winingplus Privacy Policy

1. Introduction

winingplus ("we," "us," or "our") operates the online gaming platform accessible at winingplus.com (the "Platform"). As the personal information controller of data collected through the Platform, we are responsible for ensuring that your personal data is processed lawfully, fairly, and transparently.

This Privacy Policy applies to all personal data collected from players, visitors, and any other individuals who interact with the winingplus Platform, whether through our website, mobile interface, customer support channels, or any other touchpoint. It covers data collected both online and, where applicable, offline in connection with our services.

By registering an account with winingplus or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should discontinue use of the Platform immediately.

This policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement between you and winingplus.

2. Personal Data We Collect

winingplus collects only the personal data that is necessary for the purposes described in this policy. The categories of personal data we may collect include:

2.1 Identity & Contact Information

• Full legal name as it appears on your government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Nationality and country of residence;
• Philippine mobile number and email address;
• Residential address, including barangay, city or municipality, and province.

2.2 Identity Verification (KYC) Documents

• Copies of government-issued photo identification (e.g., Philippine passport, SSS ID, UMID, PhilSys National ID, driver's license, or PRC ID);
• Proof of address documents (e.g., utility bills, bank statements issued within the last three months);
• Selfie or liveness verification images where required for identity confirmation.

2.3 Financial Information

• GCash or PayMaya mobile wallet account details (account name and registered number);
• Bank account details for BDO, BPI, Metrobank, or other supported Philippine banks;
• Transaction history, including deposit amounts, withdrawal requests, and payment method used;
• Source of funds declarations where required by anti-money laundering regulations.

2.4 Gaming Activity Data

• Game session logs, including games played, wagers placed, and outcomes;
• Bonus and promotion usage history;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status);
• Account balance history and transaction records.

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser type and version;
• Unique device identifiers;
• Login timestamps and session duration data;
• Referring URLs and navigation paths within the Platform.

2.6 Communications Data

• Records of communications with our customer support team via live chat, email, or other channels;
• Feedback, survey responses, and complaint records;
• Marketing communication preferences and opt-in/opt-out records.

3. How We Collect Your Data

winingplus collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and similar tracking technologies (see Section 7);
• Third-party sources: Identity verification data from licensed KYC service providers; fraud prevention data from anti-fraud partners; payment verification data from payment processors such as GCash and PayMaya;
• Regulatory sources: Information received from PAGCOR or other regulatory authorities in connection with licensing compliance or investigations.

4. How We Use Your Personal Data

winingplus uses the personal data we collect for the following purposes:

winingplus will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, winingplus processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML obligations, PAGCOR licensing requirements, and tax reporting;
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

winingplus does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this policy:

6.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include KYC and identity verification providers, payment processors (including GCash and PayMaya integrations), fraud prevention and AML screening services, cloud hosting and infrastructure providers, and customer support platform providers.

6.2 Regulatory & Law Enforcement Authorities

winingplus may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the winingplus business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

7. Cookies & Tracking Technologies

The winingplus Platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyze Platform usage. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function correctly, including session authentication and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and responsible gaming tool configurations.
• Analytics cookies: Collect aggregated, anonymized data about how players use the Platform to help us improve performance and user experience.
• Security cookies: Used for fraud detection, bot prevention, and to protect the integrity of the Platform.

You can manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the winingplus Platform. Strictly necessary and security cookies cannot be disabled as they are required for the Platform to operate safely.

8. Data Retention

winingplus retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. Our general retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and PAGCOR record-keeping requirements;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• Gaming activity logs: Retained for three (3) years from the date of the session;
• Customer support communications: Retained for two (2) years from the date of the last interaction;
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with our data disposal procedures.

9. Data Security

winingplus implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While winingplus takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect any unauthorized access to your account.

10. Your Data Privacy Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by winingplus:

• Right to be informed: The right to know whether your personal data is being processed and to receive clear information about how it is used — which is the purpose of this Privacy Policy;
• Right of access: The right to request a copy of the personal data we hold about you and information about how it is processed;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 14. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

11. Children's Privacy

winingplus is an online gaming platform strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data, and return any deposited funds to the original payment source. If you believe that a minor has registered on the winingplus Platform, please contact us immediately at the details provided in Section 14.

12. International Data Transfers

Some of the third-party service providers engaged by winingplus may be located outside the Philippines. Where personal data is transferred to recipients in other countries, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012.

Such safeguards may include contractual clauses approved by the National Privacy Commission, binding corporate rules, or transfers to countries that have been assessed as providing an adequate level of data protection. By using the winingplus Platform, you consent to such international transfers of your personal data where necessary for the provision of our services.

13. Changes to This Privacy Policy

winingplus reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the winingplus Platform following the posting of any changes constitutes your acceptance of the revised policy.

14. Contact Us & Data Protection Officer

winingplus has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data or this policy, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.