// data privacy & protection
This Privacy Policy explains how winph2 collects, uses, stores, shares, and protects the personal information of players and visitors. Your privacy matters to us — this document is written in plain language so you know exactly what happens to your data.
winph2 ("we," "us," "our") is committed to protecting the personal data of all individuals who interact with the winph2 platform at winph2.one ("Platform"). This Privacy Policy describes our practices regarding the collection, use, processing, storage, and disclosure of personal data in connection with your use of the Platform and associated services.
This policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission of the Philippines ("NPC"). Where relevant, we also apply international data protection best practices including those reflected in the General Data Protection Regulation ("GDPR") as a benchmark standard for the handling of personal information.
We understand that Filipino players trust us with sensitive information — from GCash account details to government-issued identification documents. We take that responsibility seriously and have implemented technical and organisational measures proportionate to the sensitivity of the data we handle.
For the purposes of applicable data protection law, winph2 is the data controller responsible for the personal information collected through the Platform. As data controller, winph2 determines the purposes and means by which your personal data is processed.
winph2 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with data protection obligations. The DPO may be contacted via the support email published on this website with the subject line "Data Protection — DPO Enquiry." Requests submitted in this manner will be acknowledged within five (5) business days and substantively responded to within fifteen (15) business days.
When you create a winph2 account, we collect:
Prior to processing withdrawals, we collect identity verification documents:
When you make deposits or request withdrawals, we collect transaction data including: GCash or PayMaya reference numbers, bank account identifiers (not full account numbers), transaction amounts and timestamps, and the history of deposits and withdrawals associated with your Account. We do not store complete payment card numbers, GCash PINs, or online banking passwords.
We collect data generated through your use of the Platform, including:
We automatically collect certain technical information when you access the Platform: IP address, device type and operating system, browser type and version, screen resolution, time zone, referring URL, and session identifiers. This data is used for security, fraud prevention, and Platform optimisation purposes.
Records of your communications with winph2 support — including live chat transcripts, support ticket content, and email correspondence — are retained for quality assurance, dispute resolution, and compliance purposes.
| Data Category | Basis for Collection | Sensitive? |
|---|---|---|
| Registration details | Contract performance | Partial (DOB) |
| KYC identity documents | Legal obligation (AML / PAGCOR) | Yes |
| Financial / payment data | Contract performance | Yes |
| Gameplay records | Contract performance / legitimate interest | No |
| Device / technical data | Legitimate interest (security) | No |
| Support communications | Legitimate interest (dispute resolution) | No |
| Marketing preferences | Consent | No |
Under the Philippine Data Privacy Act of 2012 and applicable regulations, winph2 relies on the following lawful bases for processing personal data:
winph2 uses your personal data for the following specific purposes:
To deliver live casino, slots, and bingo games, winph2 shares limited session data with certified game providers (such as Evolution Gaming, Pragmatic Play Live, PG Soft, and JILI). This data consists of session tokens, player identifiers, and wagering values necessary to render and verify game outcomes. No financial or identity documents are shared with game providers.
Transaction processing requires sharing relevant transaction data with payment service providers including GCash (G-Xchange Inc.), PayMaya (Maya Bank Inc.), and applicable Philippine bank partners. This sharing is limited to the minimum data required to execute and verify the relevant transaction.
winph2 may disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), or other competent Philippine government authorities where we are legally required to do so. Such disclosures are made only in response to lawful formal requests and in compliance with applicable legal procedure.
winph2 uses third-party fraud prevention and security services to protect the Platform. These services may process device and behavioural data to detect automated bots, account takeover attempts, and fraudulent financial activity. Such processors act on winph2's instructions and are bound by data processing agreements.
In the context of legal proceedings, compliance audits, or business transactions, personal data may be disclosed to legal counsel, accountants, or auditors under binding professional confidentiality obligations.
