Your personal data belongs to you. This Privacy Policy explains precisely what information winph 99 collects, why we collect it, how it is used, who it may be shared with, and the rights you hold as a data subject under Philippine law. We encourage all players to read this document in full.
Six core principles guide how winph 99 handles every piece of personal data collected from Philippine players on our platform.
winph 99 collects personal data only for specific, explicit, and legitimate purposes directly related to operating a licensed Philippine online gaming platform. Data is not collected in bulk "just in case."
All personal data stored by winph 99 is protected using industry-standard 256-bit encryption at rest and in transit. Access to player data within the organisation is restricted on a strict need-to-know basis.
We collect only what is necessary. Mandatory data collection is limited to what PAGCOR compliance, KYC verification, and account operations genuinely require. No surplus data collection takes place.
winph 99 does not sell, rent, or trade your personal information to third-party marketers or data brokers. Your data is used exclusively to operate and improve your winph 99 experience.
All data handling at winph 99 complies with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and PAGCOR's player data requirements for licensed online gaming operators.
Philippine data subjects have the right to access, correct, delete, and object to the processing of their personal data. winph 99 provides a clear process for exercising each of these rights.
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the data controller responsible for the personal information collected through winph99.biz is the legal entity operating the winph 99 platform under PAGCOR regulatory oversight ("winph 99," "we," "us," or "our").
winph 99 has designated a Data Protection Officer (DPO) as required by the National Privacy Commission (NPC) for personal information controllers processing a significant volume of personal data. Players may contact the DPO through the contact details provided in Section 15 of this Policy.
This Privacy Policy applies exclusively to personal data collected by winph 99 through winph99.biz and its associated mobile web interface. It does not apply to third-party websites or services linked from the platform.
This Privacy Policy applies to all persons who:
By using winph 99, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This consent is obtained in compliance with Section 12 of the Data Privacy Act of 2012.
winph 99 collects personal data in the following categories. The table below summarises each data type, its source, and the primary purpose for which it is collected.
| Data Category | Examples | Source |
|---|---|---|
| Registration Data | Full name, email address, mobile number, date of birth, username, password (hashed) | Provided by you at registration |
| KYC & Identity Data | Government-issued ID (Passport, SSS, PhilHealth, UMID, Driver's Licence), selfie photo, proof of address | Provided by you during KYC verification |
| Financial Data | GCash number, bank account details, transaction records, deposit and withdrawal history | Provided by you and generated by platform transactions |
| Gaming Activity Data | Game sessions, bet amounts, game outcomes, bonus usage, responsible gaming settings | Automatically generated during platform use |
| Technical & Device Data | IP address, device type, operating system, browser type, session duration, page interactions | Automatically collected via cookies and server logs |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, promotional opt-in records | Provided by you in communications with winph 99 |
| Compliance Data | AML screening results, self-exclusion records, responsible gaming interactions, dispute records | Generated by regulatory and compliance processes |
What we do NOT collect: winph 99 does not collect sensitive personal information beyond what is strictly required for KYC compliance, such as biometric data not required for identity verification, health information, or political/religious affiliations.
winph 99 uses personal data collected from players for the following specific purposes:
To create and maintain your winph 99 account; authenticate your identity at login; process deposits and withdrawals to your verified GCash, BPI, BDO, Maya, or other accepted payment accounts; deliver the games and services you access; and manage your VIP tier and loyalty rewards.
To fulfil winph 99's obligations as a PAGCOR-regulated online gaming operator, including KYC identity verification, anti-money laundering (AML) checks, age verification (21+ minimum), responsible gaming monitoring, and provision of regulatory reports to PAGCOR as required by law.
To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, collusion, money laundering, and other prohibited conduct described in the Terms & Conditions. Device and IP data are used to identify suspicious login patterns and protect your account from unauthorised access.
To analyse aggregate, anonymised usage data to improve platform performance, game selection, payment processing speed, and the mobile experience on Philippine Android and iOS devices. Individual player data is not used to build commercial profiles for advertising purposes.
To manage and resolve your support requests, disputes, and complaints. Communications with winph 99 support are retained to ensure continuity of service and to provide evidence in dispute resolution processes.
Where you have opted in to receive promotional communications, winph 99 may send you information about relevant promotions, bonuses, and gaming content via email or SMS. You may withdraw your marketing consent at any time through your account settings or by contacting support.
Under the Data Privacy Act of 2012, winph 99 processes personal data on the following legal bases:
winph 99 does not sell your personal data. We may share your personal information only in the following circumstances:
Transaction data necessary to process deposits and withdrawals is shared with your chosen payment service provider — GCash, Maya, BPI, BDO, UnionBank, Coins.ph, or other accepted payment methods. Each provider operates under its own privacy policy and data protection obligations.
winph 99 may disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), or other Philippine government authorities where required by law or regulatory instruction. Such disclosures are made only to the extent necessary and in accordance with applicable law.
Anonymised or pseudonymised session data may be shared with certified game studios and RNG providers to ensure game integrity, resolve technical disputes, and comply with provider audit requirements. Personal identification data is not shared with game providers.
Identity document data submitted for KYC verification may be processed by contracted third-party identity verification service providers operating under strict data processing agreements and bound by equivalent data protection standards.
winph 99 may disclose personal data where required by court order, subpoena, or other legally binding demand. We will inform you of such demands where legally permissible to do so.
