wintime Casino Privacy Policy

1. About This Policy

This Privacy Policy applies to all personal data collected and processed by wintime Casino ("wintime," "we," "us," or "our") in connection with your use of the wintime online gaming platform, accessible at wintime.bio, and all related services, including account registration, deposits, withdrawals, gameplay, customer support, and marketing communications.

This Policy is issued in compliance with Republic Act 10173, the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and the applicable circulars of the National Privacy Commission (NPC). It is also informed by PAGCOR's licensing requirements relating to the collection and retention of player identity and transaction records.

By registering an account on wintime or using any of its Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Data Controller

wintime Casino acts as the personal information controller with respect to data collected from Players and platform visitors. All data protection enquiries, subject access requests, and complaints may be directed to wintime's Data Privacy Officer (DPO) via the contact details set out in Section 14 of this Policy.

Where wintime engages third-party service providers (such as payment processors and game technology suppliers) who process personal data on wintime's behalf, those parties act as personal information processors and are contractually bound to process data only on wintime's documented instructions and in accordance with applicable Philippine data protection law.

3. Personal Data We Collect

3.1 Registration and Account Data

When you register an account on wintime, we collect:

• Full legal name as it appears on your government-issued ID;
• Email address and mobile number;
• Date of birth (for age verification — players must be 21+);
• Username and encrypted password;
• Residential address (required for KYC compliance).

3.2 Identity Verification (KYC) Data

To comply with PAGCOR's anti-money laundering requirements and to verify that Players are 21 years of age or above, wintime collects:

• Copies of government-issued photo identification (UMID, driver's license, PhilHealth ID, or passport);
• Selfie photographs submitted alongside identity documents;
• Proof of address documentation where required by regulatory risk assessment.

3.3 Financial and Transaction Data

wintime collects records of all financial transactions associated with your account, including deposit and withdrawal amounts, transaction dates and times, payment methods used (GCash, Maya, BPI, BDO, Metrobank, etc.), and transaction reference numbers.

3.4 Gaming Activity Data

wintime records all gaming activity associated with your account, including games played, bet amounts, game outcomes, session durations, and bonus utilization. This data is required for regulatory audit purposes and responsible gaming monitoring.

3.5 Technical and Device Data

When you access the wintime platform, we automatically collect technical data including your IP address, browser type and version, device type and operating system, session timestamps, and pages visited. This data is used for security monitoring, fraud prevention, and platform improvement.

3.6 Communications Data

We retain records of communications between you and the wintime support team, including live chat transcripts, email correspondence, and dispute records. This is required for quality assurance and dispute resolution purposes.

4. How We Use Your Personal Data

5. Legal Bases for Processing

wintime processes personal data under the following legal bases recognized by the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between wintime and the Player, including account management and payment processing.
• Legal obligation: Processing required to comply with PAGCOR licensing requirements, AML obligations under Republic Act 9160 (as amended), and other applicable Philippine law.
• Legitimate interests: Processing for fraud prevention, security monitoring, and responsible gaming purposes, where these interests are not overridden by the Player's privacy rights.
• Consent: Processing for marketing communications, where you have given explicit opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6. Sharing of Personal Data

wintime does not sell, rent, or trade personal data. We share personal data only in the following limited circumstances:

• Payment processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other Philippine payment service providers receive transaction data necessary to process deposits and withdrawals. These parties are independently regulated financial institutions subject to Bangko Sentral ng Pilipinas (BSP) data protection requirements.
• Game technology providers: Licensed game suppliers receive session data necessary to deliver game content and maintain game integrity records. All suppliers are contractually bound to handle data in accordance with this Policy.
• PAGCOR and law enforcement: wintime discloses identity and transaction data to PAGCOR as required by its licensing conditions, and to law enforcement authorities pursuant to valid legal process under Philippine law.
• KYC verification services: Identity documents may be processed through third-party KYC verification platforms operating under contracts that restrict use to identity verification purposes only.

All third-party processors engaged by wintime are required to maintain data security standards consistent with those described in Section 9 of this Policy.

