winoh Privacy Policy

1. Introduction and Data Controller

This Privacy Policy ("Policy") describes how winoh ("winoh," "we," "us," "our"), the operator of the online gaming platform at winoh.vip, collects, uses, stores, discloses, and otherwise processes the personal data of players and visitors ("you," "your," "Data Subject") in connection with our services.

winoh acts as the Data Controller with respect to the personal data you provide or that is generated through your use of the winoh platform. As Data Controller, winoh is responsible for ensuring that your personal data is processed lawfully, fairly, and transparently, in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules and regulations issued by the National Privacy Commission (NPC).

By accessing, registering, or using any part of the winoh platform, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. If you do not agree to this Policy, please cease using the winoh platform immediately.

2. Information We Collect

2.1 Information You Provide Directly

When you register a winoh account, make a deposit, request a withdrawal, contact support, or otherwise interact with the platform, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification numbers (e.g., PhilSys ID, UMID, passport number, driver's license number);
• Contact Data: Philippine mobile number (e.g., Globe or Smart number), email address, and residential address;
• Financial Data: GCash account number, Maya account details, bank account information (BPI, BDO, Metrobank, etc.), transaction history, deposit amounts, and withdrawal requests;
• Account Data: Username, password (stored as a one-way cryptographic hash, never in plain text), account preferences, and VIP tier information;
• Verification Documents: Copies of government-issued Philippine IDs, selfie photographs for liveness verification, and supporting documents submitted during Know Your Customer (KYC) processes.

2.2 Information Collected Automatically

When you access the winoh platform, certain technical and behavioural data is collected automatically:

• Device and Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and network connection type;
• Usage Data: Pages visited, game titles played, session duration, bet history, login timestamps, and in-session navigation patterns;
• Location Data: Approximate geolocation derived from your IP address, used for fraud prevention and regulatory compliance. winoh does not collect precise GPS location data.

2.3 Information from Third Parties

winoh may receive personal data about you from third parties in limited circumstances, including:

• Payment service providers (e.g., GCash, Maya) who confirm transaction status and provide payment-related identifiers;
• Identity verification service providers used to authenticate government-issued Philippine IDs during KYC;
• Regulatory authorities or law enforcement agencies under lawful orders or applicable Philippine legal obligations.

3. How We Use Your Information

winoh uses your personal data for the following purposes:

• Account Management: To create, maintain, authenticate, and secure your winoh account and provide access to the platform's gaming services;
• Transaction Processing: To process PHP deposits and withdrawals via GCash, Maya, BPI, BDO, and other accepted Philippine payment methods, and to maintain accurate financial records;
• Identity Verification (KYC): To verify your identity and age (21+ requirement) in compliance with Philippine gaming and AML regulations;
• Legal and Regulatory Compliance: To comply with obligations under Philippine law, including the Anti-Money Laundering Act (AMLA), Data Privacy Act (RA 10173), and applicable PAGCOR-related regulations;
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other malicious conduct on the winoh platform;
• Responsible Gaming: To monitor gaming behaviour patterns that may indicate problem gambling and to enforce responsible gaming limits, self-exclusion requests, and age restrictions;
• Customer Support: To respond to your inquiries, complaints, and support requests submitted to the winoh support team;
• Platform Improvement: To analyse aggregated, anonymised usage data to improve game selection, user experience, and platform performance for Filipino players;
• Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about winoh bonuses and events.

4. Legal Basis for Processing

winoh processes your personal data on the following legal grounds under the Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary to perform the contract between you and winoh — i.e., to provide the online gaming services you have registered for;
• Legal Obligation: Processing required by applicable Philippine law, including AML, KYC, tax, and gaming regulatory obligations;
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where winoh's legitimate interests are balanced against your privacy rights;
• Consent: For optional processing activities such as marketing communications, where you have provided explicit opt-in consent that can be withdrawn at any time.

