1 About This Policy
This Privacy Policy ("Policy") describes how WingPH ("WingPH," "we," "us," "our"), the operator of the online gaming platform at wingph.com, collects, processes, stores, and protects the personal data of registered players and website visitors in the Philippines.
WingPH is committed to protecting your privacy and handling your personal information responsibly, transparently, and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the data privacy requirements of our PAGCOR online gaming license.
This Policy applies to all personal data processed by WingPH in connection with your use of the wingph.com platform, any WingPH mobile experience, and all related services including real money card games (Tongits, Pusoy, Poker), sports betting, account management, and customer support. By registering an account or using any WingPH service, you confirm that you have read and understood this Policy.
If you have questions about anything in this Policy, you can contact our Data Protection Officer at privacy@wingph.com at any time.
2 Personal Data We Collect
WingPH collects the following categories of personal data from players and platform users. The specific data collected depends on how you interact with WingPH:
WingPH does not collect sensitive personal information as defined under Philippine law (such as health data, religious belief, or political affiliation) unless explicitly required for a specific regulatory purpose and with your clear consent.
3 How WingPH Collects Your Data
WingPH collects your personal data through the following channels:
- Direct Submission: Information you provide when you register a WingPH account, complete KYC verification, submit a support request, or update your account details.
- Platform Activity: Data automatically generated when you play games, place sports bets, make deposits or withdrawals, or navigate the WingPH platform.
- Technical Collection: Data collected automatically by our systems when you access WingPH, including IP address, device identifiers, browser type, and session duration. This happens via server logs and cookies (see Section 7).
- Payment Processors: Confirmation data returned by GCash, Maya, and other payment partners when you initiate deposits or withdrawals. WingPH receives confirmation of transaction status but does not receive or store your full GCash PIN or bank password.
- Identity Verification Services: WingPH may use third-party KYC verification services to check the authenticity of government IDs submitted during account verification. These services process your data under strict confidentiality agreements with WingPH.
- Regulatory Sources: PAGCOR may share information relevant to regulatory compliance, such as self-exclusion registrations or AML-related notifications, with WingPH as part of its licensing requirements.
4 Why WingPH Uses Your Personal Data
WingPH uses your personal data only for the following specific, legitimate purposes:
- Account Management: Creating and maintaining your WingPH account, verifying your identity, processing your registration, and keeping your account information current.
- Service Delivery: Enabling you to play real money games, place sports bets, participate in tournaments, and use all features of the WingPH platform.
- Payments Processing: Processing deposits and withdrawals through your nominated payment method, reconciling transactions, and investigating payment disputes.
- Regulatory Compliance: Meeting WingPH's obligations under its PAGCOR license, Philippine Anti-Money Laundering laws (AMLA), Know Your Customer requirements, and any other applicable Philippine regulation.
- Fraud Prevention and Security: Detecting, investigating, and preventing fraud, money laundering, account takeover, bonus abuse, collusion, and other prohibited activity on the WingPH platform.
- Responsible Gaming: Monitoring gaming patterns to identify potential problem gaming behavior and applying responsible gaming tools and restrictions as required by PAGCOR regulations and player-initiated settings.
- Customer Support: Responding to your queries, resolving complaints, and providing technical assistance related to your WingPH account.
- Platform Improvement: Analyzing aggregated, anonymized usage data to improve the WingPH platform's functionality, performance, and user experience.
- Marketing Communications: Sending promotional offers, new game announcements, and bonus notifications to players who have consented to receive them. You can withdraw this consent at any time from your account settings.
5 Legal Basis for Processing
Under the Philippine Data Privacy Act, WingPH must have a lawful basis for processing your personal data. The basis we rely on for each type of processing is:
- Contractual Necessity: Processing required to perform the contract between you and WingPH — your account agreement and our Terms and Conditions. This covers account creation, game operation, payment processing, and customer support.
