Full Privacy Policy of whinph
This Privacy Policy describes how whinph ("we," "us," or "our"), operating the website whinph.best, collects, uses, stores, shares, and protects your personal information when you visit our platform, create an account, or use any of our online gaming and betting services. By accessing or using whinph, you agree to the terms outlined in this privacy policy.
This document is written in plain, everyday English so that every Filipino player — whether you're in Manila, Cebu, Davao, or anywhere else in the archipelago — can fully understand how we handle your data. We believe transparency is a basic right, not a luxury.
1. Who We Are
whinph is a licensed online gaming and sports betting platform serving players across the Philippines. We offer a wide range of games including poker, baccarat, online casino slots, bingo, color game, and sports betting on PBA basketball and volleyball leagues. Our registered office and data controller details are available upon request by contacting our support team at the email address listed in Section 12 of this privacy policy.
2. What Personal Information We Collect
We collect personal information in several ways — when you register an account, when you make a deposit or withdrawal, when you contact our support team, and when you simply browse our website. Here is a breakdown of what we collect and why:
- Account Registration Data: Full name, date of birth, email address, mobile number, and username. This is required to create and verify your whinph account.
- Identity Verification (KYC): Government-issued ID (e.g., PhilSys, passport, driver's license), selfie for face-matching, and proof of address. This is a regulatory requirement for all licensed gaming operators in the Philippines.
- Financial Information: GCash or Maya account number, bank account details (BDO, BPI, UnionBank), or card details (Visa/Mastercard) used for deposits and withdrawals. We do not store full card numbers — all payment data is handled by PCI-DSS compliant payment processors.
- Transaction Records: Deposit and withdrawal history, bet history, bonus usage, and account balance changes — for audit, dispute resolution, and regulatory compliance purposes.
- Device and Technical Data: IP address, browser type, operating system, device identifiers, session duration, and pages visited. This helps us detect fraud and improve platform performance.
- Communications: Messages, emails, and chat logs when you contact our customer support team.
- Marketing Preferences: Whether you've opted in or out of promotional emails, SMS notifications, or push alerts.
3. How We Use Your Information
Every piece of data we collect has a specific, legitimate purpose. We never collect information just for the sake of it. Here's how we put your data to use at whinph:
- To register and maintain your player account securely.
- To verify your identity and age as required by PAGCOR regulations and the Anti-Money Laundering Act (AMLA).
- To process your deposits and payouts via GCash, Maya, InstaPay, PESONet, or your preferred payment method.
- To provide customer support and respond to your queries or complaints in a timely manner.
- To detect, investigate, and prevent fraud, money laundering, or other illegal activities on our platform.
- To send you important account notifications — security alerts, transaction confirmations, and policy updates.
- To send promotional offers, bonuses, and news about new games — but only if you've opted in to marketing communications.
- To analyze platform usage patterns and improve our products, features, and user experience.
- To comply with our legal and regulatory obligations as a licensed Philippine online gaming operator.
4. Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations, whinph processes your personal data on the following legal grounds:
- Contractual necessity: Processing needed to fulfill the terms of your account agreement with us.
- Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLA requirements, and NPC regulations.
- Legitimate interest: Fraud prevention, platform security, and service improvement.
- Consent: Marketing communications — you can withdraw this consent anytime.
5. How We Share Your Information
whinph does not sell your personal information to anyone. We share data only when it is strictly necessary:
- Payment processors: GCash, Maya, InstaPay/PESONet partners, and card networks receive only the minimum data needed to complete your transaction.
- Identity verification providers: Licensed KYC service providers that help us verify government IDs in compliance with Philippine law.
- Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission when legally required to do so.
- Cloud and hosting providers: Servers located in secure data centres that process data on our behalf under strict data processing agreements.
- Analytics tools: Anonymised, aggregated data only — no personally identifiable information is ever shared with analytics platforms.
All third parties who receive your data are required to handle it in accordance with the Data Privacy Act and our data processing agreements. They may not use your data for their own purposes.
6. How Long We Keep Your Data
We retain your personal information for as long as your account is active or as long as is necessary to fulfil the purposes described in this privacy policy. Specifically:
- Account and KYC records are retained for a minimum of five (5) years after account closure, as required by AMLA regulations.
- Transaction records are kept for at least five (5) years for audit and regulatory compliance purposes.
- Support communications are retained for two (2) years after the case is resolved.
- Marketing preferences and consent records are kept until you withdraw consent or request deletion.
After the applicable retention period, your data is securely deleted or anonymised.
7. Cookies and Tracking Technologies
whinph uses cookies and similar technologies to make our platform work properly and to understand how players use it. Here's a simple breakdown:
- Essential cookies: Required for you to log in, navigate the site, and use core features. These cannot be disabled without affecting your experience.
- Analytics cookies: Help us understand which games are popular, where players drop off, and how to improve the platform. Data is aggregated and anonymised.
- Preference cookies: Remember your language settings, notification preferences, and display choices.
We do not use advertising or third-party tracking cookies. You can manage your cookie preferences through your browser settings at any time.
8. Your Rights Under the Data Privacy Act
As a data subject under RA 10173, you have the following rights which whinph fully respects:
- Right to be informed: To know that your data is being collected and how it will be used — which is exactly what this privacy policy does.
- Right of access: To request a copy of the personal information we hold about you.
- Right to correction: To ask us to correct any inaccurate or outdated personal information.
- Right to erasure: To request deletion of your personal data, subject to our legal retention obligations.
- Right to data portability: To receive your personal data in a structured, commonly used format.
- Right to object: To object to the processing of your data for marketing or profiling purposes.
- Right to file a complaint: To lodge a complaint with the National Privacy Commission if you believe your rights have been violated.
To exercise any of these rights, contact our Data Protection Officer using the details in Section 12. We will respond within fifteen (15) working days.
9. Data Security Measures
We use industry-standard technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse:
- All data in transit is encrypted using TLS 1.2 or higher (SSL).
- Passwords are stored using strong hashing algorithms — we never store your plain-text password.
- Our servers are hosted in access-controlled, ISO 27001-certified data centres.
- We conduct regular security audits and penetration testing.
- Staff access to personal data is strictly role-based and logged.
- Two-factor authentication (2FA) is available and encouraged for all player accounts.
Despite these measures, no system is 100% impenetrable. In the unlikely event of a data breach that affects your rights, we will notify you and the NPC within 72 hours as required by law.
10. Children's Privacy
whinph is strictly an 18+ platform. We do not knowingly collect personal information from anyone under the age of 18. If we discover that a minor has created an account, we will immediately suspend it and delete all associated data. If you believe a minor has used our platform, please contact us right away at the email address below.
11. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will update the "Last Updated" date at the top of this page and, where the changes are significant, notify you by email or through an in-app notification. We encourage you to review this page periodically so you're always in the loop.
12. Contact Us / Data Protection Officer
If you have any questions about this privacy policy, want to exercise your data rights, or need to report a privacy concern, please reach out to our Data Protection Officer:
For complaints that remain unresolved, you may contact the National Privacy Commission of the Philippines at privacy.gov.ph.
