winpj Privacy Policy

1. Introduction

winpj ("winpj," "we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who access or use the winpj online gaming platform, including the website at winpj.net, the winpj mobile application, and all associated services (collectively, the "Platform").

This Privacy Policy ("Policy") describes how winpj collects, uses, stores, discloses, and protects your personal information when you register for an account, use the Platform, or otherwise interact with winpj. It also explains the rights you have in relation to your personal data under the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations ("IRR").

By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

This Policy should be read together with winpj's Terms and Conditions, which are incorporated herein by reference.

2. Information We Collect

winpj collects personal information that is necessary for the operation of the Platform, the provision of gaming services, and compliance with applicable legal and regulatory obligations. The categories of personal information we collect include:

2.1 Registration and Account Information. When you create a winpj account, we collect your full legal name, date of birth, nationality, residential address, email address, and mobile phone number. This information is required to create and manage your account and to verify your identity in accordance with our Know Your Customer (KYC) obligations.

2.2 Identity Verification Documents. To comply with anti-money laundering (AML) regulations and PAGCOR licensing requirements, winpj may collect copies of government-issued identification documents (such as a Philippine National ID, passport, or driver's license), proof of address documents (such as utility bills or bank statements), and proof of payment method ownership.

2.3 Financial Information. winpj collects information about your deposits, withdrawals, and transaction history on the Platform. We do not store full credit or debit card numbers; card payment processing is handled by PCI-DSS compliant third-party payment processors who transmit only tokenized payment references to winpj.

2.4 Gaming Activity Data. We collect records of your gaming activity on the Platform, including games played, wagers placed, outcomes, bonus usage, and session duration. This data is used for account management, responsible gaming monitoring, fraud detection, and regulatory reporting.

2.5 Technical and Device Data. When you access the Platform, we automatically collect technical information including your IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers. This information is used for security monitoring, fraud prevention, and Platform optimization.

2.6 Communications Data. We retain records of communications between you and winpj's customer support team, including live chat transcripts, email correspondence, and support ticket records. These records are maintained for quality assurance, dispute resolution, and regulatory compliance purposes.

2.7 Cookies and Usage Data. winpj uses cookies and similar tracking technologies to collect information about how you interact with the Platform. Please refer to Section 8 of this Policy for detailed information about our use of cookies.

3. How We Use Your Information

winpj uses the personal information we collect for the following purposes:

• Account Management: To create, maintain, and manage your winpj account, including processing deposits and withdrawals, crediting bonuses, and maintaining your gaming history;
• Identity Verification: To verify your identity and age (21+) in accordance with our KYC obligations and PAGCOR licensing requirements;
• Payment Processing: To process deposits and withdrawals via your chosen payment method, including GCash, PayMaya, BPI, BDO, Metrobank, and card payments;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on the Platform;
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits, session reminders, and self-exclusion;
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance;
• Legal and Regulatory Compliance: To comply with applicable laws, regulations, and regulatory directives, including reporting obligations to PAGCOR and other competent authorities;
• Marketing Communications: To send you promotional offers, bonus notifications, and news about winpj, subject to your consent and applicable marketing regulations;
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the Platform.

4. Legal Basis for Processing

winpj processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

4.1 Contractual Necessity. Processing is necessary for the performance of the contract between you and winpj (i.e., the Terms and Conditions), including account management, payment processing, and the provision of gaming services.

4.2 Legal Obligation. Processing is necessary for winpj to comply with applicable legal and regulatory obligations, including KYC verification, AML reporting, and PAGCOR licensing requirements.

4.3 Legitimate Interests. Processing is necessary for winpj's legitimate interests, including fraud prevention, security monitoring, responsible gaming compliance, and Platform improvement, provided that such interests are not overridden by your fundamental rights and freedoms.

4.4 Consent. For certain processing activities, such as sending marketing communications and the use of non-essential cookies, winpj relies on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Disclosure of Your Information

winpj does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may disclose your personal information to the following categories of recipients:

5.1 Service Providers. winpj engages trusted third-party service providers to assist in the operation of the Platform, including payment processors, KYC verification providers, cloud hosting providers, customer support software providers, and analytics providers. These service providers are contractually bound to process your personal data only on winpj's instructions and in accordance with applicable data protection laws.

5.2 Regulatory and Law Enforcement Authorities. winpj may disclose your personal information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other competent authorities where required or permitted by applicable law, including in response to lawful requests, court orders, or regulatory investigations.

5.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or substantially all of winpj's assets, your personal information may be transferred to the acquiring entity as part of the transaction, subject to the same privacy protections described in this Policy.

5.4 With Your Consent. winpj may disclose your personal information to other third parties with your explicit prior consent.

6. Data Retention

6.1 Retention Period. winpj retains your personal information for as long as your account is active and for a period of five (5) years following account closure, or for such longer period as may be required by applicable law or regulatory obligation. Transaction records and KYC documentation may be retained for up to ten (10) years in accordance with AML regulations.

