winph6 Privacy Policy

This Privacy Policy ("Policy") describes how winph6 ("winph6," "we," "us," or "our") collects, uses, stores, and discloses personal information about you ("Player," "User," or "you") when you access or use the winph6 online gaming platform, including the website at winph6.app and any associated mobile applications (collectively, the "Platform").

winph6 is committed to protecting your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). This Policy is designed to give you a clear and honest picture of our data practices so you can make informed decisions about your use of the winph6 Platform.

By registering a winph6 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform and contact us to close your account.

For the purposes of the Philippine Data Privacy Act of 2012, winph6 acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes through the Platform. This means winph6 determines the purposes and means of processing your personal information.

Where winph6 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, or analytics platforms — those parties act as Personal Information Processors (PIPs) and are contractually bound to process your data only on winph6's instructions and in accordance with applicable data protection law.

If you have any questions or concerns about how winph6 handles your personal data, you may contact our designated Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.

winph6 collects the following categories of personal data, depending on how you interact with the Platform:

winph6 does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required for responsible gaming assessments or as mandated by applicable law.

winph6 collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automatically — through cookies, web beacons, and similar tracking technologies when you browse or use the Platform. See Section 8 for more details on our cookie practices.
• From third parties — including identity verification providers, payment processors (such as GCash and Maya), fraud prevention services, and, where applicable, PAGCOR or other regulatory bodies.
• From publicly available sources — such as government databases or credit reference agencies, where permitted by Philippine law and necessary for compliance purposes.

winph6 uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your winph6 account, including verifying your identity and age (21+ requirement) and processing your login credentials.
• Service delivery: To provide you with access to games, process bets, calculate and pay out winnings, and deliver the core features of the winph6 Platform.
• Financial transactions: To process deposits and withdrawals via GCash, Maya, Philippine bank transfers, and debit cards, and to maintain accurate financial records.
• Legal and regulatory compliance: To fulfill our obligations under Philippine law, including anti-money laundering (AML) requirements, PAGCOR reporting obligations, and the Data Privacy Act of 2012.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other illegal conduct on the Platform.
• Responsible gaming: To monitor gaming patterns, enforce deposit and loss limits, process self-exclusion requests, and identify players who may need support.
• Customer support: To respond to your inquiries, resolve disputes, and improve the quality of our support services.
• Marketing communications: To send you promotional offers, bonus notifications, and Platform updates — but only where you have opted in to receive such communications. You may opt out at any time.
• Platform improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the winph6 Platform.

Under the Philippine Data Privacy Act of 2012, winph6 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your winph6 account and deliver the gaming services you have signed up for.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML obligations, PAGCOR licensing requirements, and tax reporting duties.
• Legitimate interests: Processing necessary for winph6's legitimate business interests, such as fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

winph6 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your financial transactions.
• Identity verification providers: Third-party KYC (Know Your Customer) service providers who assist winph6 in verifying your identity and age in compliance with regulatory requirements.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where required by law or regulatory directive.
• Fraud prevention services: Specialist providers who help winph6 detect and prevent fraudulent activity, money laundering, and other illegal conduct.
• Technology and infrastructure providers: Cloud hosting, data storage, and platform technology providers who process data on winph6's behalf under strict contractual data processing agreements.
• Professional advisers: Lawyers, auditors, and accountants who require access to certain data in the course of providing professional services to winph6, subject to professional confidentiality obligations.

winph6 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the winph6 website. We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytics cookies: Help winph6 understand how players use the Platform — which pages are visited most, where users drop off, and how performance can be improved. Data collected is aggregated and anonymized where possible.
• Marketing cookies: Used to deliver relevant promotional content to you based on your interests and gaming activity. These are only placed with your consent.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the winph6 Platform. For more information on managing cookies, refer to your browser's help documentation.

winph6 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the winph6 Platform.
• Encryption of sensitive data at rest, including financial information and government ID details.
• Role-based access controls ensuring that only authorized winph6 personnel can access personal data, and only to the extent necessary for their role.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response procedures to detect, contain, and report data breaches in accordance with NPC notification requirements.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winph6 will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will inform affected players without undue delay.

winph6 retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account data: Retained for the duration of your active winph6 account, plus a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Gaming history: Retained for three (3) years from the date of each gaming session, or longer if required for dispute resolution or regulatory purposes.
• Customer support records: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing data: Retained until you withdraw your consent to receive marketing communications, after which it is deleted or anonymized within thirty (30) days.

When personal data is no longer required, winph6 will securely delete or anonymize it in accordance with industry best practices and NPC guidelines.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by winph6. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 15.

The winph6 Platform is strictly intended for individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing online gaming in the Philippines. winph6 does not knowingly collect personal data from individuals under the age of 21.

If winph6 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any winnings or balances associated with an underage account will be forfeited.

If you are a parent or guardian and believe that your child has registered a winph6 account, please contact us immediately using the details in Section 15 so we can investigate and take appropriate action.

winph6 primarily stores and processes your personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and certain technology partners — may process data in other countries.

Where personal data is transferred outside the Philippines, winph6 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. These safeguards may include:

• Standard contractual clauses approved by the National Privacy Commission.
• Transfers to countries recognized by the NPC as providing an adequate level of data protection.
• Binding corporate rules where transfers occur within a group of companies.

You may request further information about the specific safeguards in place for any cross-border transfer by contacting our Data Protection Officer.

winph6 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the features of the Platform. When we make material changes, we will notify you by email or by posting a prominent notice on the winph6 Platform at least seven (7) days before the changes take effect.

The effective date at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically to stay informed about how winph6 protects your personal data. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.

Previous versions of this Policy are available upon request by contacting our Data Protection Officer.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way winph6 handles your personal data, please contact our Data Protection Officer through the following channels:

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 through the winph6 Platform
• Response Time: All privacy-related inquiries will be acknowledged within 48 hours and fully responded to within 30 calendar days.

If you are not satisfied with winph6's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through their official government channels.