winwin777 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how winwin777 ("we," "us," or "the Company") collects, uses, stores, and discloses personal information about individuals ("you," "Player," or "User") who access or use the winwin777 website, mobile platform, and related services (collectively, the "Platform").

winwin777 acts as the Personal Information Controller (PIC) in respect of personal data collected through the Platform, as defined under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations ("DPA").

By registering an account on the winwin777 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy.

2. Personal Data We Collect

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Nationality and country of residence
• Residential address (including barangay, city/municipality, province)
• Mobile number and email address
• Username and encrypted password

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys National ID)
• Proof of address documents (e.g., utility bill, bank statement)
• Selfie or liveness check images where required for enhanced verification
• Proof of payment method ownership

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references
• GCash or PayMaya account reference numbers (masked)
• Bank account details (masked, for withdrawal processing only)
• Bonus and promotional credit history

2.4 Gaming Activity Data

• Game session logs, including games played, wager amounts, outcomes, and session duration
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Customer support interaction records

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Platform usage logs and error reports

3. How We Collect Your Data

winwin777 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically: Through cookies, web beacons, and similar tracking technologies when you access and interact with the Platform.
• From third parties: From identity verification service providers, payment processors (such as GCash and PayMaya), fraud detection services, and, where applicable, from publicly available sources for AML/KYC compliance purposes.

4. How We Use Your Personal Data

winwin777 uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your winwin777 account, including processing deposits, withdrawals, and bonus credits.
• Identity verification: To verify your identity and age (21+) in compliance with Philippine gaming regulations and KYC requirements.
• Service delivery: To provide access to games, live dealer tables, sportsbook, and all other Platform features.
• Responsible gaming: To monitor gaming activity, enforce responsible gaming limits you have set, and identify patterns that may indicate problem gambling behavior.
• Fraud prevention & security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, and other illegal activity.
• Legal compliance: To comply with applicable Philippine laws, including the Data Privacy Act, Anti-Money Laundering Act (AMLA), and gaming regulations.
• Customer support: To respond to your enquiries, complaints, and support requests.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.
• Platform improvement: To analyze usage patterns, troubleshoot technical issues, and improve the performance and features of the Platform.

5. Legal Basis for Processing

winwin777 processes your personal data on the following legal bases under the Philippine Data Privacy Act:

• Contractual necessity: Processing is necessary to perform the contract between you and winwin777 (i.e., to provide the Platform services you have registered for).
• Legal obligation: Processing is required to comply with applicable laws, including KYC/AML obligations, gaming regulations, and tax reporting requirements.
• Legitimate interests: Processing is necessary for winwin777's legitimate interests in fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, processing is based on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

winwin777 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, and partner banks, to process deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity and comply with regulatory requirements.
• Game content providers: Licensed game studios and live dealer platform operators who supply games available on the winwin777 Platform. These providers may receive session data necessary to deliver game content.
• IT and hosting providers: Cloud infrastructure and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Regulatory authorities: Philippine government agencies, including PAGCOR and the Anti-Money Laundering Council (AMLC), where disclosure is required by law or regulatory order.
• Law enforcement: Where required by a valid court order, subpoena, or other legal process under Philippine law.

All third-party service providers who process personal data on behalf of winwin777 are bound by contractual data processing agreements that require them to process data only as instructed by winwin777 and to implement appropriate security measures.

7. Cookies & Tracking Technologies

winwin777 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session, and analyze usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without affecting core functionality (e.g., session authentication, security tokens).
• Functional cookies: Remember your preferences such as language settings and responsible gaming tool configurations.
• Analytics cookies: Collect aggregated, anonymized data about how players use the Platform to help us improve performance and user experience.
• Marketing cookies: Used to deliver relevant promotional content within the Platform. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform.

8. Data Retention

winwin777 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law. Specific retention periods are as follows:

• Account and KYC data: Retained for a minimum of 5 years after account closure, in compliance with AMLA record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming activity logs: Retained for 2 years from the date of each session, unless required for longer retention by a regulatory investigation.
• Customer support records: Retained for 2 years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus 1 year thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with winwin777's data disposal procedures.

9. Data Security

winwin777 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• All data transmitted between your device and the winwin777 Platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption.
• Passwords are stored using industry-standard one-way hashing algorithms. winwin777 staff cannot view your password in plain text.
• Access to personal data is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access controls.
• Two-factor authentication (2FA) is available for all player accounts and is mandatory for winwin777 staff accessing internal systems.
• Regular security audits, penetration testing, and vulnerability assessments are conducted by independent security specialists.
• Player funds are held in segregated accounts, separate from winwin777's operational funds, to protect against insolvency risk.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winwin777 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the DPA.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by winwin777:

• Right to be informed: The right to know what personal data winwin777 collects about you and how it is used – which this Policy fulfills.
• Right of access: The right to request a copy of the personal data winwin777 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to winwin777's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 14. winwin777 will respond to all data subject requests within 15 business days of receipt.

11. Children's Privacy

If winwin777 becomes aware that personal data has been collected from a person under 21 years of age, the account will be immediately closed, all associated data will be deleted, and any funds deposited will be returned to the source payment method in accordance with applicable regulations.

If you believe that a minor has registered an account on the winwin777 Platform, please contact our support team immediately.

12. International Data Transfers

winwin777 primarily processes personal data within the Philippines. Where personal data is transferred to service providers located outside the Philippines (for example, cloud infrastructure providers or game content studios), winwin777 ensures that such transfers are subject to appropriate safeguards, including contractual data processing agreements that require the recipient to provide a level of data protection equivalent to that required under the Philippine DPA.

winwin777 will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without implementing appropriate safeguards and, where required, obtaining your explicit consent to the transfer.

13. Updates to This Policy

winwin777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform features. Where changes are material, we will notify you by email to your registered address or via a prominent notice on the Platform at least 7 days before the changes take effect.

The current version of this Policy, with the effective date displayed at the top of this page, is always available on the winwin777 website. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact winwin777's Data Protection Officer (DPO):

winwin777 aims to respond to all data privacy enquiries within 15 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.