gwinph Privacy Policy

1. Introduction and Scope

Welcome to gwinph, a PAGCOR-licensed online gaming platform operated in the Philippines. This Privacy Policy ("Policy") describes how gwinph ("we," "us," "our," "the Company") collects, uses, discloses, stores, and protects the personal information of users ("you," "your," "Player") who access or use our website located at https://gwinph.cam and associated mobile applications, games, and services (collectively, "the Platform").

By creating an account, accessing the Platform, or using any gwinph services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Policy. If you do not agree with any provision of this Policy, you must immediately cease using gwinph services and may request account closure and data deletion as outlined in Section 10.

This Policy applies to all users regardless of geographic location, and is designed to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and regulations, National Privacy Commission circulars, PAGCOR regulatory requirements, and applicable international data protection standards including GDPR where relevant.

2. Data Controller and Contact Information

gwinph is the data controller responsible for your personal information. For privacy-related inquiries, data access requests, complaints, or to exercise your data subject rights, please contact:

Data Protection Officer
Email: [email protected]
Postal Address: Metro Manila, Philippines
Response Time: Within fifteen (15) business days

For urgent matters, you may also contact our 24/7 Customer Support via live chat or email at [email protected]. For unresolved data protection concerns, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

3. Information We Collect

gwinph collects several categories of personal information necessary to provide gaming services, comply with legal obligations, prevent fraud, and improve user experience. The types of data we collect include:

3.1 Account Registration Information

When you create a gwinph account, we collect:

• Full legal name (first name, middle name, last name)
• Date of birth and age verification data
• Gender
• Nationality and country of residence
• Complete residential address (street, city, province, postal code)
• Email address
• Mobile phone number (with country code)
• Username and encrypted password
• Preferred language and currency
• Security questions and answers (encrypted)

3.2 Identity Verification and KYC Documents

To comply with PAGCOR anti-money laundering (AML) requirements and verify your identity before processing withdrawals, we collect:

• Government-issued identification documents (Philippine passport, driver's license, UMID, postal ID, national ID)
• Proof of address documents (utility bills, bank statements, government correspondence dated within 3 months)
• Selfie photographs holding identification for facial verification
• Source of funds documentation for high-value transactions
• Biometric data (facial recognition data processed via secure third-party KYC providers)

3.3 Financial and Transaction Information

When you deposit, withdraw, or transact on gwinph, we collect:

• Payment method details (GCash account name, Maya account information, bank account numbers, cryptocurrency wallet addresses)
• Transaction amounts, dates, times, and status
• Deposit and withdrawal history
• Bonus and promotional credit usage
• Betting history, wager amounts, and game outcomes
• Account balance and currency conversions

Note: gwinph does not store full credit card numbers or CVV codes. Payment processing is handled by PCI DSS-compliant third-party payment gateways. We only retain masked card numbers (last 4 digits) for transaction identification purposes.

3.4 Gameplay and Behavioral Data

To improve gaming experience, detect fraud, and fulfill regulatory obligations, we automatically collect:

• Games played, game sessions, duration, and frequency
• Betting patterns, win/loss ratios, and gameplay strategies
• Real-time player activity logs and timestamps
• Responsible gaming limit settings (deposit limits, time limits, self-exclusion status)
• Chat messages and communications with customer support (recorded for quality assurance)
• User preferences, favorite games, and personalized settings

3.5 Technical and Device Information

When you access gwinph, we automatically collect technical data including:

• IP address, geolocation data (country, region, city)
• Device identifiers (device ID, IMEI, advertising ID)
• Operating system (iOS, Android, Windows, macOS) and version
• Browser type, version, language, and time zone settings
• Screen resolution, device model, and manufacturer
• Connection type (Wi-Fi, mobile data) and network operator
• Cookies, pixels, local storage, and similar tracking technologies
• Pages visited, clickstream data, referral sources, and session duration

3.6 Marketing and Communication Preferences

With your consent, we collect:

• Email and SMS marketing preferences
• Push notification settings
• Promotional code usage and campaign participation
• Survey responses and feedback submissions
• Social media profile information if you connect social accounts

4. How We Use Your Information

gwinph processes your personal information for the following lawful purposes:

4.1 Service Provision and Account Management

• Create, manage, and maintain your gwinph account
• Authenticate your identity and authorize access to the Platform
• Process deposits, withdrawals, and financial transactions
• Provide customer support and respond to inquiries
• Facilitate gameplay, betting, and gaming services
• Track account balances, bonuses, and loyalty rewards

4.2 Legal and Regulatory Compliance

• Verify age (21+ requirement) and identity to prevent underage gambling
• Comply with PAGCOR licensing conditions and gaming regulations
• Fulfill anti-money laundering (AML) and counter-terrorist financing (CTF) obligations under Philippine law (RA 9160, as amended)
• Maintain transaction records as required by law (minimum 5 years)
• Respond to legal requests, court orders, and regulatory inquiries
• Report suspicious transactions to the Anti-Money Laundering Council (AMLC)

