How winlh Approaches Your Privacy
Before reading the full policy, here are the six core data protection principles that guide how winlh handles every Filipino player's personal information.
We Only Collect What We Need
winlh collects personal data strictly to the extent necessary to operate your account, process payments, verify your identity, and comply with applicable Philippine gaming and data protection law. We do not collect personal data speculatively or for purposes unrelated to your use of the platform.
We Never Sell Your Data
winlh does not sell, rent, or trade your personal information to third-party marketers, data brokers, or any entity outside the winlh service ecosystem. Your data is used to serve you as a player — not as a product to be monetized independently of the gaming service you came to use.
Industry-Standard Security
All personal data held by winlh is protected using SSL/TLS encryption in transit, AES-256 encryption at rest, access controls limiting data to authorized personnel only, and regular security audits. Philippine data privacy law (RA 10173) sets minimum standards — winlh meets and exceeds them.
You Control Your Data
Registered winlh players have the right to access, correct, update, and request deletion of their personal data. These rights can be exercised by contacting winlh's support team. winlh will respond to all data rights requests within 30 calendar days in accordance with the Data Privacy Act of the Philippines.
Full Transparency on Third Parties
Where winlh shares data with third-party service providers — such as payment processors for GCash and BPI transactions, or identity verification services — we clearly disclose this. All third-party processors operate under data processing agreements that bind them to the same data protection standards winlh applies internally.
Breach Notification Commitment
In the unlikely event of a personal data breach that poses a real risk to your rights, winlh will notify affected players and the National Privacy Commission of the Philippines within 72 hours of becoming aware of the breach — consistent with the obligations set out in Republic Act No. 10173 and its implementing rules.
Summary: winlh collects the personal data necessary to provide you with a secure online gaming experience. We use it to operate your account, process transactions, verify your identity, and comply with Philippine law. We do not sell your data. You have rights over your data, and we honour them. The full details are below.
1. Introduction
This Privacy Policy ("Policy") describes how winlh ("winlh," "we," "us," "our") — the operator of the online gaming platform accessible at https://winlh.cam ("the Platform") — collects, uses, discloses, stores, and protects the personal information of individuals who access or use the Platform, including registered players and site visitors.
This Policy is issued pursuant to Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations. winlh is committed to full compliance with the DPA and the directives of the National Privacy Commission of the Philippines ("NPC").
By registering a winlh account, depositing funds, or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy is incorporated by reference into the winlh Terms & Conditions.
2. Data Controller
For the purposes of the Data Privacy Act of the Philippines and this Policy, winlh is the personal information controller responsible for the personal data processed in connection with the Platform. winlh has designated a Data Protection Officer ("DPO") responsible for overseeing data protection compliance and serving as the primary point of contact for data-related inquiries and complaints.
Contact details for the winlh Data Protection Officer are available upon request by emailing the address stated in Section 14 of this Policy. All data-related requests, including access, correction, and deletion requests, should be directed to the DPO contact.
3. Personal Data We Collect
winlh collects the following categories of personal data in connection with your use of the Platform:
3.1 Identity & Registration Data
- Full legal name as appearing on a government-issued Philippine identification document
- Date of birth (used to verify compliance with the 21+ age requirement)
- Gender (optional, collected only if voluntarily provided)
- Residential address, including barangay, city, and province
- Nationality and citizenship status
3.2 Contact Data
- Email address (primary account communication channel)
- Mobile number (used for OTP verification and optional 2FA)
3.3 Identity Verification (KYC) Data
- Copies of government-issued photo ID (Passport, National ID, Driver's License, SSS/GSIS/PhilHealth ID)
- Proof of address documents (utility bills, bank statements, or barangay clearance)
- Payment account verification documents (GCash or bank account screenshots for ownership verification)
3.4 Financial & Transaction Data
- Deposit and withdrawal transaction history including amounts, timestamps, and payment method used
- Payment method details (GCash-registered mobile number, bank account name — winlh does not store full card numbers)
- Account balance history
3.5 Gaming & Activity Data
- Game session logs including games played, bet amounts, outcomes, and session duration
- Bonus and promotion history
- Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)
3.6 Technical & Device Data
- IP address and general geographic location derived from IP
- Device type, operating system, and browser information
- Login timestamps and session duration
- Cookie identifiers and session tokens (see Section 11)
3.7 Communications Data
- Records of customer support interactions via live chat, Messenger, Viber, and email
- Feedback and survey responses, where voluntarily submitted
winlh does not collect sensitive personal information as defined under the DPA — including racial or ethnic origin, political opinions, religious beliefs, health information, or sexual life — except where directly relevant to a responsible gaming assessment and with your explicit consent.
4. How We Collect Your Data
winlh collects personal data through the following means:
- Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions.
- Automatically: Through cookies, session tokens, server logs, and analytics tools as you navigate and interact with the Platform. See Section 11 for more on cookies.
- From third-party verification services: winlh may receive identity verification results from licensed KYC service providers where automated document verification is used to supplement or expedite manual review.
- From payment processors: Transaction confirmation data is received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners in connection with deposit and withdrawal processing.
5. How We Use Your Personal Data
winlh processes your personal data for the following specific purposes:
- Account creation and management: To register, authenticate, and maintain your winlh player account.
- Age and identity verification: To confirm that you meet the minimum 21-year age requirement and to comply with KYC obligations under applicable Philippine gaming regulations.
- Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, and card payments.
- Game provision: To operate and deliver the gaming services you access, including slots, live casino, sports betting, and bingo.
- Bonus and promotion administration: To credit eligible bonuses, track wagering requirement completion, and administer promotional campaigns.
- Customer support: To respond to inquiries, resolve disputes, and provide technical assistance.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal activity.
- Responsible gaming: To monitor gaming behavior for signs of problem gambling, enforce deposit and loss limits, and administer self-exclusion arrangements.
- Legal compliance: To comply with the Data Privacy Act, anti-money laundering regulations, and any applicable directives from the National Privacy Commission or other Philippine regulatory bodies.
- Platform improvement: To analyze aggregated, anonymized usage patterns for the purpose of improving Platform performance, game selection, and user experience.
- Marketing communications: To send promotional offers and platform updates to players who have opted in to receive such communications. Players may opt out at any time.
winlh does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review and an opportunity for you to contest the decision.
6. Legal Basis for Processing
winlh processes your personal data on the following legal bases as established under the Data Privacy Act of the Philippines:
- Contractual necessity: Processing required to enter into and perform the contract represented by your player account agreement with winlh, including account management, payment processing, and game provision.
- Legal obligation: Processing required to comply with applicable laws, including KYC verification requirements, anti-money laundering obligations, and data retention mandates.
- Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your rights and freedoms.
- Consent: Processing for marketing communications and any optional data collection, where you have given specific, informed, and freely given consent. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.
7. Data Sharing & Third Parties
winlh does not sell, rent, or trade your personal information. We share personal data with third parties only in the following limited circumstances:
7.1 Payment Processors
To process deposits and withdrawals, winlh shares necessary transaction data with payment service providers including GCash (Mynt), PayMaya, BPI, BDO, Metrobank, and InstaPay operators. These providers are licensed financial institutions subject to Bangko Sentral ng Pilipinas (BSP) regulation and their own data protection obligations.
7.2 KYC & Verification Services
winlh may use third-party identity verification service providers to assist with document authentication and KYC processing. These providers are bound by strict data processing agreements and may only use your data for identity verification purposes on winlh's instruction.
7.3 Legal & Regulatory Authorities
winlh will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by law, court order, or where winlh has a good-faith belief that disclosure is necessary to prevent fraud, protect the rights of winlh or other players, or comply with a legal obligation.
7.4 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets involving winlh, personal data held by winlh may be transferred to the successor entity, subject to that entity adopting data protection standards at least equivalent to those described in this Policy. Affected players will be notified of any such transfer prior to its completion where practicable.
Important: winlh will never share your personal data with third-party gambling operators, advertising networks, or data brokers for their own commercial purposes. Any third party receiving your data from winlh is contractually obligated to use it only for the specific purpose for which it was shared.
8. Data Retention
winlh retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention periods:
- Active account data: Retained for the duration of your registered account plus five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
- KYC documents: Retained for five (5) years from the date of account closure or the date of the last financial transaction, whichever is later.
- Transaction records: Retained for five (5) years from the date of the transaction.
- Customer support records: Retained for three (3) years from the date of the interaction.
- Marketing consent records: Retained until consent is withdrawn plus one (1) year thereafter to evidence the history of consent status.
- Technical logs: Retained for 12 months, after which logs are anonymized or deleted.
Upon expiry of the relevant retention period, winlh will securely delete or anonymize your personal data unless a longer retention period is required by applicable Philippine law.
9. Data Security
winlh implements technical and organizational security measures appropriate to the nature and sensitivity of the personal data it holds. These measures include:
- SSL/TLS encryption for all data transmitted between your device and the winlh Platform
- AES-256 encryption for personal data stored in winlh's databases
- Role-based access controls ensuring that employees can only access personal data necessary for their specific job functions
- Two-factor authentication enforced for all winlh staff with access to production systems containing personal data
- Regular penetration testing and security audits by independent third-party security specialists
- Incident response procedures aligned with NPC breach notification requirements
While winlh takes all reasonable steps to protect your personal data, no system is completely impenetrable. Players are encouraged to use strong, unique passwords, enable two-factor authentication on their winlh account, and report any suspected unauthorized access to winlh support immediately.
