winsph Privacy
Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal information winsph collects from Filipino players, how we use and protect that data, who we share it with, and what rights you have under the Data Privacy Act of 2012 (Republic Act No. 10173). Please read this document carefully before using our platform.
- Right to access your personal data
- Right to correct inaccurate data
- Right to erasure (right to be forgotten)
- Right to object to processing
- Right to data portability
Our Privacy Commitments
winsph takes data protection seriously. Here is a plain-language overview of how we approach your personal information — the full legal detail follows below.
Secure Data Storage
All personal data collected by winsph is stored on secured, encrypted servers. Access is restricted to authorized personnel only, and our security protocols are regularly reviewed to meet PAGCOR and RA 10173 standards.
No Data Selling
winsph does not sell, rent, or trade your personal information to third-party marketing organizations. Your data is used solely for account management, regulatory compliance, fraud prevention, and service improvement.
RA 10173 Compliance
winsph fully complies with the Philippines' Data Privacy Act of 2012. Our data processing practices are registered with the National Privacy Commission (NPC) as required under Philippine law.
KYC With Purpose
Identity verification on winsph is required strictly for regulatory compliance — specifically PAGCOR licensing requirements and the Anti-Money Laundering Act (AMLA). KYC data is never used for unsolicited marketing.
Transparent Cookie Use
winsph uses cookies to maintain session security, remember your preferences, and analyze platform performance. We do not use third-party advertising cookies that track you across other websites without your knowledge.
Your Rights Are Real
Under RA 10173, Filipino players have the right to access, correct, erase, and port their personal data. winsph provides a clear process for exercising these rights — no runaround, no unnecessary delays.
winsph operates an online casino and sports betting platform accessible at winsph.net, designed and tailored for Filipino players. Our platform is regulated by the Philippine Amusement and Gaming Corporation (PAGCOR) and is operated in full compliance with applicable Philippine laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR).
For the purposes of this Privacy Policy, winsph acts as the Personal Information Controller (PIC) in respect of all personal data collected from players who register and use our platform. As the PIC, winsph determines the purposes and means of processing your personal information and is responsible for ensuring that all processing activities comply with RA 10173.
This Privacy Policy applies to all personal data processed by winsph in connection with the registration, account management, gameplay, financial transactions, customer support, and marketing communications associated with the winsph platform.
Data Protection Officer: winsph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173. You may contact our DPO directly at for any privacy-related inquiries, complaints, or data subject requests.
winsph collects personal data that is necessary and proportionate for the operation of a regulated online gaming platform in the Philippines. The categories of personal data we collect are as follows:
| Category | Examples | Required For |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID (PhilSys, passport, driver's license, SSS/GSIS/Pag-IBIG ID) | KYC verification, 21+ age check, PAGCOR compliance |
| Contact Data | Email address, mobile number, home address (city, province, region) | Account communication, OTP security, support |
| Financial Data | GCash number, Maya account, bank account details (BPI, BDO, Metrobank), transaction history in PHP | Deposits, withdrawals, AML compliance |
| Account Data | Username, account ID, login history, device fingerprint, session records | Account security, fraud prevention |
| Gameplay Data | Game history, bet amounts, win/loss records, session duration, bonus usage | Responsible gaming monitoring, regulatory reporting |
| Technical Data | IP address, browser type, device type and OS, cookie identifiers, geolocation (country-level) | Platform security, fraud detection, performance optimization |
| Communications Data | Live chat transcripts, support email content, player feedback submissions | Customer support quality, dispute resolution |
winsph does not collect sensitive personal information beyond what is strictly required for identity verification, unless you voluntarily provide such information in the context of a responsible gaming self-assessment or support interaction. Sensitive personal information collected for responsible gaming purposes is handled with heightened protection and is never used for marketing or profiling.
winsph collects personal data through the following channels and mechanisms:
- Direct registration: When you create a winsph account, you provide identity and contact data directly through the registration form.
- KYC document submission: When you submit government-issued ID documents and selfie verification through the winsph KYC portal to verify your identity and age.
- Financial transactions: When you make deposits or request withdrawals, payment method details and transaction records are captured through our payment processing integrations with GCash, Maya, BPI, BDO, and other Philippine payment providers.
- Platform activity: Automatically, as you use the winsph platform — including gameplay sessions, navigation behavior, and feature interactions — technical and gameplay data is recorded by our systems.
- Cookies and tracking technologies: Via first-party cookies and similar technologies deployed on the winsph website and mobile interface. See Section 7 for full details.
- Customer support interactions: When you contact our 24/7 support team via live chat or email, conversation content and your contact information are recorded.
- Third-party verification services: In some cases, winsph may receive data from identity verification partners or payment processors as part of the KYC and AML compliance process.
winsph processes your personal data for the following specific, legitimate, and lawful purposes:
- Account creation and management: To register and maintain your winsph player account, verify your identity, and manage your account settings and preferences.
- Age verification and KYC compliance: To confirm that you are at least 21 years of age as required under Philippine law, and to satisfy PAGCOR's Know Your Customer requirements.
