Privacy Policy

1. Data Controller Identity

The data controller responsible for the personal information of Players on the we1winphp Platform is we1winphp (referred to in this Policy as "we1winphp," "we," "us," or "our"). we1winphp is the operator of the online gaming platform accessible at we1winphp.one and all associated subdomains and mobile-optimized versions thereof (collectively, the "Platform").

we1winphp is committed to protecting the privacy of all Players in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). This Policy describes in detail how we handle personal data in our capacity as data controller.

For all data privacy matters, Players may contact we1winphp's designated Data Protection Officer (DPO) through the contact information provided in Section 13 of this Policy.

2. Categories of Personal Data We Collect

we1winphp collects the following categories of personal data from Players, collected only to the extent necessary for the purposes identified in Section 4:

Identity Data:

• Full legal name as it appears on a Philippine government-issued identification document
• Date of birth (used to verify the 21+ age requirement)
• Gender (where voluntarily provided during registration)
• Copies of government-issued ID documents submitted for KYC purposes (e.g., PhilSys National ID, UMID, Driver's License, Passport, or Voter's ID)
• Selfie or liveness verification image (where required for enhanced KYC)

Contact Data:

• Philippine mobile number (primary account identifier and OTP delivery channel)
• Email address (where provided; used for account notifications and promotional communications)
• Province or city of residence (where provided)

Financial Data:

• GCash account number or Maya account number linked to your we1winphp account for deposits and withdrawals
• Philippine bank account details (account name, account number, bank name) where bank transfer is used
• Transaction history including deposits, wagers, winnings, and withdrawals

Technical & Usage Data:

• IP address and approximate geolocation at the time of login
• Device type, operating system, browser type and version
• Login timestamps and session duration records
• Game activity logs, wagering history, and betting patterns
• Cookies and similar tracking technologies (see Section 8)

Communications Data:

• Records of live chat interactions, email correspondence, and support ticket history with we1winphp's customer service team
• Feedback, survey responses, and voluntary communications submitted by Players

3. How We Collect Your Personal Data

we1winphp collects personal data through the following channels:

• Direct provision by you: Information you voluntarily provide when registering your we1winphp account, completing KYC verification, making deposits or withdrawal requests, contacting support, or responding to surveys and promotions.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, device identifiers, session data, and usage analytics gathered through cookies and server logs.
• Payment processors: Transaction confirmation data shared with we1winphp by GCash, Maya, and Philippine banking partners when you initiate a deposit or withdrawal, limited to information necessary to reconcile and process the transaction.
• Identity verification services: Where we1winphp uses third-party KYC or identity verification providers for document and liveness checks, those providers may share verification results (pass/fail and relevant identity data) with we1winphp under data processing agreements.
• Fraud and AML monitoring: Risk data from anti-money laundering screening services used to comply with Philippine AML obligations, processed under appropriate legal authority.

4. Purposes for Which We Process Your Personal Data

we1winphp processes personal data for the following specific, legitimate purposes:

• Account registration and management: Creating and maintaining your we1winphp account, verifying your identity, and administering your account settings and preferences.
• Age verification and eligibility: Confirming that you meet the 21+ minimum age requirement applicable under Philippine gaming regulations prior to allowing access to real-money gaming services.
• Know Your Customer (KYC) compliance: Verifying your identity and address in compliance with PAGCOR requirements and Philippine anti-money laundering laws (AMLA, RA 9160 as amended).
• Payment processing: Processing deposits, crediting winnings, and executing withdrawal requests to your verified GCash, Maya, or bank account.
• Platform operation and improvement: Delivering games, resolving technical issues, analysing usage patterns to improve Platform performance and user experience, and personalising content recommendations.
• Responsible gaming: Monitoring account activity to identify potential problem gambling indicators and facilitating player-requested tools such as deposit limits, session limits, and self-exclusion.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, collusion, bonus abuse, and other prohibited conduct.
• Legal and regulatory compliance: Fulfilling obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities.
• Marketing communications: Sending promotional offers, bonus notifications, and Platform updates to Players who have not opted out of such communications. Players may unsubscribe at any time through account settings or by contacting support.
• Customer support: Responding to enquiries, resolving complaints, and maintaining records of support interactions.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, we1winphp processes personal data on the following legal bases:

• Contractual necessity: Processing necessary to perform the contract between we1winphp and the Player, including account operation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing obligations, AML/CFT requirements, tax reporting, and NPC data protection obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming management, and Platform improvement, where such interests are not overridden by the Player's fundamental rights.
• Consent: Where we1winphp relies on consent as a legal basis (e.g., for optional marketing communications or certain cookie categories), you have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Data Sharing & Disclosure

we1winphp does not sell or rent personal data. We share personal data only in the following circumstances:

• Payment service providers: GCash (Mynt), Maya (Voyager Innovations), and Philippine banking partners receive transaction-specific data necessary to process deposits and withdrawals.
• KYC and identity verification providers: Third-party providers engaged by we1winphp to perform document verification and liveness checks during KYC processes, under data processing agreements that restrict their use of data to the verification purpose only.
• Game software providers: Game studios and live dealer operators whose content is integrated into the Platform receive technical session data (e.g., player ID and wager amounts) necessary to operate their games. These providers do not receive your full identity data.
• Regulatory authorities: PAGCOR, the AMLC, the Bureau of Internal Revenue (BIR), and other Philippine government bodies where disclosure is required by law, court order, or regulatory mandate.
• Fraud prevention and AML screening services: Specialist providers used to screen against sanctions lists, politically exposed person (PEP) databases, and fraud blacklists as required under Philippine AML regulations.
• Professional advisers: Legal counsel, auditors, and accountants engaged by we1winphp who require access to data in the course of their professional engagement, subject to professional confidentiality obligations.

