At wintaya, your privacy is not an afterthought — it is a core part of how we operate. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a wintaya player under Philippine law.
1.1 This Privacy Policy is issued by wintaya ("wintaya," "we," "us," or "our"), the operator of the online gaming platform accessible at wintaya.org. wintaya is the data controller responsible for the personal data of players and visitors who use the wintaya platform.
1.2 wintaya operates in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) of the Philippines, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). We are committed to upholding the privacy rights of every Filipino player and visitor to our platform.
1.3 If you have any questions or concerns about this Privacy Policy or how wintaya handles your personal data, you may contact our Data Protection Officer at [email protected].
2.1 wintaya collects the following categories of personal data from players and platform visitors:
| Category | Examples |
|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID number (e.g., Philippine passport, SSS, UMID, driver's license) |
| Contact Data | Email address, mobile number, residential address (including city, province, and postal code) |
| Account Data | Username, encrypted password, account preferences, communication preferences |
| Financial Data | Payment method details (GCash number, PayMaya account, bank account details for BPI, BDO, Metrobank), transaction history, deposit and withdrawal records |
| Gaming Data | Game history, wager amounts, win/loss records, session duration, bonus usage |
| Technical Data | IP address, device type, browser type and version, operating system, time zone, screen resolution |
| Usage Data | Pages visited, features used, click patterns, referral source, session timestamps |
| Communications Data | Records of your correspondence with wintaya support, including emails and chat transcripts |
| Verification Data | Copies of identity documents submitted for KYC verification, selfie photographs where required |
2.2 wintaya does not intentionally collect sensitive personal information as defined under the DPA (such as health data, religious beliefs, or political affiliations) unless specifically required by law or regulation.
3.1 wintaya collects personal data through the following means:
3.2 Where wintaya collects data from third-party sources, we ensure that such third parties have the legal right to share that data with us and that the sharing is consistent with applicable data privacy laws.
4.1 wintaya uses your personal data for the following purposes:
5.1 wintaya processes your personal data on the following legal bases under the Data Privacy Act of 2012:
6.1 wintaya does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:
6.2 All third parties with whom wintaya shares personal data are required to handle that data in accordance with applicable data privacy laws and wintaya's data protection standards.
7.1 wintaya uses cookies and similar tracking technologies on wintaya.org to enhance your experience, maintain your session, and analyze platform usage. The following types of cookies are used:
7.2 By continuing to use wintaya.org, you consent to the use of cookies as described in this Privacy Policy. You may manage your cookie preferences through your browser settings; however, disabling essential cookies may affect your ability to use the wintaya platform.
7.3 wintaya does not use third-party advertising cookies or behavioral tracking cookies for the purpose of serving targeted advertisements on external websites.
8.1 wintaya retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements.
8.2 In general, wintaya retains player account data for a minimum of five (5) years following account closure, in accordance with Philippine AML regulations and gaming regulatory requirements. Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
8.3 Where personal data is no longer required for any lawful purpose, wintaya will securely delete or anonymize that data in accordance with its data retention and disposal procedures.
8.4 In some circumstances, wintaya may retain personal data for longer periods where required by law, regulation, or court order, or where retention is necessary for the establishment, exercise, or defense of legal claims.
9.1 wintaya implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
9.2 Despite these measures, no method of transmission over the internet or electronic storage is completely secure. wintaya cannot guarantee the absolute security of your personal data. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, wintaya will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.
9.3 You are responsible for maintaining the confidentiality of your wintaya account credentials. Please notify us immediately at [email protected] if you suspect any unauthorized access to your account.
10.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by wintaya:
10.2 To exercise any of the above rights, please submit a written request to [email protected]. wintaya will respond to all data subject requests within thirty (30) days of receipt, in accordance with the DPA and NPC regulations. We may require you to verify your identity before processing your request.
11.1 The wintaya platform is strictly intended for persons aged 21 years and above. wintaya does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you are not permitted to register an account or use the wintaya platform.
11.2 If wintaya becomes aware that it has inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds in such an account will be returned to the payment method used for deposit, less any winnings generated.
11.3 If you believe that a minor has registered an account on wintaya, please notify us immediately at [email protected].
12.1 wintaya's primary operations and data processing activities are based in the Philippines. However, some of wintaya's third-party service providers (such as cloud hosting providers and game software providers) may process personal data outside of the Philippines.
12.2 Where personal data is transferred outside the Philippines, wintaya ensures that appropriate safeguards are in place to protect that data, including contractual clauses that require the recipient to process the data in accordance with standards equivalent to those required under the Data Privacy Act of 2012.
12.3 By using the wintaya platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where wintaya's service providers are located, subject to the safeguards described in this section.
13.1 wintaya may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or platform features. The effective date at the top of this page indicates when the current version came into force.
13.2 Where changes to this Privacy Policy are material, wintaya will notify registered players via email or an on-platform notification prior to the changes taking effect. Your continued use of the wintaya platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy.
13.3 The most current version of this Privacy Policy will always be available at wintaya.org/privacy-policy.
14.1 If you have any questions, concerns, or requests regarding this Privacy Policy or wintaya's data processing practices, please contact our Data Protection Officer:
14.2 You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through its official government channels.
Six commitments wintaya makes to every player regarding the handling of personal data.
All data transmitted between your device and wintaya.org is encrypted using TLS. Sensitive data at rest — including financial records and identity documents — is encrypted at the storage level.
wintaya will never sell, rent, or trade your personal data to advertisers or data brokers. Your information is used solely to operate the platform and meet our legal obligations.
wintaya's data practices are fully aligned with Republic Act No. 10173 (Data Privacy Act of 2012) and the regulations of the National Privacy Commission of the Philippines.
Access, correct, or delete your data at any time. wintaya responds to all data subject requests within 30 days. Just email [email protected] with your request.
wintaya only collects the personal data that is strictly necessary to operate the platform, verify your identity, process payments, and comply with regulatory requirements.
In the unlikely event of a data breach affecting your personal data, wintaya will notify you and the National Privacy Commission promptly, in full compliance with DPA requirements.
Your data is safe with us. Sign in to your wintaya account and enjoy hundreds of games knowing your privacy is protected every step of the way.
Must be 21 or older to play. Please game responsibly.