10. Your Data Rights
Under the Data Privacy Act of the Philippines (RA 10173), registered winlh players have the following rights with respect to their personal data:
| Right | What It Means | How to Exercise |
|---|---|---|
| Right to Access | Request a copy of the personal data winlh holds about you, including the purposes for which it is processed. | Contact DPO via support email |
| Right to Correction | Request correction of inaccurate or incomplete personal data in your winlh account. | Account Settings or support |
| Right to Erasure | Request deletion of your personal data where there is no legitimate legal or contractual basis for continued processing. | Contact DPO via support email |
| Right to Object | Object to processing based on legitimate interests or for direct marketing purposes. | Contact support or unsubscribe link |
| Right to Data Portability | Receive your personal data in a structured, machine-readable format for transfer to another service where technically feasible. | Contact DPO via support email |
| Right to Complain | Lodge a complaint with the National Privacy Commission of the Philippines if you believe winlh has mishandled your personal data. | Direct to NPC (Philippines) |
winlh will respond to all data rights requests within thirty (30) calendar days of receipt. Where requests are complex or numerous, winlh may extend the response period by a further thirty (30) days with prior notification. Requests can be submitted via the winlh support email listed in Section 14.
11. Cookies & Tracking Technologies
winlh uses cookies and similar tracking technologies on the Platform to support essential functionality, enhance your experience, and understand how the Platform is used. The following categories of cookies are used:
11.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function correctly. They maintain your login session, remember your language preferences, and support security features such as session tokens and CSRF protection. These cookies cannot be disabled without breaking core Platform functionality.
11.2 Functional Cookies
Functional cookies remember your preferences — such as responsible gaming settings, game display preferences, and notification preferences — across sessions. They are not used for tracking purposes.
11.3 Analytical Cookies
winlh uses anonymized analytics cookies to understand aggregate Platform usage patterns, including which games are most popular, which pages generate the most support queries, and how players navigate the site. This data is used exclusively to improve the Platform and is never associated with individual player identities for marketing purposes.
Players may manage cookie preferences through their browser settings. Disabling strictly necessary cookies may impair Platform functionality. winlh does not use third-party advertising or behavioral tracking cookies.
12. Minors
winlh's gaming services are strictly available to persons who are 21 years of age or older, in accordance with applicable Philippine gaming regulations. winlh does not knowingly collect personal data from persons under 21 years of age. If winlh becomes aware that a registered account belongs to a minor, that account will be immediately suspended, KYC verification will be initiated, and if underage use is confirmed, the account will be permanently closed with any deposited funds returned less any bonuses credited.
Parents and guardians: If you believe a minor has registered a winlh account using false age information, please contact winlh support immediately via live chat or email at [email protected]. winlh treats underage gambling as a serious matter and will act on any such report promptly.
13. Changes to This Privacy Policy
winlh reviews this Privacy Policy periodically and will update it as necessary to reflect changes in law, regulatory guidance, or winlh's data processing practices. Material changes to this Policy will be communicated to registered players via email to the address associated with their account no fewer than seven (7) days before the changes take effect.
The "Last Updated" date at the top of this Policy indicates when the most recent version was published. Continued use of the Platform following the effective date of any changes constitutes acceptance of the revised Policy. If you do not agree to the revised Policy, please contact winlh to discuss account closure options.
14. Contact & Complaints
For all data privacy-related inquiries, requests to exercise your data rights, or complaints regarding winlh's handling of your personal data, please contact the winlh Data Protection Officer through the following channels:
- 24/7 Live Chat: Available inside your winlh account dashboard — fastest response for general inquiries
- Messenger & Viber: winlh official support pages
- Email: [email protected] — for formal data rights requests and DPO inquiries
If you are not satisfied with winlh's response to a data privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the government authority responsible for administering and enforcing the Data Privacy Act of 2012. Information on filing a complaint with the NPC is publicly available through official Philippine government channels.
winlh aims to resolve all privacy inquiries within 30 days. For time-sensitive matters — such as suspected unauthorized access to your account — please use the 24/7 live chat for the fastest possible response.
Privacy at a Glance
Three quick summaries of the winlh privacy areas Filipino players ask about most.
What winlh Stores
winlh stores your registration details, KYC documents, transaction history, and gaming activity logs — the minimum required to operate a licensed, secure online gaming platform for Filipino players.
- Name, DOB, address, contact details
- Government ID copies for KYC
- Transaction and game session records
- Never stores full card numbers
Who We Share With
winlh shares data only with parties essential to running the platform securely and legally — never with advertisers or data brokers for commercial gain.
- GCash, PayMaya, BPI, BDO payments
- Licensed KYC verification services
- Regulatory authorities when required by law
- Never sold to third-party marketers
Rights Under RA 10173
As a Filipino player, the Data Privacy Act gives you clear, enforceable rights over your personal data held by winlh — and winlh is committed to honouring all of them.
- Access — request a copy of your data
- Correction — fix inaccurate details
- Erasure — request data deletion
- Complain to NPC if unsatisfied
Play on winlh — Securely & Privately
Your personal data is in safe hands at winlh. We're transparent about what we collect, careful about how we use it, and committed to your rights as a Filipino player under Philippine data privacy law.