winxbet Privacy Policy

1. Overview & Scope

This Privacy Policy ("Policy") is issued by winxbet ("winxbet," "we," "us," or "our"), the operator of the online gaming platform accessible at winxbet.one ("Platform"). This Policy describes how winxbet collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who access or use the Platform ("you" or "Data Subject").

This Policy applies to all personal data collected through the Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and any other use of winxbet's services. It also applies to data collected through cookies and similar tracking technologies when you visit the Platform.

winxbet is committed to processing personal data in a manner that is consistent with the principles of transparency, legitimate purpose, and proportionality as required by Republic Act No. 10173, the Philippine Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR").

2. Personal Data We Collect

winxbet collects the following categories of personal data from registered players and Platform visitors:

Identity & Contact Data:

• Full legal name as it appears on a government-issued ID
• Date of birth (for age verification purposes)
• Residential address (including barangay, city/municipality, province)
• Email address
• Mobile phone number
• Government-issued identification number (e.g., PhilSys ID, passport, driver's licence)

Financial Data:

• Payment method details (e.g., GCash mobile number, bank account details, debit card details)
• Transaction history, including deposits, withdrawals, and bonus credits
• Source of funds information where required for AML compliance

Gaming & Behavioural Data:

• Game history, wagering activity, and session duration
• Responsible gaming tool usage (deposit limits, self-exclusion requests)
• Bonus and promotion participation history

Technical Data:

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Platform access logs and timestamps

Communications Data:

• Records of customer support interactions (live chat transcripts, email correspondence)
• Feedback and survey responses
• Marketing communication preferences

3. How We Collect Your Data

winxbet collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 10).
• Third-party sources: Data received from identity verification service providers, payment processors, fraud prevention services, and PAGCOR or other regulatory bodies where legally permitted.

4. Purpose of Processing

winxbet processes your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your winxbet player account.
• Identity verification (KYC): Verifying your identity and age in compliance with PAGCOR regulations and the Anti-Money Laundering Act (AMLA).
• Service delivery: Providing access to games, processing deposits and withdrawals, and delivering customer support.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, cheating, money laundering, and other prohibited conduct.
• Legal and regulatory compliance: Meeting our obligations under the DPA, AMLA, PAGCOR regulations, and other applicable Philippine laws.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and administering responsible gaming tools.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications.
• Platform improvement: Analysing usage data to improve the Platform's performance, features, and user experience.

5. Legal Basis for Processing

winxbet processes your personal data on the following legal bases as recognised under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

winxbet does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, and Philippine banking partners, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers engaged to verify your identity and age.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law or court order.
• Fraud prevention services: Third-party providers engaged to detect and prevent fraudulent activity on the Platform.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers engaged to operate and secure the Platform.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third parties with whom winxbet shares personal data are required to process such data in accordance with the DPA and are bound by appropriate data processing agreements.

7. Data Retention

winxbet retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a period of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC documents: Retained for five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer support records: Retained for two (2) years from the date of the interaction.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

8. Data Security

winxbet implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including financial information and government ID details.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning.
• Multi-factor authentication for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winxbet will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will notify affected data subjects without undue delay, as required by the DPA.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by winxbet:

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 12. winxbet will respond to all verified data subject requests within fifteen (15) business days. We may request proof of identity before processing your request to protect against unauthorised access to your data.

If you are not satisfied with winxbet's response to a data subject request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

10. Cookies & Tracking Technologies

winxbet uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cookies cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming tool configurations, to provide a personalised experience.
• Analytics cookies: Collect anonymised data about how players use the Platform, helping us identify areas for improvement. These are only set with your consent.
• Marketing cookies: Used to deliver relevant promotional content. These are only set with your explicit consent and can be withdrawn at any time.

You can manage your cookie preferences through the cookie settings panel available on the Platform. Please note that disabling certain cookies may affect the functionality of the Platform. Your browser settings may also allow you to block or delete cookies, though this may impact your ability to use certain features of winxbet.

11. Minors & Age Policy

The winxbet Platform is strictly intended for individuals who are at least 21 years of age, in accordance with PAGCOR regulations governing casino-style gambling in the Philippines. winxbet does not knowingly collect personal data from individuals under the age of 21.

If winxbet becomes aware that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, forfeit any balances in accordance with our Terms & Conditions, and securely delete the personal data of the underage individual without undue delay.

If you believe that a minor has registered on the winxbet Platform, please contact our support team immediately so that we can investigate and take appropriate action.

Gambling is addictive. Know when to stop. If you are concerned about your own gambling behaviour or that of someone you know, please visit our Responsible Gaming page for support resources available to Filipino players.

12. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or winxbet's processing of your personal data, please contact our Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Support: Available 24/7 via the live chat feature on the winxbet Platform
• Response time: We aim to respond to all privacy enquiries within five (5) business days and to all formal data subject requests within fifteen (15) business days.

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

winxbet is committed to resolving all privacy concerns promptly and transparently. We take every complaint seriously and will investigate all reported issues thoroughly.