Your Data, Your Rights: winplus1 processes personal data in accordance with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. We are committed to transparency, data minimization, and giving you meaningful control over your information.
1. Who We Are
winplus1 ("winplus1," "we," "us," or "our") operates the online casino and sports betting platform accessible at https://winplus1.one. For the purposes of the Data Privacy Act of 2012, winplus1 acts as the Personal Information Controller (PIC) in respect of the personal data of registered players and website visitors.
If you have any questions about how winplus1 handles your personal data, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.
2. Personal Data We Collect
winplus1 collects the following categories of personal data from players and website visitors:
2.1 Identity & Contact Data
- Full legal name as it appears on a government-issued ID
- Date of birth (to verify the 21+ age requirement)
- Nationality and country of residence
- Registered email address
- Mobile phone number (used for OTP verification and account security)
- Residential address
2.2 Identity Verification (KYC) Data
- Copies of government-issued photo identification (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys national ID)
- Proof of address documents (e.g., utility bills, bank statements)
- Proof of payment method ownership (e.g., screenshot of GCash or PayMaya account showing your registered name)
- Selfie or liveness verification image where required
2.3 Financial Data
- GCash account number or mobile number linked to GCash/PayMaya
- Bank account details (BPI, BDO, Metrobank) where used for deposits or withdrawals
- Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used
- Account balance and bonus balance information
2.4 Gaming & Behavioral Data
- Game history, including games played, bet amounts, outcomes, and session durations
- Sports betting history, including markets wagered on, odds accepted, and results
- Bonus and promotion usage history
- Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
2.5 Technical & Device Data
- IP address and approximate geolocation derived from IP
- Device type, operating system, and browser type and version
- Unique device identifiers
- Login timestamps and session activity logs
- Referring URL and pages visited within the winplus1 platform
3. How We Collect Your Data
winplus1 collects personal data through the following means:
- Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
- Automated collection: Technical and behavioral data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access and use the winplus1 platform.
- Third-party sources: Identity verification data from KYC service providers; fraud and risk signals from payment processors; geolocation data from IP intelligence services. winplus1 only receives data from third parties where you have consented to such sharing or where we have a legitimate legal basis to do so.
4. How We Use Your Personal Data
winplus1 uses your personal data for the following purposes:
- Account management: To create, maintain, and administer your winplus1 player account, including processing deposits, withdrawals, and bonus credits.
- Identity verification: To verify your identity and age (21+) in compliance with applicable gaming regulations and anti-money laundering (AML) requirements.
- Service delivery: To provide access to games, sports betting markets, live casino features, and all other platform services.
- Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance via live chat and email.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct.
- Legal and regulatory compliance: To comply with our obligations under the Data Privacy Act of 2012, AML regulations, and any applicable gaming regulatory requirements.
- Responsible gaming: To monitor gaming behavior for signs of problem gambling and to administer responsible gaming tools such as deposit limits and self-exclusion.
- Marketing and promotions: To send you information about winplus1 promotions, bonuses, and new game releases, where you have consented to receive such communications. You may opt out at any time.
- Platform improvement: To analyze usage patterns and improve the functionality, performance, and user experience of the winplus1 platform.
5. Legal Basis for Processing
winplus1 processes your personal data on the following legal bases under the Data Privacy Act of 2012:
- Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and service delivery.
- Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and gaming regulatory requirements.
- Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your rights and freedoms.
- Consent: Processing for marketing communications and certain cookie-based tracking, where you have given your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6. Data Sharing & Disclosure
winplus1 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
- Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank, to process your deposits and withdrawals.
- KYC and identity verification providers: Third-party services that assist winplus1 in verifying your identity and age.
- Fraud prevention and AML service providers: Services that help winplus1 detect and prevent fraudulent transactions and money laundering.
- IT infrastructure and cloud service providers: Providers that host and maintain the winplus1 platform infrastructure, subject to strict data processing agreements.
