This Privacy Policy describes how winph22 collects, uses, stores, shares, and protects the personal information of Account holders and visitors to the winph22 platform at winph22.one. We are committed to handling your personal data with transparency, security, and respect for your rights as a Filipino player.
Our Data Commitments
These six principles guide every decision we make about your personal data. The full legal text follows in the sections below.
winph22 collects only the personal data that is necessary to operate your Account, process transactions, comply with PAGCOR and anti-money laundering obligations, and provide customer support. Data collection is not speculative — every field collected has a defined operational purpose.
All data transmitted between your device and winph22 servers is encrypted using industry-standard TLS/SSL protocols. Payment data — including GCash, PayMaya, and banking transactions — is processed through encrypted channels with no card or wallet credentials stored on winph22 servers.
winph22 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. Data is shared only with service providers essential to platform operation, and with regulatory authorities where legally required, including PAGCOR and Philippine law enforcement agencies.
Personal data and financial records are stored in segregated, access-controlled systems. Internal access to player data is restricted on a need-to-know basis, and all data access events are logged. winph22 conducts periodic security reviews of its data handling practices.
As a winph22 Account holder, you hold enforceable rights over your personal data: the right to access, correct, delete, restrict processing, and object to certain uses. Requests are handled through the winph22 support channel and responded to within 30 days of receipt.
When this Privacy Policy is updated, winph22 notifies Account holders via on-site notification or email with a summary of material changes and the effective date. The current version is always accessible at winph22.one/privacy-policy. Continued use after the effective date constitutes acceptance.
This Privacy Policy applies to all personal data processed by winph22 in connection with your use of the winph22 online gaming platform at winph22.one, including Account registration, deposits and withdrawals, game play, customer support interactions, and marketing communications where you have provided consent. This Policy should be read alongside the winph22 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. If you do not agree with this Privacy Policy, you should not register an Account or use the Platform.
1.1 This Privacy Policy applies to personal data collected and processed by winph22 ("the Platform", "we", "us", "our") in connection with the operation of the online gaming and sports betting service accessible at winph22.one, including its mobile-optimized interfaces.
1.2 winph22 acts as the data controller in respect of the personal data of Account holders and platform visitors. As data controller, winph22 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.
1.3 winph22 operates within the regulatory jurisdiction of the Philippine Amusement and Gaming Corporation (PAGCOR) and processes personal data in accordance with applicable Philippine data privacy law, including the Data Privacy Act of 2012 (Republic Act 10173) and its implementing rules and regulations administered by the National Privacy Commission (NPC) of the Philippines.
1.4 This Policy covers data processing activities involving:
2.1 winph22 collects the following categories of personal data, depending on the nature of your interaction with the Platform:
3.1 winph22 uses your personal data for the following purposes:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, Contact, Account | Contract performance |
| Identity and age verification (KYC) | Identity, Contact, Financial | Legal obligation (PAGCOR / AML) |
| Processing deposits and withdrawals | Financial, Identity | Contract performance |
| Providing gaming and betting services | Account, Activity, Technical | Contract performance |
| Fraud detection and AML monitoring | Financial, Technical, Activity | Legal obligation / Legitimate interest |
| Customer support | Identity, Contact, Communications | Contract performance |
| Responsible gaming monitoring | Activity, Account | Legal obligation / Legitimate interest |
| Marketing communications (opted-in) | Contact, Activity | Consent |
| Regulatory reporting to PAGCOR / NPC | Identity, Financial, Activity | Legal obligation |
| Platform analytics and improvement | Technical, Activity (aggregated) | Legitimate interest |
3.2 winph22 does not use personal data for automated individual decision-making that produces legal or similarly significant effects without human oversight, except where required by anti-money laundering automated screening obligations.
4.1 winph22 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012 and applicable PAGCOR regulatory requirements:
winph22 shares personal data with third-party service providers who assist in operating the Platform. These include payment processing partners (GCash/PayMaya infrastructure providers, banking partners), identity verification service providers, game studio providers who supply live casino and slot content, customer support platform operators, and cloud infrastructure providers. All service providers are bound by data processing agreements that restrict their use of personal data to the specific services they provide to winph22.
winph22 is required by Philippine law and PAGCOR licensing conditions to disclose personal and financial data to regulatory and law enforcement authorities upon lawful request. This includes the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government agencies. winph22 cooperates fully with lawful investigative requests.
In the event of a merger, acquisition, restructuring, or asset sale involving winph22, personal data held in connection with Account operations may be transferred to the successor entity, subject to that entity assuming equivalent data protection obligations. Account holders will be notified of any such transfer with reasonable advance notice.
6.1 winph22 processes Philippine Peso deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and Visa/Mastercard. The handling of payment data is subject to strict controls:
6.2 winph22 support staff will never request your GCash PIN, OTP, or bank account password via any channel. Any communication purporting to be from winph22 and requesting such credentials is fraudulent. Report suspected fraud to our live chat immediately.
7.1 winph22 uses cookies and similar tracking technologies on its platform for the following purposes:
7.2 winph22 does not use third-party advertising cookies or cross-site tracking technologies that follow your browsing activity outside the winph22 platform. Retargeting and behavioral advertising through third-party cookie networks are not employed.
7.3 You may manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to log in and use the platform. Disabling analytical cookies does not affect your gaming experience.
