winmaya Privacy Policy

When you register and use winmaya, we collect the personal information necessary to operate your account and comply with Philippineregulations. This includes your full name, date of birth, email address, mobile number, and a government-issued ID for identity verification purposes. We also collect your billing and payment details — such as your GCash or Maya account reference — solely to process deposits and withdrawals securely. When you play on our platform, we automatically log technical data including your device type, IP address, browser version, and session activity to keep your account safe and detect unusual behaviour. All information collected is limited to what is strictly necessary, and we never ask for data that is not relevant to your account or our legal obligations under the Philippines Data Privacy Act of 2012.

winmaya uses your personal data exclusively to deliver and improve our services to Filipino players. Your account information is used to verify your identity, process transactions, and ensure you can access your winnings without delays. We use session and device data to detect fraud, prevent unauthorised access, and maintain the integrity of our platform for all players. Aggregated, anonymised usage data may be used internally to improve game performance, platform features, and the overall mobile experience. We may also use your contact details to send you important account notifications, security alerts, or updates about changes to our services — but we will never send unsolicited marketing messages without your explicit consent.

We do not sell, rent, or trade your personal data to any third party for commercial or marketing purposes — full stop. Your information may be shared with trusted service providers who assist us in operating the platform, such as payment processors and identity verification partners, but only under strict data processing agreements that prohibit them from using your data for any other purpose. We may also disclose your information to Philippine regulatory authorities or law enforcement agencies when required by law, a valid court order, or to prevent fraud and protect the safety of our players. In all cases, we share only the minimum data necessary to fulfil the specific legal or operational requirement. Any third-party partner we work with is required to maintain security standards equivalent to our own.

Security is built into every layer of the winmaya platform, from the moment you register to every transaction you make. All data transmitted between your device and our servers is protected using industry-standard TLS encryption, ensuring that your personal and financial information cannot be intercepted in transit. Sensitive data stored on our systems — including payment references and identity documents — is encrypted at rest using robust cryptographic standards. We conduct regular internal security reviews and work with external specialists to identify and address potential vulnerabilities before they can be exploited. Our team is trained in data handling best practices, and access to player data is restricted on a strict need-to-know basis within our organisation.

We retain your personal data only for as long as it is necessary to provide our services and meet our legal obligations under Philippine law. Account information is kept for the duration of your active account and for a defined period after account closure, as required by anti-money laundering regulations and financial record-keeping rules applicable in the Philippines. Transaction records are retained for a minimum of five years in line with regulatory requirements. Once the applicable retention period has expired, your data is securely deleted or anonymised so that it can no longer be linked back to you. If you request account closure, we will confirm the applicable retention period and the date on which your data will be permanently removed.

As a player based in the Philippines, you have clear rights over your personal data under the Data Privacy Act of 2012. You have the right to access the personal information we hold about you, to request corrections if any details are inaccurate, and to ask us to delete your data where there is no longer a legal basis for us to retain it. You may also object to certain types of processing, such as receiving marketing communications, and we will honour that request promptly. If you believe your data rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. To exercise any of these rights, simply contact our support team at [email protected] and we will respond within a reasonable timeframe.