6.2 Deletion. Upon expiry of the applicable retention period, winpj will securely delete or anonymize your personal information in accordance with our data retention and disposal procedures. Anonymized data that can no longer be linked to an identifiable individual may be retained indefinitely for statistical and analytical purposes.

6.3 Retention During Disputes. Where a dispute, investigation, or legal proceeding is ongoing at the time the retention period would otherwise expire, winpj will retain the relevant personal information until the matter is fully resolved.

7. Data Security

7.1 Technical Measures. winpj implements industry-standard technical security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include Transport Layer Security (TLS) encryption for all data in transit, AES-256 encryption for sensitive data at rest, multi-factor authentication for administrative access, regular penetration testing and vulnerability assessments, and intrusion detection and monitoring systems.

7.2 Organizational Measures. Access to personal data is restricted to authorized winpj personnel and service providers who require access for legitimate business purposes. All personnel with access to personal data are subject to confidentiality obligations and receive regular data protection training.

7.3 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winpj will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with the requirements of the Data Privacy Act of 2012.

7.4 Your Responsibility. While winpj takes all reasonable steps to protect your personal data, you are also responsible for maintaining the security of your winpj Login credentials. You should use a strong, unique password for your winpj account and never share your login details with any third party. If you suspect that your account has been compromised, please contact winpj's customer support team immediately.

8. Cookies & Tracking Technologies

8.1 What Are Cookies. Cookies are small text files that are placed on your device when you visit the winpj Platform. They allow the Platform to recognize your device, remember your preferences, and provide a more personalized experience. winpj also uses similar tracking technologies such as web beacons, pixel tags, and local storage objects.

8.2 Types of Cookies We Use. winpj uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as session management, security authentication, and fraud prevention. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies: These cookies remember your preferences and settings, such as your preferred language, display settings, and whether you have accepted this Policy. They improve your experience by personalizing the Platform to your preferences.
• Analytics Cookies: These cookies collect anonymized information about how you use the Platform, including which pages you visit, how long you spend on each page, and any errors you encounter. This data helps winpj understand usage patterns and improve the Platform.
• Marketing Cookies: These cookies are used to deliver promotional content that is relevant to your interests. They track your activity across the Platform and may be used to measure the effectiveness of winpj's marketing campaigns. These cookies are only placed with your consent.

8.3 Managing Cookies. You can manage or disable cookies at any time through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the Platform. Instructions for managing cookies in common browsers are available in your browser's help documentation.

9. Your Data Protection Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by winpj:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed, as described in this Policy.
• Right of Access: You have the right to request a copy of the personal data that winpj holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that winpj holds about you. You may update certain account information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to winpj's legal and regulatory retention obligations.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that winpj transmit that data to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to winpj's overriding legal obligations.
• Right to Lodge a Complaint: If you believe that winpj has violated your data protection rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact winpj's Data Protection Officer using the contact details provided in Section 13 of this Policy. winpj will respond to all verified data subject requests within thirty (30) days of receipt, in accordance with the requirements of the Data Privacy Act of 2012.

10. Children's Privacy

10.1 Age Restriction. The winpj Platform is strictly restricted to individuals who are 21 years of age or older. winpj does not knowingly collect personal information from individuals under the age of 21. If you are under 21, you are not permitted to register for or use the Platform.

10.2 Discovery of Minor's Data. If winpj becomes aware that personal information has been collected from an individual under the age of 21 without appropriate verification, winpj will take immediate steps to suspend the relevant account, delete the personal information, and report the matter to the relevant authorities where required by law.

10.3 Parental Responsibility. Parents and guardians are encouraged to monitor their children's online activity and to use parental control tools to prevent minors from accessing online gaming platforms. If you believe a minor has registered on the winpj Platform, please contact our customer support team immediately.

11. International Data Transfers

11.1 Cross-Border Transfers. winpj primarily processes and stores personal data within the Republic of the Philippines. However, some of winpj's third-party service providers may process personal data in other countries. Where personal data is transferred outside the Philippines, winpj ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012 and its IRR.

11.2 Safeguards. Appropriate safeguards for international data transfers may include contractual clauses approved by the National Privacy Commission, binding corporate rules, or transfers to countries that have been recognized as providing an adequate level of data protection. winpj will not transfer your personal data to a third country unless such safeguards are in place.

12. Changes to This Privacy Policy

12.1 Right to Amend. winpj reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered players via email notification and/or a prominent notice on the Platform at least fourteen (14) days prior to the effective date of the changes.

12.2 Continued Use. Your continued use of the Platform following the effective date of any amendment to this Policy constitutes your acknowledgment of the revised Policy. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure in accordance with the Terms and Conditions.

12.3 Policy Version. This Privacy Policy is effective as of January 1, 2026. The version date will be updated each time a material change is made to this Policy.

13. Contact & Data Protection Officer

winpj has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection laws. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact:

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated. This Privacy Policy was last updated on January 1, 2026.