Privacy Policy

1 Who This Policy Applies To

This Privacy Policy applies to all individuals who interact with winna Casino through the website at winna.cam, including registered players, visitors browsing the site without an account, individuals who contact our customer support team, and individuals who participate in promotions, surveys, or research conducted by winna.

This Policy applies regardless of the device or medium through which you access winna — whether via desktop browser, mobile browser, or any future application interface. If you are accessing winna on behalf of another person or organization, you represent that you have the authority to bind that person or organization to this Privacy Policy.

If you do not agree with any part of this Privacy Policy, you must discontinue use of the winna platform immediately. For questions about this Policy or your rights under it, please contact winna's Data Protection Officer using the contact information in Section 13 below.

2 Personal Information We Collect

winna collects personal information in several ways — directly from you, automatically through your use of the platform, and in some cases from third parties where permitted by law. The categories of information we collect are described below.

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, gender, nationality, and email address provided when you create a winna account.
• Contact information: Mobile number, residential address (including barangay, city/municipality, province, and postal code in the Philippines), and alternative contact details.
• Identity verification documents: Copies of government-issued photo ID (Philippine passport, driver's license, UMID, SSS card, PhilHealth ID, or voter's ID), proof of address, and other documents submitted during KYC verification.
• Payment information: GCash account numbers, PayMaya account details, BDO/BPI/Metrobank account identifiers, and other payment method details used for deposits and withdrawals. Full payment card numbers are never stored by winna — these are processed by our payment service providers.
• Communications: Content of messages, emails, or live chat conversations you send to winna's support team, including support tickets, complaints, and feedback.
• Preferences and settings: Responsible gaming limits, communication preferences, and other account settings you configure.

2.2 Information Collected Automatically

• Device information: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited on winna.cam, games played, session duration, bet amounts and outcomes, bonus usage, and navigation patterns within the platform.
• Location data: General geographic location derived from your IP address, used to verify that you are accessing winna from a permitted jurisdiction.
• Cookies and tracking technologies: Information collected through cookies, web beacons, local storage, and similar technologies as described in Section 9 of this Policy.

2.3 Information from Third Parties

winna may receive personal information about you from the following third-party sources, where permitted by applicable Philippine law:

• Payment service providers (e.g., GCash, PayMaya, BDO) who confirm transaction details.
• Identity verification and KYC service providers who assist winna in verifying your identity and age.
• Fraud prevention and anti-money laundering (AML) screening services.
• PAGCOR and other regulatory bodies, where required to fulfill our licensing obligations.

3 How We Use Your Personal Information

winna uses your personal information only for lawful purposes, and only to the extent necessary for those purposes. The following table summarizes our primary uses of your data and the legal basis for each.

4 Disclosure of Your Personal Information

winna does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information only in the following limited circumstances:

4.1 Service Providers

winna works with trusted third-party service providers who process personal information on our behalf and under our instructions. These include payment processors, KYC and identity verification providers, cloud hosting and IT infrastructure providers, customer support platform providers, and fraud detection and cybersecurity services. All service providers are contractually bound to process your data only as instructed by winna and in compliance with applicable Philippine data protection laws.

4.2 Regulatory and Legal Obligations

winna may be required to disclose your personal information to PAGCOR, the Anti-Money Laundering Council (AMLC), Philippine courts, law enforcement agencies, or other government bodies where required by law, court order, or regulatory direction. winna will notify you of any such disclosure where legally permitted to do so.

4.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of winna's business, your personal information may be transferred to the successor entity as part of that transaction. We will notify you in advance of any such transfer and provide you with an opportunity to exercise your data rights before the transfer takes effect.

4.4 With Your Consent

winna may share your information with third parties for purposes not described in this Policy where you have given your explicit, informed, and freely given consent to that specific disclosure.

5 Data Retention

winna retains your personal information only for as long as is necessary to fulfill the purposes for which it was collected, or as required by law. The following retention periods generally apply:

• Account data and gameplay records: Retained for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR licensing requirements and the Anti-Money Laundering Act of the Philippines.
• Financial transaction records: Retained for a minimum of ten (10) years from the date of each transaction, in compliance with Philippine anti-money laundering laws and BIR record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from account closure or the date of the last transaction, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the communication, unless the matter is subject to ongoing dispute or legal proceedings.
• Marketing consent records: Retained until consent is withdrawn and for two (2) years thereafter to evidence compliance.