4.3 Fraud Prevention and Security

• Detect and prevent fraudulent activity, bonus abuse, and account compromise
• Monitor for multiple accounts, collusion, and cheating
• Implement risk-based authentication and transaction monitoring
• Protect against cyberattacks, unauthorized access, and data breaches
• Investigate disputes, chargebacks, and payment reversals

4.4 Responsible Gaming and Player Protection

• Enforce self-exclusion and account closure requests
• Monitor gambling behavior for signs of problem gambling
• Apply deposit limits, loss limits, and session time restrictions
• Provide reality checks and cooling-off period notices
• Offer access to responsible gaming resources and support

4.5 Marketing and Personalization (With Your Consent)

• Send promotional offers, bonuses, and exclusive VIP rewards
• Deliver personalized game recommendations based on preferences
• Conduct surveys, contests, and prize draws
• Send newsletters, updates, and platform announcements
• Display targeted advertising via email, SMS, and push notifications

You may withdraw marketing consent at any time by clicking "Unsubscribe" in emails, adjusting notification settings in your account dashboard, or contacting [email protected].

4.6 Analytics and Platform Improvement

• Analyze user behavior, traffic patterns, and engagement metrics
• Optimize website performance, speed, and user experience
• Develop new games, features, and services
• Conduct A/B testing and usability studies
• Generate aggregated, anonymized reports for business intelligence

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, gwinph processes your personal information based on the following legal grounds:

Processing Purpose	Legal Basis
Account creation, gameplay, transactions	Performance of contract (Terms and Conditions)
Age verification, AML compliance, record retention	Compliance with legal obligation (RA 9160, PAGCOR regulations)
Fraud prevention, security monitoring	Legitimate interest in protecting users and business operations
Marketing communications, personalized offers	Your explicit consent (opt-in required)
Responsible gaming monitoring	Legitimate interest in player welfare and regulatory compliance

6. How We Share Your Information

gwinph does not sell or rent your personal information to third parties for their marketing purposes. We may share your information with the following categories of recipients:

6.1 Service Providers and Business Partners

We share data with trusted third-party vendors who perform services on our behalf:

• Payment processors: GCash, Maya, bank partners, cryptocurrency gateways (for transaction processing)
• KYC/AML verification providers: Identity verification and document authentication services
• Game providers: Software developers and live casino operators who power gwinph games
• Cloud hosting providers: Secure data storage and server infrastructure
• Customer support platforms: Live chat, helpdesk, and CRM systems
• Marketing and analytics tools: Email service providers, SMS gateways, analytics platforms (Google Analytics, Firebase)
• Security and fraud detection services: Risk scoring, device fingerprinting, and bot prevention

All third-party service providers are contractually obligated to maintain confidentiality, process data only for specified purposes, and implement appropriate security measures.

6.2 Regulatory Authorities and Law Enforcement

We may disclose your information to government agencies, regulators, and law enforcement when:

• Required by Philippine law, court order, subpoena, or legal process
• Requested by PAGCOR for licensing compliance audits
• Reported to the Anti-Money Laundering Council (AMLC) for suspicious transaction reports (STRs)
• Necessary to cooperate with law enforcement investigations (fraud, money laundering, terrorism financing)
• Required to protect the rights, property, or safety of gwinph, users, or the public

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy proceeding involving gwinph, your personal information may be transferred to the successor entity. You will be notified via email and/or prominent notice on the Platform before your information becomes subject to a different privacy policy.

6.4 Aggregated and Anonymized Data

We may share aggregated, anonymized data that cannot identify individual users with business partners, advertisers, and researchers for statistical analysis, market research, and industry benchmarking. Such data is not considered personal information under Philippine data protection law.

7. Data Security and Protection Measures

gwinph implements industry-standard technical, organizational, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

7.1 Technical Security Controls

• Encryption: All data transmitted between your device and gwinph servers is protected by 256-bit SSL/TLS encryption. Passwords are hashed using bcrypt with unique salts.
• Secure data storage: Personal information is stored on secure servers located in ISO 27001-certified data centers with redundant backups.
• Firewall protection: Multi-layered firewall architecture and intrusion detection systems (IDS) monitor and block suspicious activity.
• Access controls: Role-based access control (RBAC) ensures employees access only data necessary for their job functions.
• Two-factor authentication (2FA): Available for player accounts; mandatory for staff accessing sensitive systems.
• Security monitoring: 24/7 Security Operations Center (SOC) monitors for vulnerabilities, threats, and breaches.

7.2 Organizational Security Measures

• Employee confidentiality agreements and data protection training
• Background checks for personnel with access to personal data
• Data minimization principle (collect only necessary information)
• Regular security audits and penetration testing by independent third parties
• Incident response plan with breach notification procedures

7.3 Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, gwinph will notify affected users and the National Privacy Commission within seventy-two (72) hours of discovery, as required by law. Notification will include the nature of the breach, data compromised, potential impact, and remedial actions taken.

