winmayam8 Privacy Policy

1. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the data controller responsible for your personal data is winmayam8, operating the platform at winmayam8.club.

All inquiries regarding personal data, including requests to exercise your rights under RA 10173, should be directed to our Data Protection Officer (DPO) at the contact details set out in Section 15 of this Policy.

2. Personal Data We Collect

winmayam8 collects personal data in the following categories:

Category	Examples
Identity Data	Full legal name, date of birth, nationality, government-issued ID type and number (e.g., PhilSys ID, Passport, Driver's License, UMID, SSS/GSIS, Voter's ID, PRC ID)
Contact Data	Email address, mobile number, residential address
Account Data	Username, encrypted password, account preferences, login history, session timestamps
Financial Data	Deposit and withdrawal history, transaction amounts, payment method type (e.g., GCash account reference, bank name). Full payment credentials are never stored by winmayam8.
Gaming Activity Data	Game history, bet amounts, win/loss records, session durations, responsible gaming tool usage
Technical Data	IP address, device type and model, browser type and version, operating system, referring URL
Communication Data	Live chat transcripts, support ticket history, email correspondence with winmayam8
Marketing Preferences	Promotional opt-in/opt-out status, preferred communication channel

winmayam8 does not intentionally collect sensitive personal data (as defined under RA 10173) beyond what is required for KYC identity verification, age verification, and regulatory compliance.

3. How We Collect Your Data

winmayam8 collects personal data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the winmayam8 platform, including via cookies, log files, and pixel tags.
• Third-Party Sources: Identity and fraud-screening data received from KYC verification service providers, payment processors, and, where legally required, regulatory authorities such as PAGCOR or Philippine law enforcement agencies.

4. Purposes of Processing

winmayam8 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and operating your winmayam8 player account.
• Identity & Age Verification: Confirming that you meet the 21+ age requirement and verifying your identity as required by PAGCOR regulations and anti-money laundering obligations.
• Payment Processing: Processing deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other supported payment methods.
• Gaming Services: Delivering game content, recording game outcomes, and maintaining your gaming history.
• Responsible Gaming: Monitoring gaming patterns to support responsible gaming tools, detecting problem gambling indicators, and enforcing self-exclusion or cooling-off periods you have activated.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, account takeover attempts, money laundering, and other prohibited conduct.
• Customer Support: Responding to inquiries, resolving disputes, and maintaining support records.
• Marketing & Promotions: Sending promotional communications to players who have opted in, and measuring the effectiveness of marketing campaigns.
• Legal & Regulatory Compliance: Meeting obligations under Philippine law, including RA 10173, AMLA, and PAGCOR regulations; responding to valid legal process from competent Philippine authorities.
• Platform Improvement: Analysing platform usage in aggregate to improve the winmayam8 user experience.

5. Legal Basis for Processing

winmayam8 processes your personal data on the following legal bases under RA 10173:

• Contractual Necessity: Processing required to perform our contract with you — operating your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable Philippine law, including KYC/AML requirements, PAGCOR regulations, and responses to lawful authority requests.
• Legitimate Interests: Processing for fraud prevention, platform security, and aggregate analytics, where our legitimate interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where you have given explicit opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

winmayam8 does not sell your personal data. We share your data only in the following circumstances and only to the extent necessary:

• Payment Processors: Transaction data is shared with certified payment service providers (e.g., GCash/Maya processors, acquiring banks) to process deposits and withdrawals. These providers are contractually bound to process data only as instructed by winmayam8.
• KYC/Identity Verification Providers: Identity documents submitted for verification are processed by contracted identity verification services. These providers are subject to strict data processing agreements and do not retain your data beyond the verification period.
• Game Content Providers: Game providers receive pseudonymised session and bet data necessary to deliver game functionality. They do not receive your full identity or financial data.
• Regulatory Authorities: winmayam8 will disclose personal data to PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), or other competent Philippine government authorities when required by valid legal process or regulatory obligation.
• Business Transfers: In the event of a merger, acquisition, or sale of winmayam8's business or assets, your data may be transferred to the acquiring entity, subject to equivalent data protection obligations. You will be notified of any such transfer.
• Fraud Prevention Networks: Flagged account or transaction data may be shared with shared fraud-prevention services to protect the broader online gaming ecosystem from known bad actors.

