Privacy Policy – How Winjiliph Protects Your Personal Data

01 Who We Are

Winjiliph is a Philippine-licensed online gaming platform operating under applicable gaming regulations and the Data Privacy Act of 2012 (Republic Act No. 10173). For the purposes of this Privacy Policy, Winjiliph is the data controller responsible for the personal information collected through the platform.

If you have any questions about data privacy at Winjiliph, you can reach our Data Protection Officer at privacy@winjiliph.com or through our general support channel at support@winjiliph.com.

02 Data We Collect

Winjiliph collects personal information through several channels — directly from you when you register and use the platform, automatically through your device and browser, and from third parties such as payment processors and identity verification providers where required. Here is a breakdown of the categories:

2.1 Account Registration Data

• Full legal name (as it appears on your Philippine government-issued ID)
• Date of birth
• Email address
• Mobile phone number
• Username and encrypted password
• Home address (for KYC purposes)

2.2 Identity Verification Data

Winjiliph is required by Philippine gaming regulations and anti-money laundering (AML) rules to verify the identity of players before processing withdrawals or when prompted by compliance monitoring. This may include:

• Copy of a valid Philippine government-issued ID (e.g., SSS, PhilSys, Driver's License, Passport)
• Proof of address (e.g., utility bill, bank statement)
• Source of funds information for high-value transactions

2.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and payment methods
• GCash or Maya account reference numbers (not full credentials)
• Bank account details used for transfers (account name and number only)
• Transaction IDs and processing timestamps

2.4 Platform Usage Data

• Games played, bet amounts, and game history
• Sports betting activity including markets, selections, and wager amounts
• Bonus and promotion usage
• Responsible gaming tool settings and activity

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps and duration
• Cookies and similar tracking technologies (see Section 6)

03 How We Use Your Data

Winjiliph uses the personal data it collects for specific, legitimate purposes. We do not use your data for purposes beyond those listed below without first obtaining your consent.

04 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, Winjiliph processes personal data based on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations to you as a registered Winjiliph player — account management, payment processing, game delivery.
• Legal obligation: Processing required to comply with Philippine gaming regulations, anti-money laundering laws, and tax reporting requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests do not override your privacy rights.
• Consent: Processing for marketing communications and optional analytics where we have obtained your specific, informed consent. You may withdraw consent at any time.

05 Data Sharing

Winjiliph does not sell or rent your personal data to third parties. We share data only in the following limited circumstances:

5.1 Service Providers

We share necessary data with companies that provide services on behalf of Winjiliph — payment processors (GCash, Maya, BDO, BPI, Visa/Mastercard networks), identity verification providers, cloud infrastructure providers, and customer support platforms. All service providers are contractually required to handle data securely and only for the specific purpose for which it was shared.

5.2 Regulatory & Legal Authorities

Winjiliph may disclose personal data to the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), the National Privacy Commission (NPC), or law enforcement agencies where required by law, court order, or regulatory directive.

5.3 Business Transfers

In the event that Winjiliph undergoes a merger, acquisition, or sale of its business assets, player data may be transferred as part of that transaction. We will notify affected players before their data is transferred and before it becomes subject to a different privacy policy.

06 Cookies & Tracking Technologies

Winjiliph uses cookies and similar technologies on the platform. These help us keep you logged in, remember your preferences, track game sessions accurately, and understand how the platform is being used so we can improve it.

Types of cookies used:

• Essential cookies: Required for the platform to function — session management, login authentication, security tokens. These cannot be disabled without breaking core functionality.
• Performance cookies: Collect anonymized data about how players navigate the platform — which pages are visited, how long sessions last, where errors occur. Used to improve the platform.
• Functional cookies: Remember your preferences such as language settings, display options, and notification choices.
• Analytics cookies: Used to understand aggregate player behaviour and improve game selection, bonus design, and sports coverage. Data is anonymized before analysis.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use Winjiliph properly. Winjiliph does not use third-party advertising cookies or cross-site tracking technologies.

07 Data Retention

Winjiliph retains personal data for as long as is necessary for the purposes described in this policy and to comply with legal and regulatory obligations. Here are the general retention periods:

• Active account data: Retained for the duration of your active account plus five years after closure, as required by Philippine AML and gaming regulations.
• Transaction records: Retained for a minimum of five years after the transaction date, in line with AMLC and BIR requirements.
• Identity verification documents: Retained for five years after account closure or the last regulated transaction, whichever is later.
• Customer support communications: Retained for two years after the issue is resolved.
• Marketing consent records: Retained for the duration of your consent and two years after withdrawal, to demonstrate compliance.

After the applicable retention period, Winjiliph securely deletes or anonymizes personal data so it can no longer be linked to an individual player.

08 Security Measures

Winjiliph implements technical and organizational security measures appropriate to the sensitivity of the data we handle. These include:

• TLS/SSL encryption on all data transmitted between your device and the Winjiliph platform
• AES-256 encryption for sensitive data stored at rest
• PCI-DSS compliant payment processing — raw payment credentials are never stored by Winjiliph
• Multi-factor authentication options for player accounts
• Real-time fraud detection and automated anomaly alerts
• Role-based access controls limiting which Winjiliph staff can access personal data
• Regular security audits and penetration testing by third-party security specialists
• Employee data privacy training and strict internal data handling policies

09 Your Rights Under the Philippine Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights regarding your personal data held by Winjiliph: