win99ph Privacy Policy

win99ph is a PAGCOR-licensed online casino and sports betting platform operating at win99ph.net, dedicated to providing Filipino players with a safe, transparent, and entertaining gaming environment. For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, win99ph acts as the personal information controller in respect of all personal data collected through the win99ph platform.

win99ph has appointed a Data Protection Officer (DPO) who is responsible for overseeing our data privacy practices and ensuring compliance with RA 10173, the implementing rules of the National Privacy Commission (NPC), and all applicable PAGCOR data governance requirements. You may contact our DPO at any time using the contact details provided in Section 13 of this Policy.

win99ph collects personal data from you in several ways: directly when you register and use our platform, automatically when you access our website, and from third parties such as payment processors and identity verification services. The categories of personal data we collect are described below.

2.1 Registration & Identity Data

When you create a win99ph account, we collect your full legal name, date of birth, email address, Philippine mobile number, and chosen username. Upon proceeding to KYC verification — which is required before any withdrawal can be processed — we additionally collect a copy of a valid government-issued Philippine identification document (such as a PhilSys national ID, passport, UMID, SSS ID, driver's licence, or PRC ID) and, where required, proof of payment method ownership.

2.2 Financial & Transaction Data

win99ph records all financial transactions associated with your account, including deposits, withdrawals, wagers, bonuses credited and consumed, and account balance history. We collect payment method identifiers (such as the last four digits of a bank account or a GCash-registered mobile number) but do not store full card or full account numbers on our servers. Payment processing is handled by PCI-DSS-compliant third-party payment processors.

2.3 Technical & Usage Data

When you access win99ph, our servers automatically collect certain technical data including your IP address, device type, operating system, browser type and version, referring URL, pages visited, session duration, and in-game activity logs. This data is used for platform security, fraud prevention, and aggregate analytics. We do not use this data to build individual advertising profiles.

2.4 Communications Data

If you contact win99ph's customer support team via live chat or email, we retain records of those communications, including chat transcripts and email correspondence. This allows us to maintain a consistent support experience and to investigate any complaints or disputes properly.

2.5 Responsible Gaming Data

If you interact with our responsible gaming tools — such as setting deposit limits, activating a cooling-off period, or requesting self-exclusion — we record those preferences and actions. This data is treated with the highest level of confidentiality and is used solely to enforce your stated responsible gaming restrictions.

2.6 Summary of Data Categories

win99ph processes your personal data for the following specific purposes. We do not use your data in ways that are incompatible with the purposes listed below without first obtaining your explicit consent or as required by law.

• Account creation and authentication: To register your win99ph account, verify your identity at login, and maintain the security of your account session.
• KYC and age verification: To verify that you are at least 21 years of age and that your identity matches your payment methods, as required by PAGCOR and Philippine anti-money laundering regulations.
• Payment processing: To facilitate deposits and withdrawals through GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, Coins.ph, and USDT TRC20, and to maintain accurate financial records of all transactions.
• Game delivery and platform operations: To provide you access to win99ph's games and services, record game results and wager histories, and calculate and credit winnings accurately.
• Customer support: To respond to your enquiries, investigate and resolve complaints, and maintain a history of your support interactions for quality assurance purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, and other prohibited conduct as described in our Terms and Conditions.
• Regulatory compliance: To fulfil win99ph's obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and any other applicable regulatory authority.
• Responsible gaming: To enforce deposit limits, self-exclusion requests, cooling-off periods, and other responsible gaming tools you have activated, and to identify patterns of play that may indicate a risk of gambling-related harm.
• Platform analytics and improvement: To analyse aggregate, anonymised usage data for the purpose of improving win99ph's platform, game selection, and user experience.
• Marketing communications: With your explicit consent, to send you information about promotions, bonuses, and new games available on win99ph. You may withdraw consent for marketing communications at any time via your account settings or by contacting our support team.

