wingph Privacy
Policy
At wingph, your personal data belongs to you. This Privacy Policy explains exactly what information we collect from Filipino players, how we use it, who we share it with, and what rights you have under the Philippine Data Privacy Act of 2012. We believe in full transparency — no hidden clauses, no data sold to third parties for marketing, and no surprises.
How wingph Protects Your Personal Data
Six core commitments that define how wingph handles your personal information — from the moment you register your account to every deposit, game session, and withdrawal you make on our platform.
Encrypted Data Storage
All personal data stored on wingph servers — including your name, date of birth, contact details, and payment method information — is encrypted at rest using AES-256 encryption. Data in transit between your device and wingph servers is protected by TLS 1.3. Your data is stored on servers located in jurisdictions that maintain equivalent data protection standards to the Philippines.
No Data Sold to Third Parties
wingph does not sell, rent, or trade your personal information to third-party marketers, advertisers, or data brokers — under any circumstances. Data sharing with third parties is strictly limited to the operational necessities described in this Policy: payment processors, identity verification providers, regulatory bodies, and PAGCOR as our licensing authority. Full stop.
Philippine Data Privacy Act Compliance
wingph fully complies with the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations. We maintain a registered Data Protection Officer (DPO) as required by the National Privacy Commission (NPC). Our data processing activities are documented, proportionate, and limited to the purposes disclosed in this Policy.
PAGCOR & AMLC Regulatory Compliance
As a PAGCOR-licensed online gaming operator, wingph is legally required to process certain player data for KYC identity verification, anti-money-laundering (AMLA) compliance, and regulatory reporting. These processing activities are mandatory and cannot be opted out of — but they are strictly limited to what Philippine law requires and are handled with full confidentiality.
Your Data Rights Are Respected
Under the Philippine Data Privacy Act and wingph's own policies, you have the right to access, correct, delete, and object to the processing of your personal data. You can also withdraw consent for non-essential data processing at any time. wingph will respond to data rights requests within 15 business days of receipt. See Section 9 of this Policy for the full list of your rights.
Transparent Cookie & Tracking Practices
wingph uses cookies and similar tracking technologies only for essential platform functionality, session security, fraud prevention, and platform performance analytics. We do not deploy third-party advertising trackers or cross-site tracking pixels. You can review and manage non-essential cookie preferences through the cookie settings accessible on the wingph Platform at any time.
wingph Privacy Policy — Full Document
Version effective 1 January 2026. This document supersedes all prior versions. Applicable law: Republic of the Philippines, Republic Act 10173 (Data Privacy Act of 2012).
1 Who We Are
This Privacy Policy is issued by wingph ("wingph," "we," "us," or "our"), the operator of the online gaming platform accessible at wingph.cam ("Platform"). wingph operates as a PAGCOR-licensed online casino and sports betting operator serving Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond.
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act 10173, "DPA") and its Implementing Rules and Regulations, wingph is the Personal Information Controller in respect of all personal data collected through the Platform. This means we determine the purposes and means by which your personal data is processed.
2 Personal Data We Collect
wingph collects personal data that is necessary, relevant, and not excessive in relation to the purposes for which it is processed. The categories of personal data we collect include:
| Data Category | Specific Data Points | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID type and number, nationality | KYC verification, age verification (21+), PAGCOR compliance |
| Contact Data | Philippine mobile number, email address, residential address | Account registration, communication, fraud prevention |
| Financial Data | GCash mobile number, Maya account reference, bank account details (BPI/BDO/Metrobank), transaction history | Deposit and withdrawal processing, AMLA compliance |
| Gaming Activity Data | Game history, bet amounts, wagering patterns, session durations, win/loss records | Platform operation, responsible gaming monitoring, fraud detection |
| Technical Data | IP address, device type and ID, browser type and version, operating system, geolocation (city/region level) | Security, fraud prevention, platform optimisation |
| Communications Data | Live chat transcripts, support ticket content, email correspondence with wingph | Customer support, dispute resolution, quality assurance |
| Sensitive Personal Data | Government-issued ID images (front and back) submitted during KYC verification | Identity verification as required by PAGCOR; stored with enhanced security controls |
wingph does not collect sensitive personal data beyond what is necessary for KYC compliance. We do not collect health data, political opinions, religious affiliations, or biometric data (other than ID photographs required for KYC).