No Sale of Data: winph 99 will never sell, rent, lease, or otherwise transfer your personal data to third-party advertisers, data brokers, or marketing companies. This is an unconditional commitment.
winph 99 uses cookies and similar technologies to operate the platform effectively and improve the player experience. The following categories of cookies are used:
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent your ability to use winph 99. For guidance on managing cookies in popular Philippine mobile browsers, please contact winph 99 support.
winph 99 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following retention periods:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation (PAGCOR, AML) |
| KYC identity documents | Duration of account + 5 years after closure | Legal obligation (AML, RA 9160) |
| Transaction & financial records | 10 years from transaction date | Legal obligation (BIR, AMLC) |
| Gaming activity records | 5 years from account closure | Regulatory compliance, dispute resolution |
| Customer support communications | 3 years from interaction date | Legitimate interest, dispute resolution |
| Marketing consent records | Until withdrawn + 2 years | Compliance with Data Privacy Act |
| Technical & device logs | 12 months from collection | Platform security, fraud prevention |
Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Regulatory obligations may require winph 99 to retain certain data beyond these standard periods; in such cases, we will retain only the minimum data required by law.
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information held by winph 99:
You may request a copy of the personal data winph 99 holds about you, including the purposes for which it is processed and the third parties with whom it has been shared. Requests are processed within thirty (30) days of receipt.
Where personal data held by winph 99 is inaccurate or incomplete, you have the right to request correction. Basic account information such as your contact details may be updated directly from your account settings. KYC-linked data corrections require identity re-verification.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to overriding legal retention obligations — particularly PAGCOR and AML record-keeping requirements.
You may object to the processing of your personal data where processing is based on winph 99's legitimate interests, including direct marketing and non-essential analytics. Objections to legitimate-interest processing will be honoured unless winph 99 can demonstrate compelling grounds that override your interests.
You may request a copy of the personal data you provided to winph 99 in a structured, commonly used, and machine-readable format where technically feasible, for transmission to another service provider of your choosing.
You may request that winph 99 restrict the processing of your data where accuracy is contested, processing is unlawful, data is no longer needed but must be retained for legal claims, or you have objected to processing pending verification of winph 99's legitimate grounds.
If you believe winph 99 has not handled your personal data in compliance with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Contact information for the NPC is publicly available through official Philippine government channels.
To exercise any of the above rights, please contact winph 99's Data Protection Officer using the contact details provided in Section 15. winph 99 will respond to all data rights requests within thirty (30) calendar days. Where requests are complex or numerous, this period may be extended by an additional two (2) months with written notice and explanation.
winph 99 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include, but are not limited to:
Notwithstanding these measures, no system is entirely immune to security risks. You are also responsible for protecting your own account by using a strong, unique password and enabling two-factor authentication. If you suspect a security incident involving your account, contact winph 99 support immediately.
winph 99 does not knowingly collect personal data from persons under the age of twenty-one (21) years. The platform is strictly for adults aged 21 and above, in compliance with PAGCOR's age requirements for casino-style online gaming in the Philippines.
Age verification is conducted as part of the registration process and confirmed during KYC identity verification. If winph 99 discovers that personal data has been collected from a person under 21 years of age, the account will be immediately closed, all data deleted, and any deposited funds returned to the source payment method.
If you are a parent or guardian and have reason to believe that a minor has registered on winph 99, please contact our support team immediately at the contact details in Section 15.
winph 99 does not include external links to third-party websites within its platform. However, if you access winph 99 through an external referral link or access a third-party payment provider's interface during a transaction, the third party's own privacy policy will apply to any personal data collected by that provider.
winph 99 is not responsible for the privacy practices or data security measures of third-party payment processors, game studio portals, or any other external services you may access in connection with your use of the platform.
Where personal data is transferred outside of the Republic of the Philippines — for example, to data centres, KYC verification providers, or game studio partners located in other jurisdictions — winph 99 ensures that such transfers are made only where:
You may request information about any international transfers of your personal data and the safeguards applied by contacting the Data Protection Officer.
winph 99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, PAGCOR requirements, data processing practices, or platform operations. The "Last Updated" date at the top of this page will be revised accordingly upon each amendment.
For material changes that significantly affect your data rights or the manner in which your personal data is processed, winph 99 will provide notice through in-platform notification or email to your registered address prior to the changes taking effect. For non-material amendments, continued use of the platform after the updated Policy is published constitutes your acknowledgement of the changes.
We recommend reviewing this Privacy Policy periodically. The current version is always accessible at winph99.biz/privacy-policy. This version was last updated in January 2026.
For all data protection enquiries, requests to exercise your data rights, or concerns about how winph 99 processes your personal information, please contact:
If you are not satisfied with winph 99's response to a data protection concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). Information on the NPC complaints process is available through official Philippine government resources.
winph 99 is committed to resolving all data protection queries promptly and in good faith. We take our obligations under the Data Privacy Act of 2012 and PAGCOR's regulatory framework seriously, and we welcome feedback from players on how we can improve our data handling practices.
winph 99 is built on security, fairness, and transparency — for Filipino players who deserve a platform they can genuinely trust. Register free today, deposit with GCash in minutes, and play over 500 games. 21+ only.