- Legal Obligation: Processing required to comply with Philippine law, including PAGCOR regulatory requirements, Anti-Money Laundering Act obligations, and tax reporting requirements.
- Legitimate Interests: Processing necessary for WingPH's legitimate business interests where those interests are not overridden by your rights. This includes fraud detection, security monitoring, and platform improvement through anonymized analytics.
- Consent: Processing based on your freely given, specific, and informed consent. This applies to marketing communications and any optional data collection beyond what is strictly necessary for service delivery. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6 Sharing Your Data — Who Sees It
WingPH does not sell your personal data to any third party. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:
- Payment Service Providers: GCash, Maya, BDO, BPI, UnionBank, and other Philippine payment partners receive transaction data necessary to process your deposits and withdrawals. These providers are independent data controllers subject to their own privacy policies and Philippine BSP regulations.
- Identity Verification Partners: Third-party KYC service providers who assist WingPH in verifying government-issued ID documents during account verification. These partners process your data under data processing agreements with WingPH and are prohibited from using your data for any other purpose.
- PAGCOR and Regulatory Bodies: WingPH is required by its gaming license to share certain player data with PAGCOR upon request, including information required for AML compliance, responsible gaming enforcement, and regulatory audits.
- Philippine Law Enforcement: WingPH will disclose personal data to Philippine law enforcement authorities, courts, or government agencies when legally required to do so by valid court order, subpoena, or regulatory directive.
- Technology Service Providers: Cloud hosting, cybersecurity, platform analytics, and customer support software providers who process data on WingPH's behalf under strict data processing agreements. These parties act as data processors and may not use your data for their own purposes.
All third parties who process personal data on WingPH's behalf are contractually required to implement appropriate security measures and to process data only as instructed by WingPH.
7 Cookies and Tracking Technologies
WingPH uses cookies and similar tracking technologies to operate the platform, keep you logged in, remember your preferences, prevent fraud, and analyze how the platform is used. Here is what each type of cookie does on WingPH:
WingPH does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your WingPH account.
8 How Long We Keep Your Data
WingPH retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by Philippine law and our PAGCOR license. The general retention periods are:
- Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years after account closure, as required by Philippine AML regulations (AMLA) and PAGCOR recordkeeping requirements.
- Transaction and Financial Data: Retained for a minimum of five (5) years from the date of each transaction, in line with AMLA and PAGCOR requirements.
- Game History and Betting Records: Retained for a minimum of three (3) years to support dispute resolution, regulatory audits, and responsible gaming reviews.
- Customer Support Records: Retained for three (3) years from the date of each interaction.
- Marketing Consent Records: Retained for the duration of the consent plus three (3) years to demonstrate compliance.
- Technical/Log Data: Typically retained for twelve (12) months for security monitoring and fraud investigation purposes.
After applicable retention periods expire, WingPH securely deletes or anonymizes personal data so that it can no longer identify you. You may request early deletion of certain data types where Philippine law and PAGCOR regulations permit this — see Section 10 for how to submit such a request.
9 How WingPH Secures Your Data
WingPH takes data security seriously and implements multiple layers of technical and organizational protection to keep your personal data safe:
- Encryption in Transit: All data exchanged between your browser or device and WingPH's servers is protected by TLS 1.2 or higher (256-bit SSL encryption). Look for the padlock icon and "https" in your browser's address bar when on WingPH.
- Encryption at Rest: Sensitive player data including identity documents and financial information is encrypted in WingPH's database storage systems.
- Access Controls: Access to personal data is restricted to WingPH staff and authorized third parties on a strict need-to-know basis. Staff access to sensitive data requires multi-factor authentication and is logged for audit purposes.
- Regular Security Audits: WingPH conducts regular internal and third-party security assessments and penetration tests to identify and remediate vulnerabilities in the platform and data infrastructure.
- Incident Response: WingPH maintains a data breach incident response plan. In the event of a breach affecting your personal data, WingPH will notify you and the National Privacy Commission (NPC) within the timeframes required by Philippine law.
- Staff Training: All WingPH staff who handle personal data receive privacy and data security training aligned with Philippine data privacy law requirements.
10 Your Data Rights Under Philippine Law
The Philippine Data Privacy Act of 2012 gives you the following rights over your personal data held by WingPH. These are real rights you can exercise — here's what each one means and how to use it:
Right to Access
Request a copy of the personal data WingPH holds about you, including what categories of data, why we hold it, and who we have shared it with.
Right to Rectification
Request correction of inaccurate or incomplete personal data WingPH holds about you. For account details, some corrections can be made directly in your account settings.
Right to Erasure
Request deletion of personal data that is no longer needed for its original purpose, where deletion is not prevented by legal retention obligations. Note that AML and PAGCOR requirements prevent deletion of transaction records within mandatory retention periods.
Right to Object
Object to WingPH processing your personal data for marketing purposes or where processing is based on WingPH's legitimate interests. You can withdraw marketing consent at any time from your account settings.
Right to Data Portability
Request your personal data in a structured, machine-readable format where technically feasible and where WingPH processes that data based on your consent or a contract.
Right to Lodge a Complaint
If you believe WingPH has handled your personal data improperly, you may lodge a complaint with the Philippine National Privacy Commission (NPC) in addition to raising the matter directly with WingPH.
How to exercise your rights: Submit your data rights request to WingPH's Data Protection Officer at privacy@wingph.com. Please include your full name, WingPH account email address, and a clear description of your request. WingPH will acknowledge your request within 3 business days and respond in full within 30 days. We may need to verify your identity before processing certain requests to protect your data from unauthorized access.
11 Children and Minors
WingPH's services are strictly for individuals who are 21 years of age or older. WingPH does not knowingly collect personal data from anyone under the age of 21. Account registration is not permitted for minors.
WingPH uses age verification during registration and KYC to confirm that all players meet the minimum age requirement. If WingPH becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended and the personal data deleted or returned as appropriate under applicable law.
If you are a parent or guardian and believe a minor has registered a WingPH account, please contact us immediately at support@wingph.com so we can investigate and take appropriate action.
12 Third-Party Links and Services
The WingPH platform may contain references to third-party services such as GCash, Maya, and BDO for payment processing. When you interact with these services, you are subject to their own privacy policies and data practices. WingPH is not responsible for the privacy practices of any third-party service.
WingPH does not embed third-party advertising content, social media widgets, or retargeting scripts on the wingph.com platform. Any analytics tools used are configured to anonymize player data before processing.
13 Changes to This Privacy Policy
WingPH may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. The date of the most recent revision appears at the top of this document.
When WingPH makes material changes to this Policy — changes that meaningfully affect how we use your personal data — we will notify all registered players by email to their registered address at least 14 days before the changes take effect. For minor or technical changes, we may update the Policy without advance notice but will always update the revision date.
Your continued use of WingPH after an updated Policy takes effect constitutes your acceptance of the revised terms. If you do not agree with any change, you may close your WingPH account by contacting support@wingph.com.
14 Contact Our Data Protection Officer
WingPH has appointed a Data Protection Officer (DPO) as required by the Philippine Data Privacy Act. If you have any questions, concerns, or requests related to your personal data and how WingPH handles it, please contact the WingPH DPO directly:
- Email: privacy@wingph.com
- General Support: support@wingph.com
- Live Chat: Available 24/7 on the WingPH platform after logging in
For complaints that cannot be resolved with WingPH directly, you have the right to lodge a complaint with the Philippine National Privacy Commission (NPC). Information about the NPC complaints process is available through the NPC's official channels.
Thank you for taking the time to read WingPH's Privacy Policy. We know it is a long document — but your data and your privacy are worth the detail. If you have questions, we are always here to explain anything in plain Filipino terms.