All third-party recipients of personal data are required to handle such data in accordance with the Data Privacy Act of 2012 and applicable contractual obligations. we1winphp does not transfer personal data outside the Philippines except where appropriate safeguards are in place.

7. Data Retention

we1winphp retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law:

• Account and identity data: Retained for the duration of the Player's account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years following each transaction, consistent with AMLA obligations and BIR record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years following the end of the business relationship, or longer where required by AMLC or applicable law.
• Support and communications records: Retained for three (3) years following the closure of each support interaction or complaint.
• Technical and usage data (logs): Retained for twelve (12) months unless longer retention is required for security investigation or legal proceedings.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identified or identifiable individual.

8. Cookies & Tracking Technologies

we1winphp uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Essential for the operation of the Platform, including maintaining your authenticated session after we1winphp Login and remembering your security preferences. These cookies cannot be disabled without affecting Platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how Players interact with the Platform — including pages visited, session duration, and error events — to help we1winphp improve Platform performance and usability.
• Functional cookies: Remembering your language preferences, game display settings, and other personalisation options you have configured within your we1winphp account.
• Security cookies: Supporting fraud detection, bot filtering, and anomalous login detection mechanisms that protect Player accounts.

Players may manage cookie preferences through their browser settings. Disabling non-essential cookies will not prevent access to the Platform but may affect certain personalisation features. we1winphp does not use cookies to serve third-party advertising.

9. Security Measures

we1winphp implements the following technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between the Player's device and the Platform
• AES-256 encryption for personal data at rest in we1winphp's databases
• Bcrypt password hashing — we1winphp cannot retrieve or read Player passwords
• SMS-based two-factor authentication (2FA) available to all Players for we1winphp Login
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis
• Login anomaly detection flagging access from unrecognised devices or geographic locations
• Regular third-party security audits and penetration testing of Platform infrastructure
• Incident response procedures for notifying affected Players and the NPC in the event of a personal data breach, in accordance with NPC Circular 16-03

While we1winphp takes all reasonable measures to protect your data, no digital platform can guarantee absolute security. Players are encouraged to use strong, unique passwords, enable 2FA, and report any suspected unauthorised account activity to we1winphp support immediately.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, Players registered on the we1winphp Platform have the following rights with respect to their personal data:

• Right to be informed: You have the right to be informed that your personal data is being collected and processed — this Privacy Policy serves as that notification.
• Right of access: You may request a copy of the personal data we1winphp holds about you and information about how it is being processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held by we1winphp.
• Right to erasure or blocking: You may request deletion or blocking of your personal data where it is no longer necessary for the purpose it was collected, subject to we1winphp's legal retention obligations.
• Right to data portability: You may request a machine-readable copy of the personal data you provided to we1winphp, where technically feasible.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time. Objection to other processing activities will be evaluated against we1winphp's legitimate interests and legal obligations.
• Right to damages: You have the right to claim damages for violations of your data privacy rights under RA 10173.
• Right to file a complaint: You may file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe we1winphp has violated your data privacy rights.

To exercise any of the above rights, please contact we1winphp's Data Protection Officer using the contact details in Section 13. we1winphp will respond to all data subject requests within thirty (30) calendar days of receipt.

11. Children's Privacy

The we1winphp Platform is strictly intended for persons aged 21 years and above, consistent with PAGCOR regulations governing online casino-style gaming in the Philippines. we1winphp does not knowingly collect personal data from individuals under 21 years of age.

If we1winphp becomes aware that personal data has been collected from a Player who does not meet the minimum age requirement, that account will be immediately suspended, all associated data will be deleted to the extent permitted by legal retention obligations, and any funds held will be returned to the source payment method following identity verification of the account holder.

If you believe a minor has registered on the Platform, please contact we1winphp support immediately so that appropriate action can be taken.

12. Changes to This Privacy Policy

we1winphp may update this Privacy Policy from time to time to reflect changes in our data practices, Platform functionality, or applicable Philippine privacy law. Material changes to this Policy will be communicated to registered Players via:

• A prominent notice on the Platform's login page and within the Player's account dashboard, displayed for a minimum of thirty (30) days prior to the effective date of the change; and/or
• An SMS notification to the Player's registered Philippine mobile number for significant changes affecting data subject rights or data processing purposes.

The "Last updated" date at the top of this Policy reflects the most recent revision. Continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the changes. If you do not accept a material change, you must cease using the Platform and request account closure.

13. Contact & Complaints

For any questions, data subject requests, or concerns regarding this Privacy Policy or we1winphp's data processing practices, please contact our Data Protection Officer through the following channel:

Support & DPO Email: [email protected] (plain text — not a clickable link)

Live Chat: Available 24/7 on the we1winphp Platform after logging in. Support is available in both English and Filipino (Tagalog). For formal data privacy complaints or DPO escalations, please specify "Data Privacy Request" at the start of your message so it is directed to the appropriate team.

we1winphp will acknowledge all data privacy requests within five (5) business days and provide a substantive response within thirty (30) calendar days of receipt.

If you are not satisfied with we1winphp's response to your data privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines through the NPC's official complaint channels.