winforlife Privacy Policy

1. Who We Are / Data Controller

winforlife ("winforlife," "we," "us," "our") is the data controller responsible for the personal information processed through the winforlife online gaming platform at winforlife.asia. winforlife is a PAGCOR-licensed online gaming operator serving registered players in the Philippines.

As data controller, winforlife determines the purposes and means of processing your personal information and is responsible for ensuring that processing is carried out in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) ("DPA"), its Implementing Rules and Regulations, and applicable PAGCOR regulatory requirements.

winforlife has designated a Data Privacy Officer ("DPO") who is responsible for overseeing data protection compliance. Contact details for the DPO are provided in Section 13 of this Policy.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a winforlife account or use the Platform, you provide us with the following categories of personal information:

2.2 Information Collected Automatically

When you access and use winforlife, certain technical information is collected automatically by our systems:

• IP address and approximate geolocation (city/region level)
• Device type, operating system version, and browser type and version
• Pages visited, features accessed, time spent on page, and navigation path within the Platform
• Session start and end times, login timestamps, and logout events
• Cookies and similar tracking technologies (see Section 8)

2.3 Information from Third Parties

winforlife may receive personal information about you from third-party sources in limited circumstances, including: payment service providers (e.g., GCash, PayMaya, BPI) for transaction verification and fraud detection; identity verification service providers used in the KYC process; and PAGCOR or other regulatory authorities in the course of compliance activities.

3. How We Use Your Information

winforlife uses your personal information for the following purposes:

• Account Management: Creating and maintaining your winforlife Player account, authenticating your identity upon each login, and managing account security including two-factor authentication.
• Transaction Processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other approved Philippine payment methods; verifying payment details; and maintaining accurate financial records in PHP.
• Regulatory Compliance: Fulfilling winforlife's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA) as amended by RA 10365 and RA 11521, and reporting requirements to the Anti-Money Laundering Council (AMLC) where applicable.
• Age Verification & Responsible Gaming: Verifying that all Players are 21 years of age or older as required under PAGCOR regulations; monitoring for indicators of problem gambling; enforcing responsible gaming limits and self-exclusion orders set by Players.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, account takeover, and other prohibited conduct on the Platform.
• Customer Support: Responding to queries, complaints, and disputes submitted via live chat or email ([email protected]).
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game selection, platform performance, and user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Players who have provided their consent to receive such communications. You may withdraw consent at any time via your account settings.

4. Legal Bases for Processing

Under the Data Privacy Act of 2012, winforlife processes your personal information on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you (the winforlife Terms and Conditions) — including account management, game provision, and payment processing.
• Legal Obligation: Processing is required to comply with our obligations under PAGCOR licensing, the AMLA, and other applicable Philippine laws and regulations.
• Legitimate Interests: Processing is necessary for our legitimate interests in preventing fraud, ensuring platform security, and improving our services, provided such interests do not override your privacy rights.
• Consent: For marketing communications and non-essential cookies, processing is based on your freely given, specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

5. Disclosure of Your Information

winforlife does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Your personal information may be disclosed to the following categories of recipients in limited, necessary circumstances:

• Payment Processors: GCash (GXchange Inc.), PayMaya Philippines Inc., BPI, BDO Unibank, Metrobank, UnionBank — strictly for transaction processing and fraud verification purposes.
• Identity Verification Providers: Third-party KYC and identity verification service providers engaged by winforlife to assist with account verification and AMLA compliance.
• Regulatory Authorities: PAGCOR, the AMLC, the National Privacy Commission ("NPC"), the Bureau of Internal Revenue (BIR), and other Philippine government agencies, where required by law or regulatory directive.
• Technology Service Providers: Cloud hosting providers, game studios (under data processing agreements), and cybersecurity service providers who process data strictly on winforlife's behalf and under confidentiality obligations.
• Law Enforcement: Philippine law enforcement agencies or courts where disclosure is required by valid legal process, court order, or to prevent imminent harm.

6. Data Retention

winforlife retains your personal information for as long as your Account is active and for a period thereafter as required by applicable law and regulatory requirements. Specific retention periods include:

• Account & KYC Records: Retained for a minimum of five (5) years following Account closure, as required under AMLA regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with PAGCOR and AMLC requirements.
• Gaming Activity Logs: Retained for a minimum of three (3) years for PAGCOR audit purposes and dispute resolution.
• Customer Support Correspondence: Retained for two (2) years from the date of last correspondence.
• Marketing Consent Records: Retained for the duration of active consent plus two (2) years to demonstrate compliance.

After the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

7. Data Security

winforlife implements appropriate technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and the winforlife Platform.
• Encrypted storage of sensitive personal data including passwords (stored as salted hashes, never in plain text) and financial account details.
• Access controls limiting internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging.
• Regular penetration testing and vulnerability assessments conducted by qualified cybersecurity professionals.
• Two-factor authentication (2FA) available to Players for Account login security, and mandatory for internal administrative access.
• Incident response procedures in place to detect, contain, and notify the National Privacy Commission and affected Players of any personal data breach within the timeframes prescribed by the DPA.

While winforlife takes all reasonable steps to protect your data, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their winforlife accounts and to enable 2FA in Account settings.

8. Cookies & Tracking Technologies

winforlife uses cookies and similar technologies (local storage, session tokens) on the Platform for the following purposes:

You can manage non-essential cookie preferences through the Cookie Settings panel accessible from the Platform footer. Note that disabling functional cookies may affect your Platform experience. Strictly necessary cookies cannot be disabled as they are essential to Platform operation.

9. Your Rights Under Philippine Data Privacy Law

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal information held by winforlife:

• Right to be Informed: The right to know what personal data we collect, how it is used, and who it is shared with — as set out in this Privacy Policy.
• Right of Access: The right to obtain a copy of the personal data we hold about you and information about how it is being processed.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You can update most profile information directly within your Account settings.
• Right to Erasure / Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations under the AMLA and PAGCOR regulations.
• Right to Object: The right to object to processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) at www.privacy.gov.ph if you believe winforlife has violated your data privacy rights.

10. Children's Privacy

winforlife does not knowingly collect or process personal information from persons under 21 years of age. The Platform is strictly for adult users who meet the minimum age requirement of 21 years under PAGCOR regulations and Philippine law. If winforlife becomes aware that personal information has been collected from a person under 21, the Account will be immediately suspended, the data will be securely deleted, and any balance will be returned to the verified payment source. If you believe a minor has registered on winforlife, please contact our support team immediately at [email protected].

11. International Data Transfers

Some of winforlife's technology service providers and game studio partners may process personal data outside of the Philippines. Where such transfers occur, winforlife ensures that adequate data protection safeguards are in place, including contractual data processing agreements that impose obligations equivalent to those required under the Data Privacy Act of 2012, as required by the National Privacy Commission's guidelines on cross-border data transfers. winforlife does not transfer personal data to countries without an adequate level of data protection unless contractual safeguards are in place.

12. Changes to This Policy

winforlife may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Where changes are material, winforlife will notify registered Players via email to the address on file or through a prominent notice on the Platform at next login. Continued use of the winforlife Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

13. Contact & Data Privacy Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by winforlife, please contact our Data Privacy Officer:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. winforlife is registered with the NPC as required under the Data Privacy Act of 2012.