windph Privacy Policy

1. Introduction

1.1 Scope of This Policy

This Privacy Policy applies to all personal information collected by windph through our website (windph.cam), mobile applications, customer service channels, and any other digital platforms operated by windph. This policy governs how we collect, use, disclose, transfer, store, and protect your personal data in accordance with Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and guidelines issued by the National Privacy Commission (NPC).

1.2 Applicability

This Privacy Policy applies to all windph users regardless of their account status, including: (a) registered account holders; (b) individuals who have created accounts but not completed verification; (c) visitors who browse our website without registering; (d) former account holders whose accounts have been closed; and (e) individuals who contact windph customer support. By accessing any windph platform or service, you agree to the terms of this Privacy Policy.

1.3 Privacy by Design

windph is committed to implementing privacy by design principles in all aspects of our operations. We incorporate data protection considerations into our technology development, business processes, and service delivery from inception. Our systems are designed to minimize data collection, maximize user control, ensure transparency, and maintain the highest security standards for all personal information entrusted to us.

2. Data Controller Information

2.1 Data Controller Identity

windph, operating under its registered business name and PAGCOR license, serves as the data controller responsible for determining the purposes and means of processing your personal data. As data controller, windph is accountable for ensuring compliance with all applicable data protection laws and maintaining appropriate technical and organizational measures to protect your information.

2.2 Data Protection Officer

windph has appointed a qualified Data Protection Officer (DPO) in compliance with National Privacy Commission requirements. Our DPO oversees data protection strategy, monitors compliance with privacy laws, serves as the primary contact for data subjects and regulatory authorities, and conducts regular privacy impact assessments. The DPO can be reached at: [email protected].

2.3 Philippine Registration

windph is registered with the National Privacy Commission as a personal information controller under the Philippine Data Privacy Act. Our NPC registration number is available upon request. We maintain our principal data processing facilities within the Philippines and comply with all NPC reporting, notification, and breach disclosure requirements.

3. Information We Collect

3.1 Account Registration Information

When you create a windph account, we collect the following personal information:

• Identity Information: Full legal name, date of birth, nationality, gender
• Contact Information: Email address, mobile phone number, residential address
• Account Credentials: Username, password (stored in encrypted form)
• Verification Documents: Government-issued ID (Philippine driver's license, passport, or Postal ID), proof of address documents, selfie verification photos
• Financial Information: Payment method details (e-wallet account names, bank account information for verification purposes)

3.2 Transactional Data

windph records all financial transactions conducted through your account, including:

• Deposit amounts, dates, times, and payment methods used
• Withdrawal requests, amounts, processing status, and destination payment methods
• Bonus claims, wagering progress, and redemption history
• Game wagers, outcomes, wins, losses, and session details
• Account balance changes and transaction references

3.3 Technical and Usage Data

When you access windph services, we automatically collect technical information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers
• Connection Data: IP address, internet service provider, approximate geolocation based on IP address
• Usage Data: Pages viewed, games played, session duration, click patterns, navigation paths
• Performance Data: Loading times, error reports, system crashes, technical diagnostics

3.4 Communications

We retain records of all communications between you and windph, including:

• Live chat transcripts with customer support agents
• Email correspondence sent to or received from windph addresses
• Phone call recordings (where legally permitted and disclosed)
• In-app messages and notifications
• Feedback, complaints, and survey responses

3.5 Behavioral and Preference Data

To personalize your experience and comply with responsible gaming obligations, windph collects:

• Gaming preferences and favorite games
• Deposit and play patterns
• Marketing communication preferences
• Responsible gaming limit settings
• Self-exclusion requests and cool-off periods

4. How We Use Your Data

4.1 Primary Processing Purposes

windph processes your personal information for the following purposes:

• Account Management: Creating, maintaining, and administering your windph account, authenticating your identity, and managing account security
• Service Provision: Enabling gameplay, processing deposits and withdrawals, managing bonuses and promotions, providing customer support
• Regulatory Compliance: Verifying age and identity, complying with PAGCOR requirements, conducting anti-money laundering (AML) checks, reporting to regulatory authorities
• Fraud Prevention: Detecting and preventing fraudulent activities, account abuse, bonus exploitation, collusion, and other prohibited behaviors
• Responsible Gaming: Implementing deposit limits, monitoring play patterns for problem gambling indicators, enforcing self-exclusion, providing responsible gaming resources
• Communication: Sending account notifications, transaction confirmations, security alerts, customer support responses, and promotional offers (with consent)
• Platform Improvement: Analyzing usage patterns, conducting A/B testing, improving user experience, developing new features, optimizing performance
• Legal Obligations: Responding to lawful requests from authorities, enforcing our Terms & Conditions, defending legal claims, protecting windph's rights and property

4.2 Marketing Communications

If you have consented to receive marketing communications, windph may send you promotional emails, SMS messages, push notifications, or in-app messages about new games, bonuses, tournaments, and special offers. You may withdraw your consent at any time through your account settings or by contacting our Data Protection Officer. Withdrawal of marketing consent does not affect essential account-related communications.