5. Sharing of Personal Data

winoh does not sell your personal data. We may share your personal data with the following categories of recipients only to the extent strictly necessary:

• Payment Processors: GCash, Maya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your PHP transactions;
• Identity Verification Providers: Third-party KYC service providers engaged to verify Philippine government-issued identification documents;
• Game Technology Providers: Certified international game studios whose RNG game engines power the winoh catalog, who may receive anonymised game interaction data for technical support purposes;
• Regulatory and Law Enforcement Authorities: Philippine government agencies, including the AMLC, NPC, and law enforcement, where winoh is legally required or compelled to disclose information;
• IT Infrastructure Providers: Hosting, cloud storage, and cybersecurity service providers who process data on winoh's behalf under strict data processing agreements that prohibit unauthorised use of your information.

All third parties with whom winoh shares personal data are contractually bound to process that data only as instructed by winoh and in compliance with applicable data protection law.

6. Cookies and Tracking Technologies

winoh uses the following categories of cookies and similar technologies on the winoh.vip platform:

• Essential Cookies: Strictly necessary for the winoh platform to function, including session authentication cookies that keep you logged into your account during an active gaming session;
• Preference Cookies: Used to remember your platform settings and language preferences between sessions;
• Analytics Cookies: Used to collect anonymised data about how Filipino players navigate the winoh platform, helping us identify performance bottlenecks and improve the user experience. No personally identifiable information is associated with analytics data.

winoh does not deploy third-party advertising cookies or allow external ad networks to place tracking pixels on the winoh platform. You may manage cookie preferences through your browser settings; however, disabling essential cookies may impair platform functionality.

7. Data Retention

winoh retains your personal data for the following periods:

• Active Account Data: Retained for the duration of your winoh account and for a minimum of five (5) years following account closure, in compliance with Philippine AML record-keeping requirements;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLA and applicable tax regulations;
• Identity Verification Documents: Retained for the same period as transaction records, or longer where required by regulatory order;
• Support Communications: Retained for two (2) years from the date of the last interaction, unless linked to an ongoing investigation or dispute;
• Marketing Consent Records: Retained until consent is withdrawn plus one (1) year, to maintain an accurate consent audit trail.

Following the expiry of applicable retention periods, winoh will securely delete or anonymise your personal data in accordance with industry-standard data destruction practices.

8. Security of Personal Data

winoh implements a multi-layered security framework to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and winoh servers;
• Encryption at rest for sensitive data fields including financial information and identity documents stored on winoh infrastructure;
• One-way cryptographic hashing (with salting) for account passwords — winoh never stores your password in recoverable form;
• Access controls ensuring that winoh personnel can only access player data on a strict need-to-know basis, with all access logged and audited;
• Regular security assessments, penetration testing, and vulnerability scanning of the winoh platform;
• Incident response procedures that include mandatory notification to affected players and the NPC in the event of a reportable data breach.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (RA 10173), Filipino players whose personal data is processed by winoh have the following rights:

• Right to Be Informed: The right to be informed of how your personal data is being processed — which this Policy fulfils;
• Right of Access: The right to request a copy of the personal data winoh holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data in your winoh account;
• Right to Erasure: The right to request deletion of your personal data where winoh no longer has a lawful basis for processing it, subject to our legal retention obligations;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format for transfer to another service, where technically feasible;
• Right to Object: The right to object to processing carried out on the basis of legitimate interests, including direct marketing;
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, Filipino players may contact winoh's Data Protection Officer via the contact details set out in Section 12 of this Policy. winoh will respond to valid data subject requests within thirty (30) days of receipt.

10. Children and Minors

The winoh platform is strictly intended for adults who are 21 years of age or older, in accordance with Philippine regulations governing casino-style gambling. winoh does not knowingly collect personal data from persons under the age of 21. If winoh becomes aware that personal data has been collected from a minor, such data will be immediately deleted and the associated account closed. Parents or guardians who believe a minor has registered at winoh should contact our support team without delay.

11. Changes to This Privacy Policy

winoh reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or NPC guidelines. Material changes will be communicated to registered players via their registered contact details and/or a prominent notice on the winoh platform, no less than fourteen (14) days before taking effect. Your continued use of winoh following the effective date of an updated Policy constitutes acceptance of the revised terms.

12. Contact and Data Requests

For all privacy-related queries, data subject requests, or concerns regarding winoh's data practices, please contact:

This Privacy Policy was last reviewed and updated in June 2026, in accordance with the Data Privacy Act of 2012 (RA 10173) and the guidelines of the National Privacy Commission of the Philippines.