8.1 winph22 retains personal data for the following periods, or longer where required by Philippine law or PAGCOR regulations:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity and KYC documents | 5 years from Account closure | AMLA / PAGCOR requirement |
| Financial transaction records | 5 years from transaction date | AMLA / Tax / PAGCOR requirement |
| Account and gameplay data | Duration of Account + 5 years | Regulatory and dispute resolution |
| Customer support communications | 3 years from interaction date | Legitimate interest / Legal claims |
| Marketing consent records | Until consent withdrawn + 1 year | Accountability obligation |
| Technical and access logs | 12 months | Security / Fraud prevention |
8.2 At the end of the applicable retention period, personal data is securely deleted or anonymized in accordance with winph22's data disposal procedures. Anonymized aggregate data may be retained indefinitely for statistical purposes.
9.1 winph22 implements the following technical and organizational measures to protect your personal data:
9.2 Notwithstanding these measures, no internet transmission or storage system is entirely secure. You play a role in protecting your Account by using a strong, unique password, enabling 2FA, and not sharing your login credentials with any third party. If you believe your Account has been compromised, contact winph22 support immediately via on-site live chat.
10.1 Under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal data held by winph22:
You have the right to request a copy of the personal data winph22 holds about you, the purposes for which it is processed, and the categories of recipients to whom it has been disclosed. Requests are fulfilled within 30 days.
You may request correction of inaccurate or incomplete personal data held about you. Identity data corrections may require submission of supporting documentation consistent with KYC requirements.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal retention obligation applies. Note that regulatory retention periods under AMLA and PAGCOR may restrict immediate deletion of certain records.
You may request that winph22 restrict processing of your personal data — for example, while a rectification request is being investigated — without requesting full deletion of the data.
You may object to processing of your personal data carried out on the basis of legitimate interests, including for direct marketing. Where you object to marketing, processing for that purpose will cease immediately. Other objections are assessed on a case-by-case basis.
If you believe winph22 has processed your personal data in breach of applicable data protection law, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph), the supervisory authority for data protection in the Philippines.
10.2 To exercise any of the rights described above, please contact winph22 through the on-site live chat or by sending a written request to support at winph22.one (plain text — not a clickable link). Requests will be acknowledged within five (5) business days and fulfilled within thirty (30) days. Complex requests may require an extension of up to an additional 30 days, of which you will be notified.
10.3 winph22 may require you to verify your identity before processing a privacy rights request to ensure that the request is made by the Account holder and not a third party.
11.1 If you are a parent or guardian and believe that a person under 21 in your care has registered an Account with winph22, please contact our support team immediately via the on-site live chat channel. winph22 takes underage access seriously and will act promptly on all verified reports.
12.1 winph22's primary data processing infrastructure is operated within or in direct connection with the Philippine regulatory framework. Where winph22 engages service providers whose infrastructure is located outside the Philippines — including cloud hosting, analytics, or game studio providers — personal data transfers are conducted subject to contractual safeguards consistent with the requirements of the Philippine Data Privacy Act and NPC regulations on cross-border data flows.
12.2 winph22 ensures that international data transfers are made only to entities that provide adequate levels of data protection, either through applicable legal mechanisms (e.g., standard contractual clauses, adequacy determinations) or through binding commitments in data processing agreements that are equivalent in protection to Philippine data privacy standards.
12.3 Where personal data is transferred internationally in connection with PAGCOR regulatory reporting or AMLC obligations, such transfers are conducted pursuant to specific legal requirements and are not subject to player objection under data protection law.
13.1 winph22 may update this Privacy Policy from time to time to reflect changes in platform operations, applicable law, PAGCOR regulatory guidance, or NPC rulings. When material changes are made, winph22 will notify Account holders via on-site banner notification or email to the registered address, with the effective date prominently displayed.
13.2 The current version of this Privacy Policy is always accessible at winph22.one/privacy-policy. The version number and effective date at the top of this page indicate the current revision.
13.3 Where changes to this Policy require new or expanded consent, winph22 will seek that consent before the changes take effect. Continued use of the Platform after the effective date of non-consent-dependent updates constitutes acknowledgment of the revised Policy.
14.1 For all privacy-related inquiries, data subject rights requests, or concerns about how winph22 handles your personal data, you may contact us through the following channels:
14.2 winph22 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. The DPO is the primary point of contact for privacy concerns that cannot be resolved through general support channels.
14.3 If you are dissatisfied with winph22's response to a privacy concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines. Further information about the NPC's complaint process is available through official Philippine government channels.
winph22 collects only the data needed to operate your Account and comply with PAGCOR and Philippine law. Your data is encrypted, access-controlled, and never sold. You hold enforceable rights over your data under the Philippine Data Privacy Act of 2012. winph22 operates as a PAGCOR-regulated platform and processes personal data in full compliance with applicable Philippine regulatory requirements. Questions and requests are handled through our 24/7 Filipino-English support team.
Play with Confidence
Now that you know how winph22 protects your personal data, you can enjoy the platform with full confidence. PAGCOR-regulated, SSL-encrypted, and built for Filipino players — your privacy and your peso are both in good hands.
winph22 is strictly for players 21 years of age and above. Please play responsibly. Visit our Responsible Gaming page for self-exclusion tools and support resources.