When your data is no longer required, winna will securely delete or anonymize it in accordance with industry-standard data destruction practices.

6 Data Security

winna implements technical, administrative, and physical security measures designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and winna's servers.
• Encryption at rest for sensitive personal data stored in winna's databases, including KYC documents and payment information.
• Access controls limiting access to personal data to winna staff and service providers who have a legitimate business need, with role-based permissions and multi-factor authentication required for administrative access.
• Regular security audits and penetration testing conducted by independent third-party cybersecurity professionals.
• Intrusion detection and monitoring systems that continuously monitor winna's infrastructure for unauthorized access attempts.
• Incident response procedures that ensure any data breach is identified, contained, and reported to the National Privacy Commission (NPC) within 72 hours where required by the Philippine Data Privacy Act.

While winna takes every reasonable precaution to protect your data, no internet transmission or electronic storage system is completely secure. If you suspect that your winna account has been compromised, contact our support team immediately.

7 Your Rights Under the Philippine Data Privacy Act

Under Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, you have the following rights with respect to your personal information held by winna. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13.

winna will respond to all verified data rights requests within thirty (30) days of receipt. We may request proof of identity before processing your request to protect against fraudulent claims.

8 Cross-Border Data Transfers

winna's primary data processing infrastructure is located within the Philippines or in jurisdictions that provide adequate data protection standards. Where data is processed outside the Philippines — for example, by cloud infrastructure providers or international game developers — winna ensures that appropriate safeguards are in place, including contractual data processing agreements that require overseas recipients to provide a standard of data protection equivalent to the Philippine Data Privacy Act.

winna will not transfer your personal information to countries or organizations that do not provide adequate protection unless your explicit consent has been obtained or other lawful transfer mechanisms apply.

9 Cookies and Tracking Technologies

winna uses cookies and similar tracking technologies to operate the platform, improve your experience, and comply with regulatory requirements. The types of cookies used on winna.cam are described below.

Strictly necessary cookies cannot be disabled as they are essential to the operation of winna. All other cookie categories may be managed through your browser settings. Disabling functional or analytics cookies may affect the quality of your experience on winna.cam.

10 Children's Privacy

The winna platform is strictly restricted to individuals who are 21 years of age or older. winna does not knowingly collect or process personal information from individuals under the age of 21. If winna discovers that an account has been created by a person under the age of 21, the account will be immediately suspended, all associated data will be handled in accordance with applicable law, and the matter will be reported to PAGCOR as required by our licensing conditions.

If you believe that a minor has accessed or registered for a winna account, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

11 Responsible Gaming and Privacy

winna may use your personal information — including your gaming activity, deposit patterns, session length, and behavioral data — to monitor for signs of problem gambling and to enforce responsible gaming measures. This processing is conducted in your interest and in compliance with our obligations as a PAGCOR-regulated operator.

Where winna's responsible gaming systems identify concerning patterns, our support team may contact you directly to offer assistance or information about support services. This contact is made with the sole intention of protecting your welfare and will not be used for marketing purposes.

For more details on the responsible gaming tools available on winna, please visit our Responsible Gaming page.

12 Amendments to This Privacy Policy

winna reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or regulatory requirements. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered players via their registered email address where the changes materially affect their rights.
• Where required by law, obtain fresh consent for new processing activities.

Your continued use of the winna platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the revised Policy, you must cease using winna and may request account closure.

13 Contact and Data Protection Officer

For all questions, requests, or concerns relating to this Privacy Policy or winna's handling of your personal information, please contact our Data Protection Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 within your winna account dashboard
• Response Time: Within 5 business days for privacy inquiries; within 30 days for formal data rights requests

Our support team is fully Filipino-speaking and available to assist players from Manila, Cebu, Davao, Quezon City, Makati, and every corner of the Philippines. When contacting us about data rights, please include your full name, registered email address, and a clear description of your request to help us process it efficiently.

If you are not satisfied with winna's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.