain services to you.

When We Share Your Data

Winzir PH does not share your personal data with third parties except in the following specific circumstances:

• Payment processors: Your financial details are shared with the payment service provider processing your deposit or withdrawal (e.g., GCash, Maya, your bank). These providers handle your data under their own privacy policies and are subject to BSP (Bangko Sentral ng Pilipinas) oversight.
• PAGCOR and regulatory authorities: We are legally required to provide player data, transaction records, and gaming activity logs to PAGCOR upon request as part of our licence conditions.
• Anti-money laundering authorities: Under the AMLA, we may be required to report suspicious transactions to the Anti-Money Laundering Council (AMLC). We are prohibited by law from notifying you when such a report has been made.
• Game technology providers: Third-party game studios and live casino content providers may receive limited session data necessary to operate their games on the Winzir PH platform. These providers are contractually bound to process data only for the purpose of providing the game service.
• IT and infrastructure providers: Cloud hosting and security service providers who support the technical operation of the platform. All such providers are required to maintain confidentiality and security standards consistent with this policy.
• Legal proceedings: Where required by a valid court order, subpoena, or law enforcement request from a Philippine authority, we will disclose data as required by law.

All third parties who process data on behalf of Winzir PH are required to comply with the Data Privacy Act of 2012 and to implement appropriate technical and organisational security measures.

Cookies and Tracking Technologies

Winzir PH uses cookies and similar tracking technologies to operate the platform, analyse usage patterns, and deliver a personalised experience. Here is what we use and why:

How We Protect Your Data

Winzir PH implements technical and organisational security measures proportionate to the risk of the data we process. These include:

• SSL/TLS encryption on all data transmitted between your device and the Winzir PH servers — look for the padlock icon in your browser's address bar.
• Encryption at rest for sensitive fields including payment details, identity document copies, and account credentials.
• Access controls that restrict employee access to personal data on a strict need-to-know basis. Employees with access to personal data are bound by confidentiality agreements.
• Two-factor authentication (2FA) available to all players on account login — we strongly recommend enabling this in your account security settings.
• Automated fraud detection that flags unusual account behaviour (such as login from a new country, multiple failed password attempts, or sudden large withdrawals) for security review.
• Regular security audits and penetration testing to identify and address vulnerabilities in the platform before they can be exploited.
• Data breach response protocols — in the event of a personal data breach that poses a risk to your rights, Winzir PH will notify the National Privacy Commission (NPC) within 72 hours and affected players as soon as practicable.

While we take security seriously, no online platform can guarantee absolute security. You also have a role to play — keep your password strong and unique, never share your login credentials, and log out of shared devices.

Data Retention Periods

Winzir PH retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Philippine law. General retention guidelines are as follows:

• Active account data — retained for the full duration your account is active on the Winzir PH platform.
• Account closure data — after you close your account, your identity and transaction records are retained for a minimum of five (5) years as required by PAGCOR licence conditions and the AMLA.
• Financial transaction records — deposit and withdrawal records are retained for a minimum of five (5) years in compliance with BIR and AMLC requirements.
• KYC documents — copies of government-issued IDs and verification documents are retained for the duration of your account plus five years following closure.
• Customer support records — live chat transcripts and support emails are retained for up to three (3) years for quality assurance and dispute resolution purposes.
• Marketing preferences — opt-in and opt-out records are retained for as long as your account exists, to ensure we respect your communication preferences.
• Cookie and analytics data — session and analytics data is retained in aggregated, anonymised form for up to two (2) years.

When the retention period for a category of data expires, Winzir PH will securely delete or anonymise that data so it can no longer be attributed to you personally.

Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information held by Winzir PH. These rights can be exercised at any time by contacting our Data Protection Officer (see Section 12).

Minors and Data Protection

The Winzir PH platform is strictly for individuals aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21.

If you are a parent or guardian and believe that a minor has created an account or provided personal data to Winzir PH without your consent, please contact us immediately at support@winzirph.best. We will promptly investigate and, where confirmed, delete all associated data and close the account.

Account holders with minors in their household are responsible for taking appropriate measures to prevent underage access to the Winzir PH platform. This includes setting device-level parental controls and never sharing account credentials with individuals under 21.

Changes to This Privacy Policy

Winzir PH may update this Privacy Policy from time to time to reflect changes in our data practices, new features on the platform, or updates to applicable Philippine law. When we make material changes, we will:

• Update the "Last Updated" date at the top of this document.
• Post a notice on the Winzir PH homepage or send a notification to registered account holders by email or in-platform message.

We encourage you to review this Privacy Policy periodically. Your continued use of the Winzir PH platform after any changes are published constitutes your acceptance of the revised policy. If you do not agree with any change, you should stop using the platform and request account closure.

Previous versions of this Privacy Policy are available upon request from our Data Protection Officer.

Contact Us and Our Data Protection Officer

Winzir PH has appointed a Data Protection Officer (DPO) responsible for overseeing our data protection practices and serving as the primary point of contact for data subjects exercising their rights under the Data Privacy Act of 2012.

You can reach our DPO and general support team through the following channels:

• DPO Email: dpo@winzirph.best — for data subject rights requests, data breach notifications, and privacy-specific concerns.
• General Support: support@winzirph.best — for all other account-related queries.
• Live Chat: Available 24/7 directly from the Winzir PH platform — fastest for urgent account matters.
• Website: winzirph.best

If you are not satisfied with Winzir PH's response to your privacy concern, you have the right to escalate your complaint directly to the National Privacy Commission (NPC) of the Philippines, which is the government authority responsible for enforcing the Data Privacy Act of 2012.