Under the Philippine Data Privacy Act of 2012, win99ph must have a lawful basis for processing your personal data. The legal bases we rely upon are as follows:

• Contractual necessity: Processing that is necessary to provide you with win99ph's services as set out in our Terms and Conditions — including account management, payment processing, and game delivery — is performed on the basis that it is necessary for the performance of our contract with you.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) obligations, National Privacy Commission requirements, and other applicable Philippine laws is performed on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and aggregate analytics is performed on the basis of win99ph's legitimate interest in operating a safe and secure platform, provided that such interests do not override your data privacy rights.
• Consent: Processing for direct marketing communications is performed on the basis of your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

win99ph uses cookies and similar technologies on its platform. A cookie is a small text file stored on your device when you visit a website. win99ph does not use cookies for third-party advertising or cross-site tracking. All cookies used by win99ph fall into one of the following categories:

• Strictly necessary cookies: These cookies are essential for the win99ph platform to function. They manage your login session, maintain your account security state, and remember your language and display preferences. The platform cannot operate without these cookies and they do not require your consent.
• Functional cookies: These cookies remember choices you make on the platform — such as your preferred game lobby view or notification settings — to provide a more personalised experience during and between sessions.
• Analytics cookies: win99ph uses anonymised, first-party analytics cookies to understand how players navigate and use the platform in aggregate. This data helps us identify and fix usability issues and improve game discovery. No individual player is identifiable from this analytics data.
• Security cookies: These cookies assist in detecting and preventing fraudulent activity, such as identifying unusual login patterns or duplicate account attempts.

You can manage or disable cookies at any time through your browser's settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your win99ph account and using the platform's core features.

win99ph does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and in each case only to the extent necessary for the specific purpose.

6.1 Payment Processors

To process deposits and withdrawals, win99ph shares relevant transaction and identity data with licensed payment processors — including GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, UnionBank, and cryptocurrency gateway providers. These processors act as independent personal information controllers for their own processing activities and are subject to their own privacy policies and applicable Philippine financial regulations.

6.2 KYC and Identity Verification Providers

win99ph may engage third-party identity verification service providers to assist with KYC processing. These providers are bound by strict data processing agreements that limit their use of your data to the provision of verification services for win99ph only.

6.3 Regulatory Authorities

win99ph is obligated to share certain player data with regulatory and law enforcement authorities upon lawful request. This includes PAGCOR as our licensing authority, the Anti-Money Laundering Council (AMLC) where required under the AMLA, the National Privacy Commission (NPC) in connection with any reportable personal data breach, and Philippine courts or law enforcement agencies pursuant to a valid legal order.

6.4 Game Providers

win99ph's platform integrates games from licensed third-party game providers. These providers may receive anonymised session and technical data necessary to deliver their games. win99ph does not share your name, contact details, or financial information with game providers.

6.5 Service Providers

win99ph engages carefully selected service providers for functions such as cloud infrastructure hosting, email delivery, and customer support tooling. All service providers are bound by data processing agreements that prohibit them from using win99ph player data for any purpose other than providing the contracted service.

win99ph retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law. The following retention periods apply:

• Account and identity data: Retained for the duration of your account's active status plus a minimum of five (5) years after account closure, in compliance with PAGCOR licensing conditions and AMLA recordkeeping obligations.
• Financial and transaction records: Retained for a minimum of five (5) years after the date of each transaction, in accordance with AMLA requirements applicable to PAGCOR-licensed operators.
• KYC documents: Retained for a minimum of five (5) years after the completion of the KYC process or account closure, whichever is later, consistent with PAGCOR and AMLC requirements.
• Customer support communications: Retained for three (3) years after the resolution of the relevant enquiry or complaint.
• Responsible gaming records: Retained for the duration of any active restriction plus five (5) years after the restriction ends, to prevent circumvention of self-exclusion obligations.
• Technical and analytics data: Retained in anonymised, aggregated form indefinitely for platform improvement purposes. Non-anonymised technical logs are retained for a maximum of twelve (12) months.
• Marketing consent records: Retained until you withdraw consent plus three (3) years thereafter, as evidence of the original consent.