- Financial transactions: To process deposits and withdrawals in Philippine Peso (PHP) via your selected payment method, maintain transaction records, and issue receipts.
- Regulatory compliance: To comply with PAGCOR licensing obligations, the Anti-Money Laundering Act (AMLA), and any other applicable Philippine regulatory requirements, including mandatory reporting obligations.
- Fraud prevention and platform security: To detect and prevent unauthorized access, fraudulent activity, money laundering, and abuse of promotional offers.
- Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behavior and to administer self-exclusion, deposit limits, and cooling-off requests at the player's direction.
- Customer support: To respond to your inquiries, resolve disputes, and maintain records of support interactions for quality assurance.
- Platform improvement: To analyze aggregated, anonymized usage data to improve game performance, platform stability, and user experience.
- Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent or where legitimate interest applies. You may opt out at any time.
Important: winsph does not use automated decision-making or profiling that produces significant legal effects without human oversight. Responsible gaming flagging systems flag accounts for human review by our player protection team — no automatic account closures are triggered solely by algorithm.
Under the Data Privacy Act of 2012, winsph processes your personal data on the following legal bases:
- Contractual necessity: Processing required to perform our contract with you as a registered winsph player — including account management, deposits, withdrawals, and game access.
- Legal obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, KYC requirements, and other applicable Philippine laws. winsph cannot waive these processing activities at a player's request as they are mandated by law.
- Legitimate interests: Processing undertaken for fraud prevention, platform security, responsible gaming monitoring, and analytics — where such interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for direct marketing communications and non-essential cookies, where we have obtained your explicit consent prior to processing. You retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.
winsph does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and under appropriate data processing agreements or legal obligations:
- PAGCOR and Philippine regulatory authorities: As required under our operating license and applicable law, winsph provides player data, transaction records, and suspicious activity reports to PAGCOR and, where required, to the Anti-Money Laundering Council (AMLC).
- Payment processors and financial institutions: GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, and other payment service providers receive the minimum financial data necessary to process transactions on your behalf.
- KYC and identity verification providers: Third-party identity verification services that assist winsph in confirming the authenticity of government-issued identification documents and facial biometric matching during the KYC process.
- Game content providers: Licensed game providers such as Jili, Pragmatic Play, and Evolution may receive anonymized session data necessary to deliver their games through the winsph platform. These providers do not receive your identity or financial data.
- IT infrastructure and cloud services: Hosting, database, and security service providers who process data on behalf of winsph under strict data processing agreements and are bound by confidentiality obligations.
- Law enforcement: Where required by a court order, subpoena, or lawful request from Philippine law enforcement or judicial authorities, winsph will disclose personal data as legally compelled.
Our Commitment: Every third party that receives personal data from winsph is contractually required to handle that data in accordance with RA 10173 and to use it solely for the specific purpose for which it was shared. We do not permit third parties to use your data for their own marketing purposes.
winsph uses cookies and similar tracking technologies on our website and platform interface. A cookie is a small text file stored on your device by your browser that allows the platform to recognize your session and preferences.
winsph uses the following categories of cookies:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens. Without these, the platform cannot function. | No — required for operation |
| Functional | Remembering language preferences, game lobby layout settings, and responsible gaming tool configurations. | Yes — via browser settings |
| Analytics | Aggregated, anonymized data on platform usage patterns to improve performance and user experience. No individual-level tracking. | Yes — via consent management |
winsph does not use third-party advertising cookies or cross-site tracking cookies that follow you across the web. You may manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will impair or prevent access to the winsph platform.
winsph retains personal data for no longer than is necessary for the purpose for which it was collected, subject to applicable legal retention obligations. The following retention periods apply:
- Active account data: Retained for the duration of your active player account relationship with winsph plus a period of five (5) years following account closure, as required for PAGCOR compliance and AMLA record-keeping obligations.
- Transaction records: Financial transaction data is retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA reporting and audit requirements.
- KYC documents: Identity verification documents are retained for five (5) years from the date of submission or from the date of account closure, whichever is later.
- Customer support records: Support interaction records are retained for three (3) years from the date of the interaction for dispute resolution and quality assurance purposes.
- Analytical and gameplay data: Aggregated, anonymized analytics data may be retained indefinitely as it no longer constitutes personal data. Individual gameplay session data linked to your account is retained for the duration of your account plus two (2) years.
- Marketing consent records: Records of your marketing consent or opt-out are retained for the duration of your account to demonstrate compliance with RA 10173 consent requirements.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.
winsph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security framework includes:
- TLS/SSL encryption: All data transmitted between your device and the winsph platform is encrypted using Transport Layer Security (TLS) protocols. Look for the padlock icon in your browser address bar when using winsph.
- At-rest encryption: Personal data stored in winsph databases is encrypted at rest using industry-standard AES-256 encryption.
- Access controls: Access to personal data is restricted on a strict need-to-know basis. All winsph staff with access to personal data undergo background screening and are bound by confidentiality obligations.