3 How We Collect Your Data
wingph collects your personal data through the following channels and mechanisms:
- Direct Collection: Information you provide when creating your wingph account, completing KYC verification, making deposits or withdrawal requests, contacting wingph support, or participating in promotions.
- Automated Technical Collection: Data collected automatically through cookies, server logs, and similar technologies when you access and use the wingph Platform — including your IP address, device identifiers, session duration, and pages viewed.
- Payment Processing Partners: Transactional data passed to wingph from GCash, Maya, BPI, BDO, Metrobank, 7-Eleven, and USDT processing partners when you initiate a deposit or withdrawal.
- Identity Verification Providers: Confirmation data returned from third-party KYC verification services used to validate the authenticity of government-issued ID documents submitted during registration.
- Fraud Detection Systems: Risk signals generated by wingph's automated fraud detection infrastructure based on your interaction patterns, device fingerprint, and transaction behaviour on the Platform.
4 How We Use Your Personal Data
wingph processes your personal data for the following specific purposes. We do not use your data for purposes incompatible with those listed here without obtaining fresh consent or establishing a separate lawful basis under the DPA.
- Account Registration and Management: Creating and maintaining your wingph player account, verifying your identity and age (21+ requirement), and providing access to the Platform's full suite of games and services.
- Payment Processing: Processing your PHP deposits via GCash, Maya, BPI, BDO, Metrobank, 7-Eleven, and USDT, and processing withdrawals back to your nominated payment methods.
- PAGCOR Regulatory Compliance: Fulfilling all data reporting, record-keeping, and player information obligations required by wingph's PAGCOR operating license and any directions issued by PAGCOR.
- AMLA Compliance: Meeting wingph's obligations under the Philippine Anti-Money Laundering Act (AMLA) as amended, including conducting due diligence on players, monitoring transactions for suspicious activity, and reporting to the Anti-Money Laundering Council (AMLC) as required by law.
- Responsible Gaming: Monitoring player wagering behaviour to identify potential problem gambling indicators and enabling wingph to apply protective measures — including account cooling-off periods, deposit limits, or self-exclusion — where player welfare concerns are identified.
- Security and Fraud Prevention: Detecting and preventing fraud, account takeover, bonus abuse, collusion, money laundering, and other prohibited activities on the wingph Platform.
- Customer Support: Responding to your support inquiries, resolving disputes, and maintaining a record of communications for quality assurance and dispute resolution purposes.
- Platform Improvement: Using aggregated, anonymised usage data to analyse Platform performance, identify technical issues, and inform product development decisions.
- Marketing Communications: Sending you promotional offers, bonus notifications, and wingph news — but only where you have provided explicit consent during registration or subsequently opted into marketing communications. You may withdraw marketing consent at any time via your account settings.
5 Legal Basis for Processing
Every personal data processing activity conducted by wingph is grounded in one or more of the following lawful bases under the Philippine Data Privacy Act of 2012:
- Contract Performance: Processing necessary to fulfil wingph's obligations under the Terms and Conditions you agreed to at registration — including account operation, payment processing, and game delivery.
- Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, AMLA obligations, tax reporting requirements, and NPC data governance requirements.
- Legitimate Interest: Processing conducted for wingph's legitimate business interests — including fraud prevention, platform security, and aggregated analytics — where such interests are not overridden by your data protection rights.
- Consent: Processing for which you have provided explicit, freely given, specific, and informed consent — including marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
6 Data Sharing & Disclosure
wingph shares your personal data only in the circumstances and with the categories of recipients described in this section. We do not sell or transfer your personal data to third parties for their own commercial marketing purposes.