Upon expiry of the applicable retention period, win99ph will securely delete or anonymise your personal data in accordance with our data destruction policy. Where deletion is not technically feasible (for example, in backup systems), the data will be isolated and protected from further active processing until it can be securely deleted.

win99ph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• TLS/SSL encryption for all data in transit between your device and win99ph's servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records.
• Multi-factor authentication (MFA) available and recommended for all player accounts, and mandatory for all win99ph administrative access.
• Role-based access controls (RBAC) that limit access to personal data strictly to personnel who require it for their job function.
• Comprehensive audit logging of all access to personal data by win99ph personnel, with regular reviews by our compliance team.
• Regular security vulnerability assessments and penetration testing conducted by independent security professionals.
• Incident response procedures that ensure prompt containment, investigation, and notification in the event of a personal data breach, including mandatory notification to the NPC within seventy-two (72) hours where required by law.

While win99ph takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a personal data breach that poses a real risk to you, win99ph will notify you promptly in accordance with our obligations under RA 10173 and NPC regulations.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to the personal data win99ph holds about you. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13.

• Right to be informed: You have the right to be informed of how your personal data is being collected, processed, and used. This Privacy Policy serves as win99ph's primary fulfilment of this obligation.
• Right of access: You have the right to request a copy of the personal data win99ph holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data win99ph holds about you. For basic account data such as your email address or mobile number, you may update these directly in your account settings.
• Right to erasure or blocking: You have the right to request deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, subject to win99ph's legal obligations to retain certain data under PAGCOR and AMLA requirements.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to other forms of processing based on legitimate interests, where your specific situation warrants it.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another personal information controller where technically feasible.
• Right to lodge a complaint: If you believe win99ph has not handled your personal data in accordance with RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph.

win99ph will respond to all data rights requests within thirty (30) days of receipt, as required by the NPC's implementing rules. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified of such an extension and the reason for it.

win99ph's platform is strictly for adults aged 21 years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. win99ph does not knowingly collect personal data from individuals under the age of 21. All registrations are subject to mandatory KYC age verification.

If win99ph becomes aware that personal data has been collected from an individual under 21 years of age, the relevant account will be immediately closed, all associated data deleted to the extent permitted by law, and any deposited funds returned to the verified payment source. Parents or guardians who believe their child may have registered on win99ph should contact our support team immediately via live chat.

The win99ph platform may contain informational references to third-party services such as PAGCOR, GCash, and Maya in the context of describing payment and regulatory relationships. win99ph does not control the privacy practices of any third-party platform or service. This Privacy Policy applies solely to data collected and processed by win99ph through the win99ph.net platform.

If you visit or interact with any third-party website or service in connection with using win99ph — for example, your GCash app to complete a deposit — the privacy practices of that third party will govern the data you provide to them. win99ph encourages you to review the privacy policies of any third-party services you use.

win99ph may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. Where changes are material — meaning they significantly affect how we process your personal data or your rights as a data subject — we will notify you by email to your registered address and/or by a prominent notice on the win99ph platform at least fourteen (14) days before the changes take effect.

Minor updates such as clarifications of existing practices, typographical corrections, or changes required by law may be made without advance notice, though the effective date at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of win99ph after the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not accept the updated Policy, you should stop using win99ph and may request account closure as described in our Terms and Conditions.

The current version of this Privacy Policy is always available at win99ph.net/privacy-policy. We recommend bookmarking this page and reviewing it periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way win99ph handles your personal data, please contact us through the following channels:

• 24/7 Live Chat: Available directly on the win99ph platform. This is the fastest way to reach us — average response time is under 5 minutes.
• Email: [email protected] — for privacy-related enquiries, please include "Privacy Request" in your subject line so your message is routed directly to our DPO team.

Our Data Protection Officer will acknowledge receipt of your request within three (3) business days and will provide a substantive response within thirty (30) days as required by NPC regulations.

If you are not satisfied with win99ph's handling of your privacy request or believe your data rights have been violated, you may escalate your complaint to the National Privacy Commission of the Philippines at privacy.gov.ph.