7. Cookies and Tracking Technologies

wintime uses cookies and similar tracking technologies to enable essential platform functionality, maintain your login session, prevent fraud, and analyze platform usage patterns. The categories of cookies used are:

• Strictly necessary cookies: Required for platform operation, including session management and security tokens. These cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming tool configurations.
• Analytics cookies: Collect aggregated, anonymized data about how Players interact with the platform, used to improve user experience. No personally identifiable information is transmitted via analytics cookies.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from using core platform features including login and payment processing.

8. Data Retention

wintime retains personal data for the following periods, after which data is securely deleted or anonymized:

• Account and KYC data: Retained for a minimum of five (5) years after account closure, as required by PAGCOR AML regulations and Republic Act 9160.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity data: Retained for three (3) years for responsible gaming and dispute resolution purposes.
• Support communications: Retained for two (2) years from the date of the last interaction.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year for compliance documentation purposes.

Where retention beyond these periods is required by a specific legal obligation or active dispute, wintime will retain relevant data for the duration of that obligation or proceeding.

9. Data Security

wintime implements technical and organizational measures appropriate to the risk presented by the processing of personal data. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records;
• Role-based access controls limiting staff access to personal data to those with a documented need;
• Multi-factor authentication requirements for all wintime staff accessing production systems;
• Continuous intrusion detection and anomaly monitoring on all platform infrastructure;
• Annual third-party security audits and penetration testing;
• Segregated storage of player funds, account data, and gaming records.

In the event of a personal data breach that poses risk to Players' rights, wintime will notify affected Players and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

10. Your Data Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by wintime:

• Right to be informed: The right to know what personal data we hold about you, why we hold it, and how it is processed — addressed by this Privacy Policy.
• Right of access: The right to request a copy of your personal data held by wintime. Requests will be fulfilled within thirty (30) days.
• Right to correction: The right to request correction of inaccurate personal data. Identity data corrections require supporting documentation.
• Right to erasure: The right to request deletion of personal data that is no longer necessary or is processed without legal basis, subject to PAGCOR retention obligations.
• Right to object: The right to object to processing of your personal data for direct marketing purposes. Objection to marketing processing takes effect immediately upon receipt.
• Right to data portability: The right to receive a copy of your personal data in a structured, machine-readable format where technically feasible.
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission if you believe your data rights have been violated. The NPC may be contacted at privacy.gov.ph.

To exercise any of the above rights, contact wintime's Data Privacy Officer using the details in Section 14. We may request proof of identity before processing certain requests to protect against unauthorized access to account data.

11. Children's Privacy

wintime does not knowingly collect personal data from individuals under the age of 21. In accordance with PAGCOR requirements, age verification is mandatory for all account registrations. If wintime discovers that personal data has been collected from a person under 21 years of age, that account will be immediately closed, all data will be securely deleted (subject to any retention obligations triggered by the discovery), and any deposited funds will be returned to the originating payment method.

If you believe that wintime has inadvertently collected data from an underage individual, please contact wintime support immediately.

12. Cross-Border Data Transfers

wintime's primary data processing infrastructure is located in the Philippines. Where it is necessary to transfer personal data outside of the Philippines — for example, to game technology providers or infrastructure partners based in other jurisdictions — wintime ensures that such transfers are subject to appropriate safeguards, including data processing agreements that impose data protection obligations equivalent to those under the Data Privacy Act of 2012.

wintime will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing contractual safeguards, in compliance with NPC guidelines on cross-border data transfers.

13. Changes to This Privacy Policy

wintime reserves the right to update this Privacy Policy at any time. Material changes — including changes to the categories of data collected, new sharing arrangements with third parties, or changes to your rights — will be communicated to registered Players via email and by prominent notice on the platform at least seven (7) days before the effective date of the change.

Non-material changes (such as clarifications of existing practices) may be implemented with immediate effect. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the wintime platform following the effective date of any change constitutes acceptance of the revised Policy.

14. Contact and Complaints

For all data privacy enquiries, subject access requests, and complaints, please contact wintime's Data Privacy Officer:

• Email: [email protected]
• Live Chat: Available 24/7 through the support widget accessible after logging in to your wintime account.

wintime will respond to data privacy enquiries within five (5) business days. Subject access requests will be fulfilled within thirty (30) days of receipt of a valid, verified request.

If you are not satisfied with wintime's handling of a data privacy matter, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. All data subject rights are available to you under Republic Act 10173 without any requirement to have first contacted wintime, though we encourage direct contact as the fastest path to resolution.