Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how WinZirPH ("we," "us," "our," or "the Platform") collects, uses, stores, and discloses personal information obtained from players and visitors who access the WinZirPH website at winzirph.net and any associated mobile applications (collectively, the "Platform").

WinZirPH takes the privacy of its players seriously. We understand that Filipino players entrust us with sensitive personal and financial information, and we are committed to handling that information with the highest standards of care, transparency, and security. This Policy is designed to give you a clear and honest picture of our data practices so you can make informed decisions about your use of WinZirPH.

By registering on W inZirPH or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact our support team to close your account.

This Policy should be read alongside our Terms & Conditions, which govern your use of the WinZirPH platform in full.

Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, WinZirPH acts as the Personal Information Controller in respect of the personal data collected through the Platform.

As Personal Information Controller, WinZirPH determines the purposes and means by which your personal data is processed. We are responsible for ensuring that all data processing activities carried out by WinZirPH — and by any third-party processors acting on our behalf — comply with applicable Philippine data protection law and the regulations of the National Privacy Commission (NPC).

If you have any questions or concerns about how WinZirPH handles your personal data, or if you wish to exercise any of your data subject rights, please contact our Data Protection Officer using the contact details provided in Section 15 of this Policy.

Data We Collect

WinZirPH collects the following categories of personal data from players and platform visitors:

WinZirPH does not intentionally collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive information is collected — such as government ID details — it is handled with enhanced security measures and access controls.

How We Collect Your Data

WinZirPH collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, pixel tags, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and risk signals from payment processors such as GCash and PayMaya; publicly available information used for AML screening purposes.
• Device permissions: Where you have granted permission, data from your mobile device such as device identifiers used for app-based account security and fraud prevention.

WinZirPH will always inform you at the point of collection if providing certain personal data is mandatory (e.g., for account registration or KYC) or optional. Failure to provide mandatory data may prevent us from opening or maintaining your account.

How We Use Your Data

WinZirPH uses the personal data we collect for the following purposes:

• Account management: To register, verify, maintain, and administer your WinZirPH player account, including processing deposits, withdrawals, and bonus claims.
• Identity and age verification: To confirm that you are at least 21 years of age and are who you say you are, as required by Philippine gaming regulations.
• Platform operation: To deliver the games, betting markets, and features available on WinZirPH, and to ensure the integrity and fairness of all gaming activity.
• Regulatory compliance: To meet our obligations under Philippine anti-money laundering (AML) laws, counter-terrorism financing (CTF) regulations, and gaming licensing requirements, including filing mandatory reports where required.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, collusion, and other prohibited conduct.
• Responsible gaming: To monitor gaming patterns and identify players who may be exhibiting signs of problem gambling, and to administer self-exclusion, deposit limit, and other responsible gaming tools.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Communications: To send you transactional notifications (e.g., deposit confirmations, withdrawal updates) and, where you have opted in, promotional communications about WinZirPH offers and new features.
• Platform improvement: To analyze usage patterns, conduct internal research, and improve the performance, design, and content of the WinZirPH platform.
• Legal proceedings: To establish, exercise, or defend legal claims involving WinZirPH.

WinZirPH will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, WinZirPH processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your WinZirPH account, process transactions, and deliver gaming services.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML/CTF regulations, gaming licensing requirements, and NPC directives.
• Legitimate interests: Processing necessary for WinZirPH's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — for example, for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

WinZirPH does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BDO, BPI, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Third-party services engaged to verify your identity and age as required by Philippine gaming regulations.
• Fraud prevention and AML screening services: Providers that assist WinZirPH in detecting and preventing fraudulent activity and meeting anti-money laundering obligations.
• IT and platform service providers: Cloud hosting, data storage, cybersecurity, and software providers that support the operation of the WinZirPH platform, acting as Personal Information Processors under our instruction.
• Regulatory and law enforcement authorities: Philippine government agencies, including the National Privacy Commission, gaming regulators, the Anti-Money Laundering Council (AMLC), and law enforcement bodies, where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants engaged by WinZirPH in connection with legal, compliance, or financial matters, subject to professional confidentiality obligations.

