Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data processed by winzr, a PAGCOR-licensed online gaming platform operating in the Philippines. We recognize that privacy is fundamental to user trust, and we have implemented comprehensive data protection measures aligned with Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173), and international best practices.

This policy covers all interactions with winzr services, including account registration, gameplay, financial transactions, customer support communications, promotional activities, and website browsing. When you create a winzr account or use our platform, you entrust us with your personal information, and we take this responsibility seriously. Our commitment extends to maintaining transparency about data practices, providing meaningful choices about your information, and implementing robust security measures to protect your data from unauthorized access, disclosure, or misuse.

winzr operates as both the data controller (determining purposes and means of processing) and data processor (handling data on behalf of payment providers and game suppliers) depending on the specific data processing activity. Our primary establishment is in the Philippines, and we comply with PAGCOR regulatory requirements regarding player data protection, record-keeping, and reporting obligations.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a winzr account, we collect personal identification information necessary to verify your identity, comply with regulatory requirements, and provide our services. This information includes:

• Identity Information: Full legal name as it appears on government-issued identification, date of birth, nationality, and gender.
• Contact Information: Residential address, email address, mobile telephone number, and preferred communication language.
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers for account recovery.
• Financial Information: Payment method details including bank account numbers, e-wallet account identifiers (GCash, PayMaya), card information (when applicable), and transaction history.
• Verification Documents: Copies of government-issued identification documents (Philippine passport, driver's license, national ID, voter's ID), proof of address documents (utility bills, bank statements), and selfie photographs for facial verification.
• Communication Records: Customer support chat transcripts, email correspondence, telephone call recordings (with consent), and feedback submissions.

2.2 Information Collected Automatically

When you access and use winzr services, we automatically collect certain technical and usage information necessary for platform operation, security, and improvement:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information.
• Connection Data: IP address, geographic location (city/region level based on IP), internet service provider, connection timestamps, and network quality metrics.
• Usage Data: Pages visited, games played, betting patterns, session duration, click paths, feature utilization, and interaction patterns with our platform.
• Gaming Data: Bet amounts, game outcomes, win/loss records, bonus usage, wagering requirements progress, and gameplay statistics.
• Performance Data: Error logs, crash reports, loading times, and technical performance metrics used to optimize platform stability and user experience.

2.3 Information from Third-Party Sources

We may receive information about you from third-party sources including payment processors (transaction confirmation, fraud detection data), identity verification services (document authentication results, age verification), credit reference agencies (where legally permitted for anti-fraud purposes), and publicly available sources (sanctions lists, politically exposed persons databases) for regulatory compliance and fraud prevention.

Data Category	Collection Method	Purpose	Legal Basis
Identity Data	Account Registration	User Authentication, KYC Compliance	Legal Obligation, Contract Performance
Financial Data	Payment Processing	Transaction Processing, Fraud Prevention	Contract Performance, Legal Obligation
Gaming Data	Platform Usage	Service Delivery, Responsible Gaming	Contract Performance, Legitimate Interest
Technical Data	Automatic Collection	Security, Platform Optimization	Legitimate Interest

3. How We Use Your Information

3.1 Core Service Provision

The primary purpose for which winzr collects and processes your personal data is to provide, maintain, and improve our gaming services. This includes creating and managing your account, processing deposits and withdrawals, facilitating gameplay, calculating winnings and losses, issuing bonuses and promotions, maintaining transaction records, and providing customer support. Without this data, we cannot offer our services to you, as it forms the essential foundation of the contractual relationship between winzr and our users.

3.2 Regulatory Compliance and Legal Obligations

As a PAGCOR-licensed operator, winzr is subject to extensive regulatory requirements that mandate specific data collection, processing, and retention practices. We use your information to verify your age (ensuring you are at least 21 years old), confirm your identity through Know Your Customer (KYC) procedures, prevent money laundering and terrorist financing through Anti-Money Laundering (AML) checks, detect and prevent fraud, comply with tax reporting obligations, respond to law enforcement requests and court orders, maintain gaming records for regulatory audits, and report suspicious transactions to relevant Philippine authorities including the Anti-Money Laundering Council (AMLC).