- PAGCOR: As wingph's licensing authority, PAGCOR may require access to player account data, transaction records, and gaming history as part of its regulatory oversight functions. Disclosure to PAGCOR is a legal obligation.
- Anti-Money Laundering Council (AMLC): Suspicious transaction reports and other data required under the Philippine AMLA are disclosed to the AMLC as mandated by law. These disclosures are made without prior notice to the affected player as required by Philippine law.
- Payment Processors: GCash, Maya, BPI, BDO, Metrobank, 7-Eleven, and USDT processing providers receive the minimum personal and financial data necessary to process your specific deposit or withdrawal transaction.
- KYC Verification Providers: Identity verification service providers receive your name, date of birth, and government ID images for the sole purpose of verifying your identity at registration or during enhanced due diligence reviews.
- IT and Platform Service Providers: Cloud hosting, cybersecurity, and platform operations providers who process data on wingph's behalf under data processing agreements that impose equivalent data protection obligations.
- Law Enforcement: Philippine law enforcement agencies and courts where disclosure is required by a valid court order, subpoena, or applicable law.
7 Data Retention
wingph retains your personal data for as long as necessary to fulfil the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply:
- Account and identity data: Retained for the duration of your active wingph account plus a minimum of 5 years following account closure, as required by PAGCOR licensing conditions and AMLA record-keeping obligations.
- Financial transaction records: Retained for a minimum of 5 years from the date of each transaction in accordance with AMLA requirements and Bureau of Internal Revenue (BIR) record-keeping guidelines.
- Game history and wagering records: Retained for a minimum of 3 years from the date of each gaming session for dispute resolution, responsible gaming monitoring, and PAGCOR audit purposes.
- Customer support communications: Retained for 3 years from the date of the last interaction, for dispute resolution and quality assurance purposes.
- Marketing consent records: Retained for the duration of your consent period plus 3 years following withdrawal of consent, to demonstrate compliance with DPA consent requirements.
When retention periods expire, personal data is securely deleted or anonymised in accordance with wingph's data disposal procedures. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes as it can no longer be used to identify you.
8 Security Measures
wingph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:
- AES-256 encryption for all personal data stored on wingph servers.
- TLS 1.3 encryption for all data transmitted between your device and the wingph Platform.
- Two-factor authentication (2FA) available to all players and mandatory for wingph administrative accounts.
- Role-based access controls ensuring wingph staff can only access player data necessary for their specific job function.
- Regular third-party security audits and penetration testing of the Platform and supporting infrastructure.
- 24/7 security monitoring with automated alerts for anomalous access patterns, data exfiltration attempts, and account compromise indicators.
- Incident response procedures aligned with NPC notification requirements — if a personal data breach occurs that is likely to harm your rights and freedoms, wingph will notify the NPC within 72 hours and affected players within 30 days as required by the DPA.
9 Your Data Rights Under the Philippine DPA
Under the Philippine Data Privacy Act of 2012 and wingph's own Privacy Policy, you have the following rights in respect of your personal data. To exercise any of these rights, contact wingph's Data Protection Officer using the details in Section 14.
Right to Be Informed
You have the right to be informed that your personal data is being collected and processed. This Privacy Policy is wingph's primary mechanism for fulfilling this right. You also have the right to request information about the specific data wingph holds about you at any time.
Right to Access
You have the right to request a copy of the personal data wingph holds about you, together with information about how it is used and with whom it has been shared. wingph will respond to access requests within 15 business days.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete personal data wingph holds about you. Some data corrections — such as name changes — may require documentary proof before wingph can action the correction.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to wingph's legal retention obligations under AMLA, PAGCOR licensing conditions, and other applicable Philippine law — which may prevent immediate deletion.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You can also object to processing based on wingph's legitimate interests, though such objections may be overridden where wingph has compelling legitimate grounds for the processing.
Right to Data Portability
Where wingph processes your data by automated means on the basis of your consent or a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format to transfer to another service where technically feasible.
Right to Lodge a Complaint
If you believe wingph has violated your data privacy rights, you have the right to lodge a complaint with the Philippine National Privacy Commission (NPC). wingph encourages you to contact our DPO first so we have the opportunity to address your concern directly — but your right to escalate to the NPC is unconditional.
10 Cookies & Tracking Technologies
wingph uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. wingph uses the following categories of cookies:
- Strictly Necessary Cookies: Essential for the Platform to function — including session authentication, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
- Performance and Analytics Cookies: Used to collect anonymised data about how players use the wingph Platform — pages visited, session duration, error events — to help wingph improve platform performance. This data is aggregated and cannot be used to identify individual players.
- Functional Cookies: Used to remember your platform preferences — such as language settings, display preferences, and recently played games — to personalise your wingph experience.
- Fraud Prevention Cookies: Used to maintain wingph's fraud detection systems, including device fingerprinting to identify suspicious login attempts and bonus abuse patterns.
You can manage non-essential cookie preferences through the cookie consent panel accessible via the cookie settings link on the Platform. Please note that disabling strictly necessary or fraud prevention cookies may impair your ability to use the wingph Platform securely.
11 Children's Privacy — 21+ Only
The wingph Platform is an adult gambling service and is strictly restricted to individuals who are 21 years of age or older, as required by PAGCOR regulations. wingph does not knowingly collect personal data from anyone under the age of 21.
Age verification is conducted at the point of registration and during significant account activities through wingph's KYC processes. If wingph discovers that an account has been registered by an individual under 21 years of age, the account will be immediately suspended, all funds withheld pending review, and the matter reported to PAGCOR as required by wingph's licensing obligations. Any personal data collected from an underage individual will be deleted in accordance with DPA requirements following the resolution of any mandatory reporting obligations.
12 Cross-Border Data Transfers
Some of wingph's service providers — including cloud infrastructure providers, payment processors, and KYC verification services — may process your personal data in jurisdictions outside the Philippines. Where such cross-border data transfers occur, wingph ensures they are conducted in accordance with the requirements of the Philippine Data Privacy Act, including:
- Executing data processing agreements with all third-party processors that impose data protection obligations equivalent to those required under Philippine law.
- Transferring data only to jurisdictions that provide an adequate level of data protection, or where appropriate contractual safeguards have been put in place.
- Limiting the scope of data transferred to the minimum necessary for the specific processing purpose.
wingph does not transfer your personal data to jurisdictions that are the subject of PAGCOR or Philippine government advisory warnings regarding data protection standards.
13 Amendments to This Policy
wingph reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. Material changes to this Policy will be communicated to registered players via email to the address on file and/or a prominent notice displayed upon login to the wingph Platform, no less than 14 days before the amended Policy takes effect.
The "Last Reviewed" date at the top of this Policy will be updated with each revision. We encourage you to review this Policy periodically to stay informed about how wingph handles your personal data. Continued use of the Platform after the effective date of any amended Policy constitutes your acknowledgment of the updated terms.
14 Contact & Data Protection Officer
For all data privacy inquiries, requests to exercise your DPA rights, or concerns about how wingph handles your personal data, you may contact our Data Protection Officer directly. All data rights requests will receive an initial acknowledgment within 3 business days and a substantive response within 15 business days.
wingph Data Protection Officer
Email:
[email protected]
(subject line: "Data Privacy Request")
For general platform support, responsible gaming assistance, or account inquiries unrelated to data privacy, please use the live chat within the wingph Platform or contact wingph Player Support at the same email address above with a different subject line.
Your Data is Safe. Your Games Are Waiting.
wingph protects your personal information with AES-256 encryption, PAGCOR compliance, and full Philippine DPA obligations — so you can focus on the games. Slots, live dealer, PBA betting, and more. Must be 21 or older. Play responsibly.