4.3 Automated Decision-Making

windph employs automated systems for certain decision-making processes, including: (a) fraud detection algorithms that may flag suspicious accounts or transactions; (b) bonus eligibility calculations based on wagering requirements; (c) risk-based verification processes that determine additional documentation requirements; and (d) responsible gaming alerts triggered by play pattern analysis. You have the right to request human review of any automated decision that significantly affects you.

5. Legal Basis for Processing

5.1 Contractual Necessity

Processing your personal information is necessary for windph to fulfill our contractual obligations to you under our Terms & Conditions. This includes processing required to: (a) create and maintain your account; (b) provide gaming services; (c) process deposits and withdrawals; (d) manage bonuses and promotions; and (e) provide customer support. Without this data processing, windph cannot deliver the services you have requested.

5.2 Legal Obligations

windph is legally required to process certain personal information to comply with: (a) PAGCOR regulations governing online gaming operations; (b) Anti-Money Laundering Act of 2001 (AMLA) and related regulations requiring customer due diligence and transaction monitoring; (c) Philippine Data Privacy Act reporting and notification requirements; (d) tax laws requiring record-keeping of financial transactions; and (e) court orders, subpoenas, or lawful requests from Philippine authorities.

5.3 Legitimate Interests

windph processes personal data based on legitimate business interests including: (a) fraud prevention and security monitoring to protect our platform and users; (b) improving our services through usage analysis and testing; (c) maintaining business records for accounting and audit purposes; (d) enforcing our Terms & Conditions and protecting our legal rights; and (e) ensuring platform stability and technical functionality. We balance these interests against your privacy rights and implement appropriate safeguards.

5.4 Consent

For processing activities that require consent under Philippine law, windph obtains your explicit, freely-given, specific, informed, and unambiguous consent. This includes: (a) marketing communications; (b) non-essential cookies and tracking technologies; (c) sharing data with third parties beyond what is necessary for service provision; and (d) processing sensitive personal information where required by law. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

6. Data Sharing and Disclosure

6.1 Service Providers

windph engages trusted third-party service providers to support our operations. We share personal information only to the extent necessary for these providers to perform their functions:

• Payment Processors: GCash, Maya, and banking partners to process deposits and withdrawals
• Game Providers: Software vendors supplying casino games, slots, and live dealer platforms
• Identity Verification Services: KYC (Know Your Customer) providers for document verification
• Cloud Hosting Providers: Secure data storage and server infrastructure
• Customer Support Platforms: Live chat, email, and ticketing system providers
• Analytics Services: Website analytics and performance monitoring tools

All service providers are contractually obligated to maintain data confidentiality, implement appropriate security measures, process data only according to windph's instructions, and comply with Philippine data protection laws.

6.2 Regulatory Authorities

windph discloses personal information to Philippine regulatory authorities as required by law, including:

• PAGCOR: Gaming activity reports, suspicious transaction reports, compliance documentation
• Anti-Money Laundering Council (AMLC): Covered transaction reports, suspicious transaction reports
• National Privacy Commission: Data breach notifications, privacy impact assessments upon request
• Bureau of Internal Revenue (BIR): Tax-related transaction information
• Law Enforcement: Information requested through valid legal processes (subpoenas, court orders)

6.3 Business Transfers

In the event of a merger, acquisition, corporate reorganization, or sale of substantially all windph assets, your personal information may be transferred to the acquiring entity. windph will notify you via email and prominent website notice before your data is transferred and becomes subject to a different privacy policy. You will have the opportunity to delete your account and data before the transfer is completed.

6.4 No Selling of Personal Data

windph does not sell, rent, or trade your personal information to third parties for their marketing purposes. We do not share your data with advertisers, data brokers, or other commercial entities beyond what is necessary to provide windph services and comply with legal obligations.

7. Data Security Measures

7.1 Technical Security

windph implements industry-standard technical security measures to protect your personal information:

• Encryption: All data transmission uses TLS 1.3 encryption. Sensitive data is encrypted at rest using AES-256 encryption.
• Access Controls: Role-based access controls limit employee access to personal data on a need-to-know basis. Multi-factor authentication required for administrative access.
• Network Security: Firewalls, intrusion detection systems, and regular security audits protect against unauthorized access.
• Secure Development: Code reviews, vulnerability scanning, and penetration testing conducted regularly.
• Data Backups: Regular encrypted backups stored in geographically separate secure facilities.

7.2 Organizational Security

windph maintains comprehensive organizational security policies and procedures:

• Employee training on data protection, privacy laws, and security best practices
• Confidentiality agreements required for all employees and contractors
• Background checks conducted for personnel with access to personal data
• Incident response procedures for data breaches and security events
• Regular privacy impact assessments for new processing activities
• Third-party security audits and compliance certifications

7.3 Data Breach Response

In the unlikely event of a data breach involving your personal information, windph will: (a) investigate the breach and contain the incident within 24 hours of discovery; (b) notify the National Privacy Commission within 72 hours as required by law; (c) notify affected users via email within 5 days if the breach poses a real risk of serious harm; (d) provide information about the nature of the breach, data categories affected, and steps taken to mitigate harm; and (e) offer appropriate remedies such as credit monitoring or identity protection services if warranted.

8. Data Retention

8.1 Retention Principles

windph retains personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on data category and regulatory requirements.

8.2 Active Account Data

While your windph account remains active, we retain all account information, transaction history, and usage data to provide continuous service and maintain account security. You can request deletion of specific non-essential data through your account settings.

8.3 Closed Account Data

After account closure, windph retains personal information for the following periods:

• Identity and verification documents: 7 years (PAGCOR and AMLA requirement)
• Financial transaction records: 7 years (tax and regulatory requirement)
• Gaming activity logs: 5 years (regulatory requirement)
• Customer support communications: 3 years (dispute resolution)
• Technical logs: 2 years (security and fraud prevention)
• Marketing data: Deleted immediately upon account closure or consent withdrawal

8.4 Anonymization

After mandatory retention periods expire, windph either deletes personal information or anonymizes it for statistical and analytical purposes. Anonymized data cannot be linked back to individual users and is not subject to data protection laws.

9. Your Privacy Rights

9.1 Right to Access

You have the right to obtain confirmation whether windph processes your personal data and to access such data. You may request: (a) a copy of all personal information we hold about you; (b) information about processing purposes, data categories, recipients, and retention periods; and (c) details about data sources. Request access through your account dashboard or by contacting our Data Protection Officer. We will provide the information within 15 days of your request.

9.2 Right to Rectification

If you believe any personal information we hold about you is inaccurate or incomplete, you have the right to request correction or completion. You can update most information directly through your account settings. For information that cannot be self-updated (such as identity documents), contact customer support with appropriate documentation supporting the requested changes.

9.3 Right to Erasure

Under certain circumstances, you have the right to request deletion of your personal data. This right applies when: (a) data is no longer necessary for the purposes it was collected; (b) you withdraw consent and there is no other legal basis for processing; (c) you object to processing and there are no overriding legitimate grounds; or (d) data has been unlawfully processed. Note that windph may refuse erasure requests if retention is required by Philippine law or necessary to defend legal claims.

9.4 Right to Restriction

You may request that windph restrict processing of your personal data in specific situations: (a) while we verify the accuracy of disputed data; (b) when processing is unlawful but you prefer restriction over deletion; (c) when we no longer need the data but you require it to establish or defend legal claims; or (d) while we verify whether our legitimate interests override your interests following an objection.

9.5 Right to Data Portability

You have the right to receive personal data you provided to windph in a structured, commonly used, machine-readable format. You may also request that we transmit this data directly to another controller where technically feasible. This right applies to data processed based on consent or contract performance.

9.6 Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. windph will cease processing unless we demonstrate compelling legitimate grounds that override your interests or we need the data to establish or defend legal claims. Marketing objections are always honored without exception.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. You can withdraw consent through account settings or by contacting our Data Protection Officer.

9.8 Right to Lodge a Complaint

If you believe windph has violated your privacy rights or Philippine data protection laws, you have the right to lodge a complaint with the National Privacy Commission:

National Privacy Commission
5th Floor, Philippine International Convention Center
Vicente Sotto St., Pasay City, Metro Manila
Email: [email protected]
Phone: +63 2 8234 2228

10. Cookies and Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit windph. They help us recognize your device, remember your preferences, and provide a personalized experience. windph uses both session cookies (deleted when you close your browser) and persistent cookies (remain until expiration or manual deletion).

