Privacy Policy

1. Data Controller Information

The data controller responsible for your personal information is winzir, a PAGCOR-licensed online casino operator registered and operating in the Republic of the Philippines. For all data protection inquiries, privacy concerns, or requests to exercise your data subject rights, you may contact our Data Protection Officer at:

• Email: [email protected]
• Data Protection Officer: Available via email for privacy-specific inquiries
• Customer Support: 24/7 live chat available at winzir.cam for general account matters
• Registered Address: Metro Manila, Philippines (specific address available upon request to Data Protection Officer)

winzir complies with the Philippine Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations (IRR), and all circulars issued by the National Privacy Commission (NPC). We are committed to maintaining the highest standards of data protection and privacy for all Filipino and international users.

2. Information We Collect

2.1 Information You Provide to Us

When you register an account with winzir, we collect personal information necessary to provide our services, comply with legal and regulatory obligations, and verify your identity as required by PAGCOR regulations. This information includes:

• Account Registration Data: Full name, date of birth, email address, mobile phone number, residential address, nationality, and citizenship status;
• Identity Verification Documents: Government-issued identification cards (e.g., Philippine passport, driver's license, UMID, PhilHealth ID, voter's ID, postal ID), proof of address documents (utility bills, bank statements), and selfie photographs for facial verification;
• Financial Information: Payment method details including GCash account information, Maya wallet identifiers, bank account numbers (for deposits and withdrawals), cryptocurrency wallet addresses, and transaction history;
• Communication Data: Content of your communications with our customer support team via live chat, email, or phone, including inquiries, complaints, feedback, and support ticket details;
• Marketing Preferences: Your consent or objection to receiving promotional communications, newsletters, bonus offers, and marketing materials via email, SMS, or push notifications.

2.2 Information Automatically Collected

When you access or use the winzir platform, we automatically collect technical information about your device, location, and usage patterns. This information is collected through cookies, web beacons, server logs, and similar tracking technologies:

• Device Information: IP address, device type and model, operating system and version, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information;
• Usage Data: Pages visited, features used, games played, time spent on each page or game, clickstream data, referring URLs, exit pages, access times and dates, and navigation patterns;
• Location Data: Approximate geographic location derived from IP address, GPS coordinates if you enable location services on mobile devices, and country/city of access;
• Gaming Activity: Betting history, wager amounts, game outcomes, winnings and losses, bonus usage, loyalty points earned, withdrawal requests, and responsible gaming tool settings (deposit limits, session timers, self-exclusion periods);
• Cookies and Tracking Technologies: Session cookies, persistent cookies, authentication tokens, preference settings, analytics data, and advertising identifiers. For detailed information about our use of cookies, please see Section 9 below.

2.3 Information from Third Parties

winzir may receive information about you from third-party sources to verify your identity, prevent fraud, comply with anti-money laundering regulations, and enhance our services:

• Payment Processors: Transaction data, payment verification status, fraud risk assessments, and chargeback notifications from GCash, Maya, banks, and cryptocurrency payment gateways;
• Identity Verification Services: Document verification results, facial recognition match scores, database checks against government records, and fraud detection alerts from third-party KYC (Know Your Customer) providers;
• Game Providers: Game session data, RNG (Random Number Generator) results, technical logs, and game-specific analytics from our licensed game providers such as Evolution Gaming, Pragmatic Play, and BBIN;
• Regulatory Authorities: Compliance inquiries, investigation requests, and regulatory reporting requirements from PAGCOR and other relevant Philippine government agencies;
• Public Databases: Sanctions lists, politically exposed persons (PEP) databases, adverse media reports, and other publicly available information used for enhanced due diligence and compliance screening.

3. How We Use Your Information

winzir processes your personal information for specific, legitimate purposes based on legal grounds established under the Philippine Data Privacy Act and international data protection principles. We use your information to:

3.1 Provide and Improve Our Services

• Create, maintain, and manage your winzir account;
• Process deposits, withdrawals, and financial transactions;
• Enable gameplay across all casino games, live dealer tables, and sports betting markets;
• Track betting history, account balances, and loyalty points;
• Process bonus claims, promotions, and loyalty rewards;
• Provide customer support and respond to inquiries;
• Improve platform functionality, user experience, and game offerings based on usage analytics;
• Develop new features, games, and services tailored to player preferences;
• Troubleshoot technical issues, system errors, and performance problems.

3.2 Comply with Legal and Regulatory Obligations

• Verify your identity and age (21+ requirement) as mandated by PAGCOR regulations;
• Conduct Know Your Customer (KYC) and Customer Due Diligence (CDD) procedures;
• Monitor and report suspicious transactions under the Anti-Money Laundering Act (AMLA);
• Respond to lawful requests from law enforcement, regulatory authorities, and courts;
• Maintain records for tax reporting, financial auditing, and regulatory compliance;
• Implement responsible gaming measures including self-exclusion, deposit limits, and reality checks;
• Detect and prevent underage gambling, fraud, cheating, collusion, and other prohibited activities;
• Comply with PAGCOR reporting requirements and licensing conditions.

3.3 Marketing and Communications

• Send promotional emails, SMS messages, and push notifications about bonuses, tournaments, and special offers (with your consent);
• Personalize marketing content based on your gaming preferences and activity;
• Conduct customer satisfaction surveys and collect feedback;
• Send transactional notifications about deposits, withdrawals, bonus credits, and account changes;
• Inform you about important policy updates, terms changes, and security alerts.

3.4 Security and Fraud Prevention

• Detect and prevent fraudulent transactions, account takeovers, and payment fraud;
• Identify bonus abuse, multiple account creation, and coordinated fraud rings;
• Monitor for patterns of problem gambling and enforce responsible gaming limits;
• Protect against cyberattacks, data breaches, and unauthorized access;
• Investigate disputes, chargebacks, and customer complaints;
• Enforce our Terms and Conditions and take action against violators.

4. Information Sharing and Disclosure

winzir does not sell your personal information to third parties. We may share your information with trusted partners and service providers under strict confidentiality agreements, and only to the extent necessary to provide our services and comply with legal obligations:

4.1 Service Providers and Business Partners

• Payment Processors: GCash, Maya, banks, and cryptocurrency payment gateways to process deposits and withdrawals;
• Game Providers: Licensed software providers (Evolution Gaming, Pragmatic Play, BBIN, etc.) who deliver game content and manage game sessions;
• KYC/AML Verification Services: Third-party identity verification and document authentication providers;
• Cloud Hosting Providers: Secure data storage and server infrastructure partners;
• Customer Support Tools: Live chat software, ticketing systems, and CRM platforms;
• Analytics and Marketing Services: Platforms for email delivery, SMS messaging, analytics tracking, and advertising (only with your consent for marketing communications);
• Security and Fraud Prevention Services: Cybersecurity firms, fraud detection systems, and risk assessment providers.

4.2 Legal and Regulatory Authorities

We may disclose your information to government agencies, regulatory bodies, and law enforcement when required by law or when necessary to:

• Comply with PAGCOR reporting requirements and regulatory audits;
• Respond to lawful subpoenas, court orders, or legal process;
• Report suspicious transactions under the Anti-Money Laundering Act;
• Cooperate with law enforcement investigations involving fraud, money laundering, or other criminal activity;
• Protect the rights, property, and safety of winzir, our users, or the public;
• Enforce our Terms and Conditions and investigate violations.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the successor entity. You will be notified via email and platform notice of any such change in ownership or control of your personal data, and your rights under this Privacy Policy will continue to apply.

4.4 With Your Consent

We may share your information with third parties for purposes not described in this Privacy Policy if we obtain your explicit consent at the time of collection or sharing.

5. Data Security Measures

winzir implements industry-standard technical, physical, and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data transmissions between your device and our servers are protected by 256-bit SSL/TLS encryption. Sensitive personal information and financial data are encrypted at rest using AES-256 encryption;
• Access Controls: Strict role-based access controls limit employee and contractor access to personal information on a need-to-know basis. All access is logged and monitored;
• Network Security: Firewalls, intrusion detection systems, DDoS protection, and regular security audits protect our infrastructure from cyberattacks;
• Secure Development Practices: Code reviews, penetration testing, vulnerability assessments, and security-focused development lifecycle;
• Employee Training:
• Employee Training: Regular data protection and security awareness training for all staff with access to user data;
• Third-Party Security: All service providers and partners are required to maintain equivalent security standards through contractual obligations and regular audits;
• Incident Response: Comprehensive data breach response plan and procedures for immediate notification to affected users and regulatory authorities in accordance with NPC requirements;
• Regular Audits: Annual security audits, compliance assessments, and penetration testing by independent third-party security firms.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us of any unauthorized access to your account.

6. Data Retention

winzir retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Account Data: Retained for the duration of your account registration and for seven (7) years after account closure to comply with PAGCOR record-keeping requirements and Philippine tax laws;
• Transaction Records: Financial transaction data, betting history, and payment information retained for ten (10) years as required under the Anti-Money Laundering Act;
• Identity Verification Documents: KYC documents retained for seven (7) years after account closure or last transaction, whichever is later;
• Marketing Communications: Email addresses and marketing preferences retained until you withdraw consent or for three (3) years of inactivity, whichever comes first;
• Customer Support Records: Chat logs, emails, and support tickets retained for three (3) years for quality assurance and dispute resolution purposes;
• Technical Logs: Server logs, IP addresses, and usage data retained for one (1) year unless required for ongoing investigations or legal proceedings.

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with data protection best practices. Anonymized data that cannot be linked back to you may be retained indefinitely for statistical analysis and business intelligence purposes.

7. Your Data Protection Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information. To exercise any of these rights, please contact our Data Protection Officer at [email protected]:

7.1 Right to Access

You have the right to request confirmation of whether we are processing your personal data and to obtain a copy of your personal information in our possession. We will provide this information in a commonly used electronic format within thirty (30) days of your verified request.

7.2 Right to Rectification

You may update or correct inaccurate or incomplete personal information through your account settings or by contacting customer support. We will verify your identity before making any changes to sensitive information.

7.3 Right to Erasure

You may request deletion of your personal information, subject to our legal obligations to retain certain records for regulatory compliance, fraud prevention, and dispute resolution. We cannot delete information required by law to be retained.

7.4 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes at any time by clicking the "unsubscribe" link in promotional emails or adjusting your communication preferences in account settings.

7.5 Right to Data Portability

You may request an export of your personal information in a structured, commonly used, machine-readable format (e.g., CSV, JSON) that can be transferred to another service provider.

7.6 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

7.7 Right to Lodge a Complaint

If you believe winzir has violated your data protection rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines. Contact information for the NPC is available at their official website.

8. International Data Transfers

winzir primarily operates within the Philippines and stores user data on servers located in secure data centers within Philippine territory. However, some of our service providers and technology partners may be located outside the Philippines, which may result in your personal information being transferred to, processed, or stored in other countries.

When we transfer personal information internationally, we ensure adequate protection through:

• Standard contractual clauses approved by the National Privacy Commission;
• Data processing agreements requiring foreign processors to maintain Philippine-equivalent data protection standards;
• Security measures including encryption during transmission and storage;
• Regular audits and compliance assessments of international service providers.

By using winzir services, you acknowledge and consent to such international transfers where necessary to provide our services. Countries outside the Philippines may have different data protection laws, but we require all partners to maintain equivalent security standards.

9. Cookies and Tracking Technologies

winzir uses cookies, web beacons, local storage, and similar technologies to enhance your experience, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on return visits.

9.1 Types of Cookies We Use

• Essential Cookies: Necessary for platform functionality, account authentication, security features, and session management. These cannot be disabled without affecting platform usability;
• Performance Cookies: Collect anonymous information about how you use the platform, including pages visited, time spent, and navigation patterns. Used to improve platform performance and user experience;
• Functionality Cookies: Remember your preferences such as language selection, game favorites, and display settings;
• Marketing Cookies: Track your activity across sessions to deliver personalized promotions and measure advertising effectiveness. These require your consent and can be disabled through browser settings.

9.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications when new cookies are set. Note that disabling essential cookies may prevent you from accessing certain platform features or using our services.

For more information about managing cookies in specific browsers, please consult your browser's help documentation.

10. Protection of Minors

winzir services are intended exclusively for individuals aged twenty-one (21) years or older. We do not knowingly collect personal information from minors under 21 years of age. Our registration process requires date of birth verification, and we may request government-issued identification to confirm age eligibility.

If we become aware that we have inadvertently collected personal information from an individual under 21 years of age, we will immediately take steps to delete such information from our systems and terminate the associated account. Parents or guardians who believe their child has provided personal information to winzir should contact our Data Protection Officer immediately at [email protected].

winzir employs age verification technology and regularly monitors for suspicious account activity that may indicate underage access. Any user found to be underage will have their account permanently closed, all winnings forfeited, and deposits refunded to the payment source (where legally permissible).

11. Changes to This Privacy Policy

winzir reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our practices, services, legal requirements, or regulatory obligations. Material changes that significantly affect how we collect, use, or share your personal information will be communicated through:

• Email notification to your registered email address at least thirty (30) days before the changes take effect;
• Prominent notice on the winzir homepage and platform dashboard;
• In-platform notification requiring acknowledgment before continued use;
• Updated "Last Updated" date at the top of this Privacy Policy document.

Your continued use of winzir services after the effective date of any Privacy Policy changes constitutes acceptance of those changes. If you do not agree with the revised Privacy Policy, you must discontinue use of the Platform and may request account closure and data deletion (subject to legal retention requirements).

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information and your data protection rights.

12. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or our data processing practices, or if you wish to exercise your data protection rights, please contact us through the following channels:

• Data Protection Officer Email: [email protected]
• General Inquiries: [email protected]
• 24/7 Live Chat: Available through your winzir account dashboard
• Postal Address: Available upon request to Data Protection Officer

We will respond to all verified requests within thirty (30) days of receipt. For complex requests requiring additional time, we will notify you of the extension and provide an estimated response date.

National Privacy Commission (Philippines):
If you believe your data protection rights have been violated, you may file a complaint with the NPC through their official website or contact channels.