3.3 Security and Fraud Prevention

winzr employs your data to maintain platform security and protect both our business and our users from fraudulent activities. We monitor account activity for unusual patterns indicative of unauthorized access or fraudulent behavior, verify the authenticity of identity documents submitted during registration or withdrawal requests, detect duplicate accounts and bonus abuse, identify and prevent collusion or cheating in games, protect against payment fraud and chargebacks, enforce our Terms and Conditions, and investigate suspected violations of our policies or applicable laws.

3.4 Responsible Gaming and Player Protection

We analyze gaming behavior patterns to identify signs of problem gambling and implement protective measures. This includes monitoring deposit frequency and amounts, tracking session duration and gameplay intensity, detecting unusual betting patterns, implementing deposit limits and cooling-off periods, providing self-exclusion functionality, and offering access to responsible gaming resources and support services. This processing is conducted in your vital interests and as part of our regulatory obligations to promote responsible gaming.

3.5 Marketing and Communications

With your consent, winzr may use your contact information to send promotional offers, bonuses, and marketing communications via email, SMS, push notifications, or in-platform messages. You maintain full control over marketing preferences and can opt out at any time through your account settings or by clicking unsubscribe links in marketing emails. We never share your information with third parties for their independent marketing purposes.

4. Data Sharing and Disclosure

4.1 Service Providers and Business Partners

winzr shares your personal data with carefully selected third-party service providers who assist us in delivering our services. These providers are contractually bound to process your data only according to our instructions and to maintain appropriate security measures. Categories of service providers include payment processors (GCash, PayMaya, bank partners), identity verification services, game providers and software suppliers, cloud hosting and data storage providers, customer support platforms, marketing and analytics services, and fraud detection and security services. We conduct due diligence on all service providers and ensure they meet our data protection standards.

4.2 Regulatory and Law Enforcement

We may disclose your information to regulatory authorities, law enforcement agencies, and government bodies when required by law or necessary to comply with legal obligations. This includes PAGCOR for licensing compliance and audits, the Anti-Money Laundering Council (AMLC) for suspicious transaction reports, law enforcement agencies in response to valid legal requests, courts and tribunals in connection with legal proceedings, tax authorities for tax reporting purposes, and other regulatory bodies with jurisdiction over online gaming in the Philippines. We will notify you of such disclosures where legally permitted.

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy proceeding, your personal data may be transferred to the acquiring or successor entity. We will notify you via email and platform announcement before your data is transferred and becomes subject to a different privacy policy. The successor entity will be required to honor the commitments made in this Privacy Policy or obtain your consent for any materially different data practices.

4.4 What We Never Do

winzr will never sell your personal information to third parties for monetary consideration. We do not share your data with advertisers for targeted advertising purposes beyond our own platform. We do not disclose your gaming activity, winnings, or losses to third parties except as required by law or necessary for service provision. We do not use your data in ways that are incompatible with the purposes for which it was collected without obtaining your explicit consent.

5. Security Measures and Protection

5.1 Technical Safeguards

winzr implements industry-leading technical security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes 256-bit SSL/TLS encryption for all data transmission between your device and our servers, end-to-end encryption for sensitive data at rest, secure database architecture with access controls and audit logging, regular security vulnerability assessments and penetration testing, intrusion detection and prevention systems, DDoS protection and traffic filtering, automated backup systems with geographic redundancy, and secure software development practices following OWASP guidelines.

5.2 Organizational Safeguards

Beyond technical measures, winzr maintains comprehensive organizational security practices including strict access controls limiting employee access to personal data on a need-to-know basis, mandatory security awareness training for all personnel handling user data, background checks for employees with data access privileges, confidentiality agreements binding all staff and contractors, incident response procedures for data breach detection and mitigation, regular security audits and compliance assessments, data protection impact assessments for new processing activities, and appointment of a Data Protection Officer responsible for privacy compliance oversight.

5.3 Data Breach Notification

In the unlikely event of a data breach affecting your personal information, winzr will notify you and the National Privacy Commission (NPC) without undue delay and, where feasible, within seventy-two (72) hours of becoming aware of the breach, as required by the Philippine Data Privacy Act. Notification will describe the nature of the breach, the categories and approximate number of affected users, the likely consequences, and the measures taken to address the breach and mitigate potential harm. We maintain comprehensive incident response plans regularly tested through tabletop exercises.

6. Data Retention and Storage

6.1 Retention Periods

winzr retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data category:

• Account Information: Retained for the duration of your active account plus five (5) years following account closure for regulatory compliance and potential dispute resolution.
• Transaction Records: Retained for ten (10) years following the transaction date as required by Philippine anti-money laundering regulations and tax laws.
• Identity Verification Documents: Retained for five (5) years following account closure or last verification as required by PAGCOR regulations.
• Communication Records: Retained for three (3) years for customer support quality assurance and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent or for three (3) years of inactivity, whichever occurs first.
• Technical Logs: Retained for six (6) months to two (2) years depending on log type, for security monitoring and system optimization.

6.2 Data Storage Locations

Your personal data is stored on secure servers located in the Philippines and in secure data centers in jurisdictions with adequate data protection standards. When data is stored or processed outside the Philippines, we ensure appropriate safeguards are in place through standard contractual clauses, binding corporate rules, or other legally recognized transfer mechanisms. All cross-border data transfers comply with Philippine Data Privacy Act requirements and NPC guidelines.

6.3 Secure Data Deletion

Upon expiration of applicable retention periods, or upon your request for data deletion (subject to legal retention obligations), winzr permanently destroys personal data using secure deletion methods that prevent recovery. This includes cryptographic erasure of encrypted data, physical destruction of storage media when decommissioned, and verification procedures to confirm complete deletion. Backup copies are deleted during the next scheduled backup rotation cycle.

7. Your Privacy Rights

7.1 Right to Access

You have the right to request access to the personal data we hold about you. Upon receiving a verified access request, winzr will provide you with a copy of your personal data in a structured, commonly used, and machine-readable format within fifteen (15) days. This includes information about the categories of data we process, the purposes of processing, the recipients with whom data has been shared, and the retention period. You can request access by contacting our Data Protection Officer through the contact methods provided in this policy.

7.2 Right to Rectification

You may correct inaccurate or incomplete personal information at any time by accessing your account settings or contacting customer support. For certain data fields requiring verification (such as name or date of birth), we may request supporting documentation to confirm the accuracy of corrections. We will complete rectification requests within ten (10) business days and notify any third parties with whom we have shared the data of the corrections.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected, when you withdraw consent (for consent-based processing), when you object to processing and there are no overriding legitimate grounds, or when data has been unlawfully processed. However, we may retain certain data where we have a legal obligation to do so (such as transaction records required by anti-money laundering laws) or where retention is necessary for legal claims. We will inform you of any data we cannot delete and the reasons for retention.

7.4 Right to Object

You have the right to object to processing of your personal data based on legitimate interests. Upon receiving an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for legal claims. You have an absolute right to object to processing for direct marketing purposes; we will immediately cease such processing upon receiving your objection.

7.5 Right to Restrict Processing

You may request restriction of processing (limiting how we use your data while retaining it) when you contest the accuracy of data (pending verification), when processing is unlawful but you prefer restriction over deletion, when we no longer need the data but you require it for legal claims, or when you have objected to processing pending verification of legitimate grounds. During restriction, we will store data but not further process it except with your consent or for legal claims.

7.6 Right to Data Portability

For data you have provided to us based on consent or contract, you have the right to receive that data in a structured, commonly used, machine-readable format and to transmit it to another controller. Where technically feasible, we can directly transmit your data to another controller at your request. Data portability applies to information you actively provided, such as registration details, but not to derived or inferred data.

7.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal. You can withdraw consent for marketing communications through account settings, unsubscribe links, or by contacting customer support. Upon consent withdrawal, we will cease the corresponding processing activities unless another legal basis applies.

7.8 Right to Lodge a Complaint

If you believe winzr has violated your data protection rights, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Contact details for the NPC are available at their official website. We encourage you to contact us first so we can attempt to resolve your concerns directly, but you have the unconditional right to approach the supervisory authority at any time.

8. Cookies and Tracking Technologies

8.1 Types of Cookies We Use

winzr uses cookies and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content. Cookie categories include:

• Essential Cookies: Strictly necessary for platform operation, enabling core functionality such as security, network management, and accessibility. These cannot be disabled.
• Performance Cookies: Collect anonymous information about how you use winzr, including pages visited, time spent, and errors encountered. This data helps us improve platform performance.
• Functional Cookies: Remember your preferences and choices (such as language, region, or display settings) to provide enhanced, personalized features.
• Marketing Cookies: Track your activity across winzr to deliver targeted promotional content and measure campaign effectiveness. These require your consent and can be disabled through cookie preferences.

8.2 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies, although this may affect platform functionality and user experience. You can access detailed cookie preference settings through our Cookie Consent Manager available in the footer of our website. Your cookie preferences are respected across all devices when you are logged into your account.

8.3 Third-Party Cookies

Some cookies may be placed by third-party service providers we use for analytics (to understand how users interact with our platform), fraud detection (to identify suspicious activity), and payment processing (to facilitate secure transactions). These third parties have their own privacy policies governing their use of data collected through cookies. We provide links to third-party privacy policies where applicable.

9. Third-Party Services

9.1 Third-Party Links

Our platform may contain links to third-party websites, services, or applications, including game providers, payment processors, and responsible gaming resources. winzr is not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party services you access through our platform. Providing your information to third-party sites is at your own discretion and risk.

9.2 Social Media Integration

If winzr implements social media features, these features may collect information about your interaction with them and may use cookies or other tracking technologies. Social media features are governed by the privacy policies of the companies providing them. We do not have control over the data collected by social media platforms and encourage you to review their privacy practices.

10. Contact and Data Protection Officer

10.1 How to Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact winzr through the following channels:

• Email: [email protected] (for general inquiries) or [email protected] (for privacy-specific matters)
• Live Chat: Available 24/7 through our platform for immediate assistance
• Privacy Request Form: Accessible through your account settings under "Privacy & Data"

10.2 Data Protection Officer

winzr has appointed a Data Protection Officer (DPO) responsible for overseeing privacy compliance, handling data subject requests, and serving as the primary contact point for data protection matters. You may contact our DPO directly regarding any privacy concerns, data access requests, or complaints about our data handling practices. The DPO conducts regular privacy audits, coordinates with the National Privacy Commission, and ensures winzr maintains adherence to applicable data protection laws.

10.3 Response Timeframes

winzr strives to respond to all privacy-related inquiries and requests promptly. Standard response timeframes are fifteen (15) days for access requests, ten (10) business days for rectification requests, and thirty (30) days for complex requests requiring extensive review. If we require additional time, we will notify you of the reason for the delay and provide an expected completion date. Urgent security matters receive immediate attention outside normal timeframes.

11. Children's Privacy

winzr services are intended exclusively for individuals aged twenty-one (21) years or older. We do not knowingly collect, use, or disclose personal information from individuals under the legal gambling age in the Philippines. Our registration process includes age verification measures designed to prevent minors from accessing our platform. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete such information from our systems and terminate the associated account. Parents or guardians who believe their child has provided personal information to winzr should contact us immediately.

12. Changes to This Privacy Policy

winzr reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through email notification to your registered email address, prominent platform announcements, or direct notification upon login. The "Last Updated" date at the top of this policy indicates when it was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of winzr services following notification of changes constitutes your acceptance of the revised policy.

13. International Data Transfers

While winzr primarily operates within the Philippines, certain service providers we engage may process data in jurisdictions outside the Philippines. When we transfer your personal data internationally, we ensure adequate safeguards are in place through mechanisms approved under the Philippine Data Privacy Act, including standard contractual clauses approved by the National Privacy Commission, adequacy decisions recognizing equivalent data protection standards in the recipient jurisdiction, or binding corporate rules for intra-group transfers. We conduct transfer impact assessments to verify that international transfers do not undermine the protection of your data.

14. Automated Decision-Making and Profiling

winzr may use automated decision-making and profiling for specific purposes including fraud detection and prevention, responsible gaming monitoring and intervention, bonus eligibility assessment, and risk-based identity verification. These automated processes help us protect users and comply with regulatory obligations. You have the right to obtain human intervention, express your point of view, and contest automated decisions that produce legal effects or similarly significantly affect you. If you wish to challenge an automated decision, contact our customer support team who will arrange for manual review by qualified personnel.

By using winzr services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.