- Two-factor authentication: winsph offers and strongly recommends two-factor authentication (2FA) for all player accounts. Internal system access by winsph staff requires mandatory 2FA.
- Security monitoring: Our platform is continuously monitored for suspicious activity, unauthorized access attempts, and potential data breaches by our security operations team.
- Penetration testing: winsph conducts regular security assessments and penetration testing of its systems to identify and remediate vulnerabilities.
Data Breach Protocol: In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, winsph will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required under RA 10173. Affected players will be notified without undue delay where the breach is likely to result in a high risk to their rights.
Under the Data Privacy Act of 2012, you — as a data subject and winsph player based in the Philippines — are entitled to the following rights with respect to your personal data:
Right to Be Informed
You have the right to know that your data is being collected, what data is collected, and how it will be used — which is the purpose of this Privacy Policy.
Right to Access
You may request a copy of the personal data winsph holds about you, along with information about how it has been processed.
Right to Rectification
You may request correction of inaccurate or incomplete personal data held by winsph. Account details can be updated via your account settings or by contacting support.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to retention obligations under AMLA and PAGCOR rules.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
Right to Data Portability
You may request that winsph provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
To exercise any of these rights, please contact our Data Protection Officer at with the subject line "Data Subject Request." We will respond to your request within fifteen (15) business days as required under RA 10173. We may ask you to verify your identity before processing your request to prevent unauthorized access to your data.
Complaints: If you believe winsph has not handled your personal data in accordance with RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for enforcing the Data Privacy Act. Contact details for the NPC are available at their official government website.
The winsph platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine law governing casino-style gambling and online gaming. This age restriction is a firm legal requirement under PAGCOR regulations.
winsph does not knowingly collect or process personal data from individuals under the age of 21. All player registrations are subject to mandatory age verification as part of the KYC process. If winsph discovers that a registered account belongs to an individual under 21 years of age, that account will be immediately suspended, all funds returned where practicable, and the player's personal data deleted except to the extent required for regulatory reporting.
If you believe that a person under the age of 21 has registered on the winsph platform, please notify us immediately at so that we can take prompt action.
21+ Only. By registering on winsph, you confirm that you are at least 21 years old. Providing false information about your age to circumvent this requirement is a violation of our Terms & Conditions and may constitute a criminal offence under Philippine law.
The winsph platform integrates with third-party services to deliver payment processing, game content, and customer support functionality. While winsph carefully selects its third-party partners and requires them to maintain appropriate data protection standards, we are not responsible for the privacy practices of third-party services that operate independently of the winsph platform.
Payment processors such as GCash, Maya, BPI, BDO, and other Philippine financial institutions operate under their own privacy policies and are separately regulated by the Bangko Sentral ng Pilipinas (BSP). When you initiate a payment transaction, you are subject to the privacy terms of the relevant payment service provider in addition to this Privacy Policy.
winsph does not place external links to third-party websites within the main platform interface. If you navigate away from winsph to a third-party website, that website's own privacy policy governs the collection and use of your data on that site.
winsph primarily processes and stores personal data within server infrastructure located in Southeast Asia. In some instances, the operation of our platform may involve the transfer of personal data to processors or sub-processors located outside the Philippines — for example, in the context of cloud infrastructure services or game provider integrations.
Where personal data is transferred outside the Philippines, winsph ensures that such transfers are protected by appropriate safeguards, including:
- Data processing agreements that incorporate the standard contractual clauses recognized by the National Privacy Commission;
- Transfer only to jurisdictions that the NPC has determined provide an adequate level of data protection; or
- Other appropriate safeguards permitted under RA 10173 and its IRR.
You may request information about the specific safeguards applied to any cross-border transfer of your personal data by contacting our DPO at .
winsph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. All material changes to this Privacy Policy will be communicated to registered players via:
- A notice displayed prominently on the winsph platform upon login;
- An email notification to the registered email address associated with your account; and/or
- An in-platform notification through the winsph messaging system.
The "Last Updated" date at the top of this Privacy Policy reflects the date of the most recent revision. Where changes are material and affect how we use your personal data, we will seek fresh consent where required by RA 10173. Continued use of the winsph platform following notice of a policy update constitutes acceptance of the updated Privacy Policy, to the extent permitted by law.
We encourage you to review this Privacy Policy periodically to stay informed about how winsph protects your personal data. Previous versions of this Privacy Policy are available upon request from our DPO.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by winsph, please contact our Data Protection Officer using the details below. All privacy-related communications should include your full name, registered account username, and a clear description of your request or concern.
Data Protection Officer
winsph Operations
Philippines
Email:
Response Timeframes
General inquiries: 3–5 business days
Data subject requests: 15 business days
Data breach notification: 72 hours (to NPC)
Play With Confidence on
winsph
Now that you know exactly how winsph handles your personal data, explore our full range of slots, live games, sports betting, and bingo — all regulated by PAGCOR and built for Filipino players. You must be 21 or older to participate.
Strictly for individuals aged 21 and above · Regulated by PAGCOR · Play Responsibly