Some of the third-party service providers used by winph2 — including certain game providers and technical infrastructure partners — operate servers outside the Philippines. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to Philippine law, winph2 will implement appropriate safeguards, which may include:
You may request information about the safeguards applied to specific international transfers by contacting our Data Protection Officer at the support email address published on this website.
winph2 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and registration data | Duration of account + 5 years post-closure | AML / regulatory compliance |
| KYC identity documents | 5 years post-account closure | Legal obligation (AMLC / PAGCOR) |
| Financial transaction records | 7 years from transaction date | Tax and AML legal requirements |
| Gameplay records | 3 years from session date | Dispute resolution / legitimate interest |
| Support communications | 3 years from last interaction | Legitimate interest (dispute resolution) |
| Marketing consent records | Until withdrawn + 12 months | Consent compliance |
| Technical / session logs | 90 days rolling | Security / fraud prevention |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be associated with an identifiable individual.
winph2 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:
Despite these measures, no system is completely immune to security incidents. In the event of a data breach that poses a risk to your rights and freedoms, winph2 will notify affected individuals and the National Privacy Commission in accordance with the requirements of the Philippine Data Privacy Act of 2012.
Cookies are small text files placed on your device by a website when you visit it. They allow the site to remember your actions and preferences over time. winph2 uses cookies and similar technologies (local storage, session tokens) on the Platform.
You can manage non-essential cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies. Note that disabling certain cookies may affect Platform functionality. Strictly necessary cookies cannot be disabled while continuing to use the Platform.
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by winph2. To exercise any of these rights, contact our Data Protection Officer via the support email with the subject line "Data Subject Rights Request." We will acknowledge your request within five (5) business days and respond substantively within fifteen (15) business days.
winph2 applies age verification controls at registration and enforces identity verification (KYC) before processing any withdrawal. These controls are designed to prevent minors from accessing the Platform. If you are a parent or guardian and believe that your child or a minor under your care has registered on the Platform, please contact our support team immediately at the support email address published on this website.
If you become aware of underage gambling activity on the winph2 Platform by any person, you may report it to our support team via live chat or email. All such reports will be treated as a priority compliance matter and investigated promptly.
winph2 may send you promotional communications regarding bonuses, new games, platform updates, and seasonal offers. Marketing communications are sent only to players who have given explicit consent during registration or subsequently through account settings.
You may withdraw your consent to marketing communications at any time by:
Withdrawal of marketing consent does not affect your ability to use the Platform or receive service-related communications (such as transaction confirmations, account security alerts, and KYC notifications), which are sent on a contractual or legal obligation basis.
winph2 will not use your personal data for any automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you, without first obtaining your explicit consent and providing the legally required information about such processing.
The winph2 Platform may include features that interact with third-party services — for example, game providers operating within embedded frames on the Platform. These third-party services operate under their own privacy policies and data practices. winph2 takes reasonable steps to ensure that service providers engaged by winph2 maintain data protection standards consistent with our obligations, but winph2 cannot accept responsibility for the independent data practices of third-party providers that operate autonomous systems.
winph2 does not maintain social media sharing buttons, third-party advertising trackers, or affiliate tracking pixels that would transmit your personal data to social networks or advertising platforms without your knowledge.
winph2 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. When we make material changes to this policy, we will:
We encourage you to review this Privacy Policy periodically. The most current version is always accessible at winph2.one/privacy-policy. Your continued use of the Platform after the effective date of any revised version constitutes your acceptance of the updated practices described therein, except where renewed consent is legally required.
For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, you may contact our Data Protection Officer via the support email published on this website with the subject line "Privacy Policy — Data Request" or through the 24/7 live chat service. We respond to all privacy-related enquiries within fifteen (15) business days.
If you believe that winph2 has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the competent supervisory authority for data protection matters in the Philippines.
// data subject rights
Under the Philippine Data Privacy Act of 2012, winph2 is required to uphold the following rights for every registered player. You can exercise these rights at any time by contacting our Data Protection Officer.
You have the right to know that winph2 is collecting your personal data, why, and how it will be used — before or at the time of collection.
You may request a copy of the personal data winph2 holds about you, including what categories of data are stored and how they are being used.
If any personal data winph2 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
You may request deletion of your personal data where processing is no longer necessary, subject to winph2's legal retention obligations under AML and regulatory law.
You may object to the processing of your personal data for direct marketing at any time. Objection to other processing may be exercised where winph2 relies on legitimate interest as its legal basis.
You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
We handle your personal information with the same care we give to your winnings. If you have questions about your data or want to exercise your privacy rights, our team is here 24/7.
21+ only | Philippines | DPA 2012 compliant | Play responsibly