10.2 Types of Cookies We Use

• Essential Cookies: Required for basic site functionality, account authentication, security, and fraud prevention. These cannot be disabled.
• Performance Cookies: Collect anonymous information about how you use windph to help us improve the platform.
• Functional Cookies: Remember your preferences, language settings, and personalization choices.
• Analytics Cookies: Track visitor behavior, page views, and engagement metrics (Google Analytics).

10.3 Managing Cookies

You can control cookie settings through your browser preferences. Disabling non-essential cookies may affect your ability to use certain windph features. Browser help sections provide instructions for managing cookies. Note that some third-party cookies (such as those from payment processors) are necessary for service functionality and cannot be controlled through windph settings.

10.4 Third-Party Tracking

windph uses Google Analytics to understand how users interact with our platform. Google Analytics collects anonymous information about page visits, session duration, and traffic sources. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.

11. International Data Transfers

11.1 Philippine Data Processing

windph primarily stores and processes personal data within the Philippines using Philippine-based data centers and cloud infrastructure. This ensures compliance with National Privacy Commission requirements and provides optimal service performance for Filipino users.

11.2 Cross-Border Transfers

In limited circumstances, windph may transfer personal data outside the Philippines to service providers located in other jurisdictions. This includes: (a) cloud backup services maintaining geographically redundant data copies; (b) international payment networks processing transactions; and (c) game providers hosting their platforms in multiple regions for performance optimization.

11.3 Transfer Safeguards

When cross-border transfers are necessary, windph ensures adequate protection through: (a) contractual obligations requiring recipients to maintain Philippines-equivalent data protection standards; (b) standard contractual clauses approved by the National Privacy Commission; (c) verification that recipient countries have adequate data protection laws; and (d) technical measures such as encryption during transit and storage. You may request information about specific transfer mechanisms by contacting our Data Protection Officer.

12. Children's Privacy

12.1 Age Restriction

windph services are strictly prohibited for individuals under 21 years of age in compliance with Philippine gaming laws and PAGCOR regulations. windph does not knowingly collect personal information from minors. Our registration process includes age verification mechanisms designed to prevent underage access.

12.2 Parental Notification

If a parent or guardian becomes aware that their child under 21 has provided personal information to windph, please contact our Data Protection Officer immediately at [email protected]. Upon verification, we will promptly delete all associated data, close the account, void all transactions, and implement additional preventive measures.

12.3 Age Verification Process

windph employs multiple age verification layers: (a) self-declaration during registration; (b) date of birth validation against government-issued identification; (c) document verification by trained specialists; (d) automated checks against identification databases where available; and (e) behavioral monitoring for indicators of underage use. Suspected underage accounts are immediately flagged for manual review and suspended pending verification.

13. Privacy Policy Updates

13.1 Right to Amend

windph reserves the right to update this Privacy Policy to reflect changes in our data processing practices, legal requirements, business operations, or technological capabilities. We will not reduce your rights under this Privacy Policy without your explicit consent.

13.2 Notification of Changes

When material changes are made to this Privacy Policy, windph will: (a) update the "Last Updated" date at the top of this document; (b) send email notification to your registered address; (c) display a prominent notice on our homepage; and (d) require acknowledgment of changes upon your next login for substantial modifications affecting your rights.

13.3 Review Responsibility

You are responsible for periodically reviewing this Privacy Policy to stay informed about how windph protects your personal information. Continued use of windph services after policy changes constitutes acceptance of the updated terms. If you do not agree to revised terms, you must stop using windph services and may request account closure and data deletion.

14. Contact Information

14.1 Data Protection Officer

For privacy-related inquiries, data subject rights requests, or concerns about how windph processes your personal information, contact our Data Protection Officer:

Data Protection Officer
windph Online Casino
Email: [email protected]
Subject Line: "Privacy Inquiry - [Your Username]"
Response Time: Within 15 days of receipt

14.2 Customer Support

For general account questions or technical support:

• Live Chat: Available 24/7 through windph.cam
• Email: [email protected]

14.3 Regulatory Authority

National Privacy Commission complaints and inquiries:

Email: [email protected]
Phone: +63 2 8234 2228
Website: privacy.gov.ph