8. Data Retention and Deletion

gwinph retains your personal information for as long as necessary to fulfill the purposes outlined in this Policy and comply with legal obligations:

8.1 Active Accounts

While your account remains active, we retain all account information, transaction history, gameplay data, and communications. You may request data deletion at any time (subject to legal retention requirements), which will result in account closure.

8.2 Closed Accounts

After account closure, we retain personal information for the following periods:

• Transaction records: 5 years (required by AMLC and PAGCOR regulations)
• KYC documents: 5 years after last transaction
• Customer support communications: 3 years
• Marketing data: Deleted immediately upon withdrawal of consent or account closure
• Gameplay logs: 2 years for dispute resolution and regulatory compliance
• Security incident records: 7 years for legal defense purposes

8.3 Automated Deletion

After applicable retention periods expire, personal information is securely deleted or anonymized using industry-standard methods (cryptographic erasure, multi-pass overwriting). Anonymized data may be retained indefinitely for statistical purposes.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

9.1 Right to be Informed

You have the right to know what personal information we collect, how it is used, and with whom it is shared. This Privacy Policy serves as our primary disclosure mechanism.

9.2 Right to Access

You may request a copy of your personal information held by gwinph. We will provide the data in a commonly used electronic format within fifteen (15) business days. To request data access, email [email protected] with your account details and government-issued ID for verification.

9.3 Right to Object

You may object to processing of your data for direct marketing purposes at any time by opting out via account settings or unsubscribe links. For other processing activities, you may object on grounds related to your particular situation; we will cease processing unless we have compelling legitimate grounds that override your interests.

9.4 Right to Rectification

You may update or correct inaccurate personal information by logging into your account dashboard and editing profile details. For KYC documents, contact Customer Support to submit updated identification.

9.5 Right to Erasure / Right to be Forgotten

You may request deletion of your personal information by contacting [email protected]. Note that we may retain certain data as required by law (e.g., 5-year AML record retention). Account deletion is permanent and irreversible; all balances must be withdrawn before deletion.

9.6 Right to Data Portability

You may request a structured, machine-readable copy of your personal information for transfer to another service provider. This right applies to data processed based on consent or contract performance.

9.7 Right to Lodge a Complaint

If you believe gwinph has violated your data protection rights, you may file a complaint with the National Privacy Commission at:

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC), Vicente Sotto St., Pasay City
Email: [email protected]
Hotline: (+632) 8234-2228
Website: https://www.privacy.gov.ph

10. Cookies and Tracking Technologies

gwinph uses cookies, pixels, local storage, and similar technologies to enhance user experience, analyze site traffic, and deliver personalized content. By using the Platform, you consent to the use of cookies as described below.

10.1 Types of Cookies We Use

• Essential cookies: Necessary for Platform functionality (session management, authentication, security)
• Performance cookies: Collect anonymous data on how users interact with the Platform (Google Analytics, Firebase Analytics)
• Functionality cookies: Remember preferences, language settings, and game favorites
• Marketing cookies: Track conversion, retargeting, and campaign effectiveness (requires consent)

10.2 Cookie Management

You may control or delete cookies through your browser settings. Note that disabling essential cookies may impair Platform functionality. Most browsers accept cookies by default; refer to your browser's help documentation to learn how to block or delete cookies.

11. International Data Transfers

Your personal information may be transferred to, stored, or processed in countries outside the Philippines where gwinph's service providers operate data centers. We ensure that all international transfers comply with Philippine data protection law by:

• Executing Standard Contractual Clauses (SCCs) approved by the National Privacy Commission
• Transferring data only to countries recognized as providing adequate data protection
• Obtaining your explicit consent for transfers to non-adequate countries when necessary
• Implementing supplementary security measures (encryption, access controls) for cross-border transfers

12. Children's Privacy

gwinph services are strictly restricted to individuals aged 21 years or older. We do not knowingly collect, use, or disclose personal information from minors. If we become aware that a user is underage, we will immediately close the account, delete all associated data, and refund any deposits to the source payment method.

Parents or guardians who believe their child has provided information to gwinph should contact [email protected] immediately.

13. Third-Party Links and Services

The gwinph Platform may contain links to third-party websites, payment processors, and social media platforms. This Privacy Policy applies only to gwinph; we are not responsible for the privacy practices of external sites. We encourage you to review the privacy policies of any third-party services before providing personal information.

14. Changes to This Privacy Policy

gwinph reserves the right to modify this Privacy Policy at any time to reflect changes in legal requirements, business practices, or Platform features. Any updates will be posted on this page with a revised "Last Updated" date. Material changes will be communicated via email or prominent notice on the Platform at least thirty (30) days before becoming effective.

Continued use of gwinph services after the effective date of changes constitutes acceptance of the updated Policy. We recommend reviewing this Policy periodically to stay informed about how we protect your information.

15. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact:

gwinph Data Protection Officer
Email: [email protected]
Customer Support: [email protected] (24/7)
Live Chat: Available via website and mobile app
Postal Address: Metro Manila, Philippines