🔐 Privacy Policy

1. Introduction

This Privacy Policy describes how winsir Casino collects, uses, stores, shares, and protects personal information provided by users ("you", "Player") in connection with your use of the winsir platform. It has been prepared in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations.

This Policy covers all personal data processed by winsir whether collected online through the Platform, via customer support channels, through payment transactions, or through technical means such as cookies and server logs. This Privacy Policy should be read together with our Terms & Conditions, which govern your overall use of the winsir platform.

2. Data Controller

winsir Casino is the data controller responsible for the personal information collected through the winsir platform. As data controller, winsir determines the purposes and means of processing your personal data in accordance with applicable Philippine data protection law.

For all data-related inquiries, requests, or complaints, you may contact our Data Protection Officer (DPO) at: [email protected]

3. Data We Collect

3.1 Information You Provide Directly

When you register, verify your account, or interact with winsir, we collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, government-issued ID details (e.g., SSS, UMID, passport, PhilSys ID, driver's license)
• Contact Data: Philippine mobile number, email address, residential address (city/province, e.g., Manila, Cebu, Davao)
• Account Data: Username, encrypted password, account preferences, loyalty tier, gaming history
• Financial Data: GCash number, PayMaya account, bank account details (BPI, BDO, Metrobank, UnionBank), transaction history, deposit and withdrawal records
• Verification Data: Copies of identification documents submitted for KYC verification, selfies submitted for identity confirmation

3.2 Data Collected Automatically

When you access and use the winsir platform, we automatically collect certain technical data:

• IP address and approximate geolocation data
• Device type, operating system, browser type and version
• Pages visited, time spent, game sessions initiated and completed
• Login timestamps and session duration
• Referring URLs and clickstream data

3.3 Data from Third Parties

winsir may receive data about you from third-party payment providers (e.g., GCash, PayMaya), identity verification services, and fraud prevention partners, to the extent necessary for account verification and compliance purposes.

4. How We Use Your Data

winsir processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your winsir account; processing login and authentication; enforcing the one-account-per-person rule
• Service Delivery: Processing deposits and withdrawals via GCash, PayMaya, and bank transfers; facilitating gameplay; crediting bonuses and loyalty rewards
• Identity Verification (KYC/AML): Verifying your identity and age (21+) as required by applicable Philippine law and anti-money laundering regulations
• Responsible Gaming: Monitoring for problem gambling indicators; enforcing self-exclusion requests; applying deposit and session limits you set
• Customer Support: Responding to inquiries, complaints, and account issues submitted via live chat or email
• Security & Fraud Prevention: Detecting and preventing unauthorized access, fraud, collusion, money laundering, and other prohibited activities
• Legal Compliance: Meeting obligations under Philippine law including the DPA, AMLA, and any applicable PAGCOR regulatory requirements
• Platform Improvement: Analyzing aggregated usage data to improve game selection, interface design, and payment processing performance
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — only where you have provided consent or where permitted by applicable law

5. Legal Basis for Processing

winsir processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform the contract with you (your winsir account and platform services)
• Legal Obligation: Processing required to comply with Philippine law (KYC, AML, age verification)
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights
• Consent: Processing for marketing communications, where we have obtained your explicit consent. You may withdraw consent at any time by contacting support

6. Data Sharing & Disclosure

winsir does not sell, rent, or trade your personal data to any third party for their independent marketing purposes. We share your data only in the following limited circumstances:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment service providers, solely to process your transactions
• Identity Verification Partners: Third-party KYC and AML compliance service providers engaged to verify your identity documents
• IT & Infrastructure Providers: Cloud hosting, security, and technical service providers who process data on our behalf under strict data processing agreements
• Regulatory Authorities: Government agencies including PAGCOR, the AMLC (Anti-Money Laundering Council), the NPC (National Privacy Commission), and law enforcement, where required by law or court order
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to equivalent privacy protections

All third parties who receive your personal data from winsir are required to handle it in accordance with applicable data protection law and are prohibited from using it for any purpose beyond what winsir has specified.

7. Cookies & Tracking Technologies

The winsir platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and collect analytical data. The types of cookies used include:

• Essential Cookies: Required for core platform functionality including login sessions, account authentication, and security features. These cannot be disabled without affecting platform use.
• Analytical Cookies: Used to understand how players interact with the platform — which games are most popular, which pages experience navigation drop-offs, and how long sessions last. Data is aggregated and anonymized.
• Preference Cookies: Store your language, display preferences, and game lobby settings to personalize your winsir experience across sessions.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the winsir platform.

8. Data Retention

winsir retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable Philippine law. Specifically:

• Account Data: Retained for the duration of your active winsir account, plus a minimum of five (5) years following account closure, as required for AML compliance
• Transaction Records: Retained for a minimum of five (5) years in accordance with the Anti-Money Laundering Act of 2001 (as amended)
• KYC/Identity Documents: Retained for five (5) years from the date of submission or account closure, whichever is later
• Support Communications: Retained for three (3) years from the date of the communication
• Technical Logs: Typically retained for twelve (12) months for security and fraud analysis purposes

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction or re-identification.

9. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by winsir:

• Right to Be Informed: The right to know what personal data winsir collects about you and how it is processed
• Right of Access: The right to request a copy of the personal data winsir holds about you
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data
• Right to Erasure ("Right to Be Forgotten"): The right to request deletion of your personal data, subject to our legal retention obligations
• Right to Object: The right to object to processing based on legitimate interests or for direct marketing purposes
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to verified requests within thirty (30) days.

10. Children's Privacy

The winsir platform is strictly prohibited for use by individuals under the age of 21 years, in accordance with Philippine gaming regulations. winsir does not knowingly collect personal data from anyone under 21. If we become aware that personal data has been submitted by a minor, we will immediately close the account, forfeit any associated balances, and delete the data.

If you believe that a minor has registered on the winsir platform, please notify us immediately at [email protected].

11. Security Measures

winsir implements technical and organizational security measures appropriate to the risk level of personal data processing. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and winsir servers
• AES-256 encryption for sensitive data at rest, including financial records and identity documents
• Multi-factor authentication options for player accounts
• Regular penetration testing and security audits by independent third parties
• Strict role-based access controls limiting internal staff access to personal data on a need-to-know basis
• Intrusion detection systems and 24/7 security monitoring

While winsir takes all reasonable steps to protect your data, no transmission over the internet is entirely risk-free. You play a critical role in account security by maintaining a strong, unique password for your winsir account and enabling two-factor authentication.

12. International Data Transfers

Your personal data is primarily processed and stored on servers located in or serving the Philippine market. Where winsir engages third-party service providers that process data outside the Philippines, we ensure that appropriate safeguards are in place — including contractual obligations requiring equivalent data protection standards to those required under Philippine law.

13. Changes to This Privacy Policy

winsir may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will always reflect when the most recent changes were made.

Where changes are material, winsir will notify registered users by email or in-platform notification at least seven (7) days before the changes take effect. Your continued use of the winsir platform following the effective date of any updated Privacy Policy constitutes acceptance of the revised terms.

14. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal data by winsir Casino, please contact:

• Data Protection Officer, winsir Casino
• Email: [email protected]
• Live Chat: Available 24/7 on the winsir platform
• Response Time: We aim to respond to all data subject requests within 30 days

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC).