windph is committed to protecting the personal data of every Filipino player who uses our platform. This Privacy Policy explains exactly what data we collect, why we collect it, how we use and safeguard it, who we share it with, how long we keep it, and what your rights are under Philippine law.
1.1 This Privacy Policy describes how windph collects, uses, discloses, stores, and protects the personal information of individuals who access the windph website at windph.org, register a player Account, place wagers, transact financially, or interact with windph's customer support or promotional services.
1.2 windph operates as an online casino and sports betting platform serving Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and all other areas of the country. All personal data processing described in this policy is conducted in the Philippines or by processors operating under Philippine law or equivalent data protection standards.
1.3 This Privacy Policy should be read in conjunction with windph's Terms & Conditions, which form the broader contractual framework governing your use of the platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a data privacy matter, this Privacy Policy prevails.
1.4 windph may update this Privacy Policy from time to time. The effective date and version number at the top of this document indicate the current revision. Material changes will be communicated to registered Players through the windph platform interface or via SMS to the registered mobile number.
2.1 For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, windph is the Personal Information Controller (PIC) with respect to all personal data collected and processed in connection with the windph platform.
2.2 As Personal Information Controller, windph determines the purposes for which, and the means by which, personal data is processed. windph is accountable for ensuring that all personal data processing activities comply with the Data Privacy Act, the National Privacy Commission's (NPC) rules and issuances, and applicable PAGCOR regulatory requirements.
2.3 windph has designated a Data Protection Officer (DPO) who is responsible for overseeing windph's data protection program, monitoring compliance with this Privacy Policy and applicable law, acting as the point of contact for data subjects exercising their rights, and coordinating with the National Privacy Commission where required.
2.4 Contact information for windph's Data Protection Officer is provided in Section 15 of this Privacy Policy.
3.1 windph collects personal data that is necessary for platform operation, regulatory compliance, and the delivery of gaming and payment services to Filipino players. The categories of personal data windph processes are described below.
| Category | Data Elements | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, government ID type and number, nationality, selfie photograph | KYC verification, age confirmation (21+), PAGCOR compliance, AML obligations |
| Contact Data | Philippine mobile number, email address | Account access, OTP delivery, account communications, support contact |
| Financial Data | GCash number, Maya account reference, bank account name (for withdrawal verification), transaction history, deposit and withdrawal amounts | Payment processing, withdrawal verification, AML monitoring, fraud prevention |
| Gaming Activity Data | Wager history, game sessions, bet amounts, win/loss records, bonus usage, session duration, game category preferences | Platform operation, responsible gaming monitoring, bonus administration, dispute resolution |
| Technical Data | IP address, device type and model, operating system, browser type and version, session identifiers, login timestamps | Platform security, fraud detection, multi-account prevention, technical support |
| Usage Data | Pages visited, features accessed, click patterns, search queries within the platform, time spent per section | Platform improvement, user experience optimisation, feature development |
| Communications Data | Customer support chat transcripts, complaint records, feedback submissions | Dispute resolution, quality assurance, regulatory record-keeping |
| Responsible Gaming Data | Deposit limits set, self-exclusion status, cooling-off periods, session limit settings, referral to support programs | Responsible gaming program operation, PAGCOR compliance, player welfare |
3.2 windph does not collect sensitive personal information (as defined under the Data Privacy Act, including racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or criminal records) beyond what is strictly necessary for identity verification and AML compliance as required by PAGCOR regulations and Philippine law.
3.3 windph does not collect credit card data or full bank account numbers. All financial transactions are processed through regulated Philippine payment processors (GCash, Maya, BPI, BDO, Metrobank, and others) which maintain their own data protection frameworks and PCI-DSS compliance independently of windph.
windph collects personal data through the following means:
5.1 windph processes personal data only where a valid legal basis exists under the Data Privacy Act of 2012. The primary legal bases for windph's data processing activities are:
5.2 windph does not rely on consent as the legal basis for processing that is required for regulatory compliance or that is necessary for the performance of the windph account contract. Withdrawing consent in these areas would prevent windph from providing the full service.
6.1 windph uses personal data for the following purposes:
6.2 windph does not use automated individual decision-making (including profiling) that produces legal or similarly significant effects for Players, except in the context of automated fraud detection and AML monitoring as required by law. Where such automated processing results in a significant decision affecting your Account, you have the right to request human review as described in Section 11.
windph engages third-party service providers who process personal data on windph's behalf and under windph's instructions, subject to data processing agreements that impose obligations equivalent to windph's own privacy standards. These include:
windph discloses personal data to Philippine regulatory authorities and law enforcement agencies where required by law, court order, PAGCOR directive, Anti-Money Laundering Council (AMLC) reporting obligation, or National Privacy Commission request. windph will notify you of such disclosures to the extent permitted by applicable law.
In the event of a merger, acquisition, or sale of windph's business or assets, personal data held by windph may be transferred to the acquiring entity, subject to that entity's commitment to honour this Privacy Policy or provide an equivalent level of protection.
windph does not disclose your personal data to: third-party advertisers or marketing platforms; social media companies; data brokers; or any party for purposes other than those described in this Section 7.
8.1 windph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and contractual obligations. The following retention periods apply:
8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification, in accordance with windph's data disposal procedures.
8.3 Where personal data is the subject of an active dispute, regulatory investigation, or legal proceeding, retention is extended until the matter is fully resolved, even if the standard retention period would otherwise have expired.
9.1 windph implements organisational and technical security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction.
9.4 No data transmission or storage system is completely immune to security risk. In the event of a personal data breach that is likely to result in significant risk or harm to your rights and freedoms, windph will notify you and the National Privacy Commission as required by law.
10.1 windph uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, maintain your authenticated session, and improve the user experience. The types of cookies used by windph are:
10.2 windph does not use advertising or third-party marketing cookies. No personal data collected through windph's cookies is shared with advertising platforms or data brokers.
10.3 You may configure your browser to block or delete cookies. However, disabling strictly necessary cookies will prevent the windph platform from functioning correctly and will terminate your active login sessions. windph is not responsible for platform functionality issues resulting from cookie blocking by a Player's browser settings.
10.4 Cookie data is retained for the duration of your browser session (session cookies) or for up to twelve (12) months (persistent cookies), after which they expire automatically.
11.1 Under the Philippine Data Privacy Act of 2012 and the National Privacy Commission's implementing regulations, you have the following rights with respect to your personal data held by windph:
11.2 To exercise any of these rights, contact windph's Data Protection Officer using the details in Section 15. windph will respond to your request within fifteen (15) business days. Complex requests may require up to thirty (30) days, with notice provided to you of the extension and reason.
11.3 windph may need to verify your identity before processing a data subject rights request to ensure that personal data is not disclosed to or modified by an unauthorised third party. Identity verification for rights requests is conducted using your registered mobile number and KYC data.
11.4 Where a request to erase or restrict data relates to data that windph is required to retain under PAGCOR regulations, AML law, or other legal obligations, windph will inform you of the applicable legal retention requirement and the period during which erasure is not possible.
12.1 windph does not knowingly collect or process personal data from any individual under the age of twenty-one (21). The windph platform is not directed at, designed for, or marketed to minors.
12.2 Date of birth is collected during registration and verified through government-issued ID during KYC. Any Account for which the registered holder is found to be under 21 years of age will be immediately and permanently suspended. All personal data associated with such an Account will be retained only to the extent required for regulatory reporting and AML compliance, then securely deleted.
12.3 If you have reason to believe that windph has inadvertently collected personal data from an individual under the age of 21, please contact windph's Data Protection Officer immediately using the contact details in Section 15 so that appropriate action can be taken promptly.
13.1 The windph platform may display content sourced from certified third-party game studios (including JILI Games, Evolution Gaming, Pragmatic Play, and PG Soft). These game content providers operate within their own data protection frameworks and regulatory environments. windph has data processing agreements in place with all game studio partners to govern any personal data shared for session delivery purposes.
13.2 windph's platform does not contain links to external websites, social media platforms, or third-party services beyond the game content delivered within the secure windph session environment. windph is not responsible for the privacy practices of any third-party entities whose content may be accessible through game interfaces.
13.3 This Privacy Policy governs only windph's own data processing activities. Players should review the privacy policies of GCash, Maya, and any other payment service they use in conjunction with windph, as these are independent services with their own data protection practices.
14.1 windph reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, new legal requirements, PAGCOR regulatory updates, or NPC issuances. The version number and effective date at the top of this document indicate the current applicable revision.
14.2 When windph makes material changes to this Privacy Policy — changes that affect the basis on which your data is processed, the parties to whom it is disclosed, or your rights — windph will notify registered Players via the platform interface and/or via SMS to the registered mobile number at least seven (7) days before the changes take effect.
14.3 Your continued use of the windph platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated policy. If you do not accept the changes, you should request Account closure as described in windph's Terms & Conditions before the effective date of the revision.
14.4 The current version of this Privacy Policy is always accessible at windph.org/privacy-policy. Prior versions are available upon written request to windph's Data Protection Officer.
15.1 windph has designated a Data Protection Officer (DPO) to oversee compliance with this Privacy Policy and the Data Privacy Act. The DPO serves as the primary contact for all data subject rights requests, privacy complaints, and data protection enquiries.
15.2 You may contact windph's Data Protection Officer through the following channels:
15.3 windph will acknowledge receipt of all data privacy requests and complaints within forty-eight (48) hours and will endeavour to respond fully within fifteen (15) business days.
15.4 If you are not satisfied with windph's response to a data privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC), the supervisory authority responsible for enforcing the Data Privacy Act. The NPC's complaint and advisory processes are publicly available through its official channels.
Six concrete data privacy commitments that windph makes to every Filipino player on the platform — not just legal language, but real standards.
windph does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing platforms. Data disclosures are limited to service providers who support platform operation and regulatory bodies as required by Philippine law — nothing more.
windph's privacy framework is built around the Data Privacy Act of 2012 (RA 10173) and the National Privacy Commission's implementing rules. A designated Data Protection Officer oversees compliance, handles rights requests, and coordinates with the NPC where required.
All data transmitted between your device and windph uses 256-bit TLS encryption — the same standard used by BSP-regulated banks and GCash's transaction layer. KYC documents and financial records are encrypted at rest using AES-256.
You have the right to access, correct, delete, restrict, object to, and port your personal data held by windph. You can also withdraw consent and file a complaint with the NPC. Contact windph's DPO at any time — requests are acknowledged within 48 hours.
windph retains personal data only for as long as legally required or operationally necessary. Gaming data is deleted after three years post-closure; financial and KYC records are kept five years per AML law. Data past its retention window is securely destroyed.
If a personal data breach is likely to result in risk or harm to you, windph will notify both you and the National Privacy Commission within the timeframes required by the Data Privacy Act — not after the fact, and not only when required by external pressure.
windph's Privacy Policy is built on Philippine law, PAGCOR compliance, and a genuine commitment to treating your personal data with care. Your information is collected only for what's needed, stored securely, never sold, and protected by your rights under RA 10173. One windph account gives you access to 700+ certified games, live PBA betting, and GCash withdrawals in under 15 minutes. Must be 21 or older to play.