All third-party processors engaged by WinZirPH are required to process personal data only in accordance with our instructions and to implement appropriate technical and organizational security measures. WinZirPH remains responsible for ensuring that third-party processors comply with applicable data protection law.

Cookies & Tracking Technologies

WinZirPH uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage — to operate and improve the Platform. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting core platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymized data about how players use the Platform, helping us identify areas for improvement. These do not identify you personally.
• Functional cookies: Used to remember your preferences — such as language settings and game display options — to provide a more personalized experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized account access.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the WinZirPH platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

WinZirPH does not use cookies to serve third-party advertising or to track your activity across unrelated websites.

Data Retention

WinZirPH retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by Philippine AML regulations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act of 2001 (as amended) and BSP regulations.
• Gaming history: Retained for a minimum of three (3) years following account closure for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Technical and usage data: Retained for up to twelve (12) months in identifiable form, after which it may be anonymized and retained for analytical purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with WinZirPH's data disposal procedures. Where data cannot be immediately deleted due to technical constraints, it will be isolated from active processing until deletion is possible.

Data Security

WinZirPH implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and WinZirPH servers.
• Encryption of sensitive data at rest, including financial information and government ID details.
• Role-based access controls ensuring that WinZirPH staff can only access personal data necessary for their specific job functions.
• Regular security vulnerability assessments and penetration testing of the Platform.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting, containing, and reporting personal data breaches in accordance with NPC notification requirements.
• Staff training on data protection obligations and secure data handling practices.

While WinZirPH takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, WinZirPH will notify you and the National Privacy Commission in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-03.

Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by WinZirPH:

• Right to be informed: The right to be notified of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data WinZirPH holds about you, along with information about how it is being used.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held by WinZirPH.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to WinZirPH's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on WinZirPH's legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that WinZirPH has violated your data protection rights.

To exercise any of these rights, please contact WinZirPH's Data Protection Officer using the contact details in Section 15. We will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. We may need to verify your identity before processing your request.

Please note that certain rights are subject to limitations under applicable law — for example, WinZirPH may be unable to delete data that we are legally required to retain for AML compliance purposes.

Children's Privacy

WinZirPH is strictly an adult gaming platform. In accordance with Philippine gaming regulations, the Platform is available only to individuals who are 21 years of age or older. WinZirPH does not knowingly collect personal data from individuals under the age of 21.

If WinZirPH becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the personal data in question, and return any deposited funds to the original payment method where legally and technically possible.

If you are a parent or guardian and believe that a minor has registered on WinZirPH or accessed the Platform, please contact our support team immediately. We take underage gambling extremely seriously and will act promptly on all such reports.

Third-Party Links

The WinZirPH platform may contain links to third-party websites or services — for example, links to payment provider portals or responsible gaming support organizations. This Privacy Policy applies solely to the WinZirPH platform and does not extend to any third-party websites or services that you may access via links on the Platform.

WinZirPH is not responsible for the privacy practices, content, or data security of any third-party websites. We encourage you to review the privacy policies of any third-party services you access before providing them with your personal information.

Updates to This Privacy Policy

WinZirPH reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The date of the most recent revision is displayed at the top of this Policy. We encourage you to review this Privacy Policy periodically to stay informed of how WinZirPH is protecting your personal data. The current version of this Policy is always available at winzirph.net/privacy-policy.

Your continued use of the WinZirPH platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the amended Policy, you must cease using the Platform and may request account closure by contacting our support team.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or WinZirPH's data processing practices, please contact our Data Protection Officer:

Data Protection Officer — WinZirPH
Email: [email protected]
Support Hours: 24 hours a day, 7 days a week

For general account support, responsible gaming requests, or self-exclusion inquiries, please visit our Responsible Gaming page or contact our main support team at [email protected].

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data protection rights have been violated. Information on how to file a complaint with the NPC is available through official Philippine government channels.

Effective Date: January 1, 2026. This Privacy Policy supersedes all previous versions. By using WinZirPH, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.