- Regulatory and law enforcement authorities: Where required by law, court order, or regulatory directive, winplus1 may disclose your personal data to the National Privacy Commission (NPC), law enforcement agencies, or other competent authorities.
- Professional advisors: Lawyers, auditors, and accountants, where necessary for the conduct of winplus1's business and subject to professional confidentiality obligations.
All third-party service providers engaged by winplus1 are required to process your personal data only in accordance with our instructions and in compliance with the Data Privacy Act of 2012.
7. Cookies & Tracking Technologies
winplus1 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain your login session, and analyze platform usage. The following categories of cookies are used:
- Strictly necessary cookies: Essential for the operation of the platform, including session management and security. These cannot be disabled.
- Functional cookies: Remember your preferences, such as language settings and responsible gaming tool configurations.
- Analytics cookies: Collect anonymized data about how players use the platform to help winplus1 improve its services. Used only with your consent.
- Marketing cookies: Used to deliver relevant promotional content. Used only with your consent.
You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the winplus1 platform.
8. Data Retention
winplus1 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulation. Specifically:
- Account and KYC data is retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
- Transaction records are retained for a minimum of five (5) years from the date of the transaction.
- Gaming history data is retained for a minimum of three (3) years from the date of the relevant gaming session.
- Marketing consent records are retained for the duration of your account and for three (3) years following account closure.
Upon expiry of the applicable retention period, winplus1 will securely delete or anonymize your personal data in accordance with its data disposal procedures.
9. Data Security
winplus1 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the winplus1 platform.
- Encryption of sensitive data at rest, including KYC documents and financial data.
- Secure, salted hashing of all account passwords — winplus1 staff cannot view your password in plain text.
- Multi-factor authentication (MFA) options for player accounts.
- Role-based access controls limiting access to personal data to authorized personnel only.
- Regular security audits and penetration testing of the winplus1 platform.
- Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with the Data Privacy Act of 2012.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winplus1 will notify the National Privacy Commission (NPC) and affected players in accordance with applicable notification requirements.
10. Your Rights Under the Data Privacy Act
As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by winplus1:
- Right to be informed: The right to be informed of how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy.
- Right of access: The right to request a copy of the personal data winplus1 holds about you.
- Right to rectification: The right to request correction of inaccurate or incomplete personal data.
- Right to erasure: The right to request deletion of your personal data, subject to winplus1's legal retention obligations.
- Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
- Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe winplus1 has violated your data privacy rights.
To exercise any of these rights, please contact winplus1's Data Protection Officer using the contact details in Section 14. winplus1 will respond to all verified data subject requests within thirty (30) days of receipt.
11. Children's Privacy
The winplus1 platform is strictly intended for persons aged 21 years and above. winplus1 does not knowingly collect personal data from individuals under the age of 21. If winplus1 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed, all associated data will be deleted, and any funds will be handled in accordance with applicable regulations.
If you are a parent or guardian and believe that a minor has registered on the winplus1 platform, please contact us immediately via live chat or at the email address in Section 14.
12. Cross-Border Data Transfers
winplus1 may transfer your personal data to service providers located outside the Republic of the Philippines where necessary for the provision of platform services (for example, cloud infrastructure providers or KYC verification services). Any such cross-border transfer will be conducted in accordance with the Data Privacy Act of 2012 and its Implementing Rules, including the requirement that the recipient country provides an adequate level of data protection or that appropriate contractual safeguards are in place.
13. Changes to This Privacy Policy
winplus1 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, winplus1 will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect. The "Last Updated" date at the top of this Policy will be revised accordingly. Your continued use of the winplus1 platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.
14. Contact
& Complaints
If you have any questions, concerns, or complaints regarding this Privacy Policy or winplus1's handling of your personal data, please contact our Data Protection Officer:
If you are not satisfied with winplus1's response to your complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. winplus1 aims to resolve all data privacy complaints within thirty (30) days of receipt.