winmaya Privacy Policy

1. Introduction

winmaya ("winmaya," "we," "us," or "our") is committed to protecting the privacy and personal data of all users ("you" or "Player") of the winmaya online gaming platform accessible at https://winmaya.app and any associated mobile applications (collectively, the "Platform"). This Privacy Policy describes how winmaya collects, uses, discloses, stores, and safeguards your personal information in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

By registering an account on the winmaya Platform or by continuing to use our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, please discontinue use of the winmaya Platform immediately.

winmaya reserves the right to update this Privacy Policy from time to time. Any material changes will be communicated to you via email or a prominent notice on the Platform. Your continued use of the Platform following such notification constitutes your acceptance of the revised Privacy Policy.

2. Personal Data We Collect

winmaya collects personal data that is necessary for the operation of the Platform, compliance with legal and regulatory obligations, and the delivery of a safe and personalised gaming experience. The categories of personal data we collect include:

• Registration Data: Full legal name, date of birth, gender, nationality, residential address, email address, and Philippine mobile number provided when you create a winmaya account.
• Identity Verification Documents: Government-issued photo identification (such as a Philippine passport, driver's licence, SSS ID, or UMID card), proof of address, and selfie photographs submitted for Know Your Customer (KYC) verification purposes.
• Financial Data: Payment method details including GCash account numbers, PayMaya account information, bank account details (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records.
• Gameplay Data: Game history, betting patterns, session duration, win/loss records, and bonus usage data generated through your use of the winmaya Platform.
• Technical Data: IP address, device type, operating system, browser type and version, time zone, and cookies and similar tracking technologies.
• Communications Data: Records of your correspondence with the winmaya customer support team, including chat logs, emails, and support ticket history.
• Responsible Gaming Data: Information related to your use of responsible gaming tools, including deposit limits, self-exclusion requests, and cooling-off periods.

winmaya does not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has provided personal data, we will take immediate steps to delete that information and close the associated account.

3. How We Use Your Personal Data

winmaya processes your personal data for the following lawful purposes:

• To create, verify, and manage your winmaya account and provide access to the Platform's games and services.
• To process deposits, withdrawals, and other financial transactions through GCash, PayMaya, and partner banks.
• To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine anti-money laundering laws (Republic Act No. 9160 as amended).
• To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform.
• To personalise your gaming experience, including recommending games and promotions relevant to your preferences.
• To send you transactional communications, including account notifications, deposit confirmations, and withdrawal updates.
• To send you marketing communications about winmaya bonuses, promotions, and new game releases, where you have provided consent or where permitted by applicable law.
• To comply with our legal and regulatory obligations under Philippine law, including reporting obligations to PAGCOR and the Anti-Money Laundering Council (AMLC).
• To improve the winmaya Platform through analysis of usage patterns, technical performance monitoring, and user feedback.
• To administer responsible gaming tools and monitor for signs of problem gambling behaviour in accordance with PAGCOR's responsible gaming framework.

4. Legal Basis for Processing

winmaya processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and winmaya (i.e., the Terms and Conditions governing your use of the Platform).
• Legal Obligation: Processing is necessary to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements and AML obligations.
• Legitimate Interests: Processing is necessary for winmaya's legitimate interests in operating a secure, fair, and commercially viable gaming platform, provided such interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, winmaya relies on your freely given, specific, and informed consent, which you may withdraw at any time.

5. Disclosure of Personal Data

winmaya does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors to facilitate deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML screening services used to verify your identity and comply with regulatory requirements.
• Game Providers: Licensed game software providers whose games are available on the winmaya Platform, to the extent necessary for game operation and fairness auditing.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities as required by law.
• IT and Security Service Providers: Cloud hosting, cybersecurity, and technical support providers engaged by winmaya to operate and maintain the Platform.
• Professional Advisers: Legal counsel, auditors, and accountants where necessary for the conduct of winmaya's business.

All third parties with whom winmaya shares personal data are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with winmaya's instructions and applicable Philippine data protection law.

6. Data Retention

winmaya retains your personal data for as long as your account remains active and for such additional period as is necessary to comply with our legal and regulatory obligations. Specifically:

• Account and transaction records are retained for a minimum of five (5) years following account closure, in accordance with Philippine AML regulations.
• Identity verification documents are retained for the duration of your account and for five (5) years thereafter.
• Marketing consent records are retained until you withdraw consent and for a reasonable period thereafter as evidence of compliance.
• Technical logs and cookies data are retained for periods specified in our Cookie Policy, typically not exceeding thirteen (13) months.

Upon expiry of the applicable retention period, winmaya will securely delete or anonymise your personal data in accordance with our data disposal procedures.

7. Cookies and Tracking Technologies

winmaya uses cookies, web beacons, pixel tags, and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function correctly, including maintaining your login session and remembering your language preferences.
• Analytics Cookies: Used to understand how players interact with the winmaya Platform, identify popular games, and improve overall user experience.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of winmaya's marketing campaigns, subject to your consent.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the winmaya Platform.

8. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by winmaya:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed.
• Right of Access: The right to request a copy of the personal data winmaya holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to winmaya's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact the winmaya Data Privacy Officer at the email address provided in Section 10 below. winmaya will respond to all verified requests within thirty (30) days.

9. Security Measures

winmaya implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the winmaya Platform.
• Secure, access-controlled server infrastructure with regular security audits and penetration testing.
• Two-factor authentication (2FA) available for all winmaya accounts.
• Strict internal access controls limiting employee access to personal data on a need-to-know basis.
• Regular staff training on data privacy and security obligations.
• Incident response procedures for the detection, reporting, and management of personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winmaya will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

10. Contact and Data Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or winmaya's handling of your personal data, please contact our Data Privacy Officer:

Email: [email protected]

(This is a plain text address – not a clickable link. Please copy and paste it into your email client.)

Support hours: 8:00 AM – 12:00 MN (Philippine Standard Time), daily.

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you are not satisfied with winmaya's response to your data privacy concern.