7. International Data Transfers

Some of winmayam8's service providers may be located outside the Philippines. Where personal data is transferred to countries not recognized by the National Privacy Commission as providing an adequate level of data protection, winmayam8 ensures that appropriate safeguards are in place — including contractual clauses approved by the NPC — prior to any such transfer.

winmayam8 will not transfer your personal data to any jurisdiction where we cannot ensure appropriate protection equivalent to the standards of RA 10173.

8. Data Retention

winmayam8 retains your personal data for as long as your account is active and for the following periods thereafter:

• Account and Identity Data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR and AMLC regulations.
• Transaction and Gaming Records: Retained for five (5) years from the date of each transaction, consistent with AML record-keeping requirements.
• Support and Communication Records: Retained for three (3) years from the date of the last communication.
• Marketing Preference Records: Retained for the duration of your account and for one (1) year following account closure, for audit purposes.

Where legal proceedings, regulatory investigations, or dispute resolution processes are ongoing, winmayam8 may retain relevant data beyond the periods stated above until those proceedings are concluded.

9. Cookies and Tracking Technologies

winmayam8 uses the following categories of cookies on its platform:

• Essential Cookies: Required for the winmayam8 platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences such as language settings and game lobby filters. Disabling these may affect your experience but will not prevent access to the platform.
• Analytics Cookies: Collect anonymised, aggregated data about how players use the winmayam8 platform, used to improve platform performance and user experience. Analytics data is not linked to your personal identity.
• Marketing Cookies: Used to measure the effectiveness of winmayam8's own marketing campaigns. These are only deployed for players who have opted in to marketing communications.

You may manage non-essential cookies through your browser settings. Note that clearing cookies will log you out of your winmayam8 session.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal data processed by winmayam8:

• Right to be Informed: The right to know that your data is being collected and how it is used — fulfilled by this Privacy Policy.
• Right of Access: The right to request a copy of the personal data winmayam8 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to winmayam8's legal retention obligations.
• Right to Object: The right to object to processing based on legitimate interests or for marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format for transfer to another controller.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe winmayam8 has handled your data in breach of RA 10173.

To exercise any of these rights, submit a written request to winmayam8's Data Protection Officer at the contact details in Section 15. winmayam8 will respond within fifteen (15) business days. Identity verification may be required before processing your request.

11. Children's Privacy

winmayam8 strictly prohibits access by persons under 21 years of age, consistent with Philippine gaming age restrictions. winmayam8 does not knowingly collect personal data from persons under 21. If winmayam8 determines that an account is held by a person under 21, the account will be immediately and permanently closed and all data retained only as required by legal and regulatory obligations.

If you are a parent or guardian and believe a minor may have registered an account on winmayam8, please contact our support team immediately at the contact details in Section 15.

12. Security Measures

winmayam8 implements technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration, including:

• SSL/TLS encryption for all data in transit between your device and winmayam8 servers.
• AES-256 encryption for personal data at rest in winmayam8 databases.
• Two-factor authentication available for all player accounts.
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis.
• Regular penetration testing and security audits by independent third-party providers.
• Automated anomaly detection systems monitoring for suspicious account activity.

In the event of a personal data breach that poses a real risk to your rights and freedoms, winmayam8 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay in accordance with RA 10173 requirements.

13. Third-Party Links

The winmayam8 platform does not contain links to third-party websites other than those necessary for game delivery and payment processing. winmayam8 is not responsible for the privacy practices of any third-party service and encourages players to review the privacy policies of any external services they use in connection with their winmayam8 account (e.g., their GCash or Maya app privacy policy).

14. Changes to This Privacy Policy

winmayam8 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email notification and/or a prominent notice on the winmayam8 platform at least seven (7) days prior to taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Your continued use of the winmayam8 platform following the effective date of any update constitutes your acknowledgment of the revised Policy. If you do not agree with a material change, you must stop using the platform and may request account closure before the change takes effect.

15. Contact and Data Protection Officer

For all data privacy inquiries, rights requests, or concerns, please contact winmayam8's Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 through the winmayam8 platform after login.

Please mark all data privacy correspondence with the subject line "Data Privacy Request" to ensure prompt routing to the DPO. winmayam8 will acknowledge receipt within two (2) business days and provide a full response within fifteen (15) business days.

If you are not satisfied with winmayam8's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC).