wtfwin Privacy
Policy

wtfwin is committed to protecting the privacy and personal data of every player who uses our platform. We understand that trust is the foundation of any good relationship — and that trust starts with being transparent about how we handle your information.

This Policy applies to all personal data collected through the wtfwin website, mobile platform, customer support channels, and any other service we operate. It covers data collected from registered players, prospective players who browse the platform, and individuals who contact our support team.

As a platform serving Filipino players, wtfwin operates in accordance with the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC). We take our obligations under this law seriously and have appointed a Data Protection Officer (DPO) to oversee compliance.

Please read this Policy carefully. If you have any questions about how we handle your personal data, you can reach our Data Protection Officer using the contact details provided in Section 13.

wtfwin collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the platform, and from third parties where permitted by law. The categories of data we collect include:

We do not collect special categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required for responsible gaming assessments and only with your explicit consent.

wtfwin uses your personal data only for legitimate, specified purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your data are:

• Account Management: To create, maintain, and manage your wtfwin player account, including identity verification and KYC compliance.
• Service Delivery: To provide access to games, process deposits and withdrawals, and deliver the full range of wtfwin platform features.
• Transaction Processing: To process payments via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to maintain accurate financial records.
• Regulatory Compliance: To fulfill our obligations under Philippine law, including anti-money laundering (AML) requirements, PAGCOR-related compliance, and the Data Privacy Act of 2012.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats.
• Responsible Gaming: To monitor gaming patterns and identify players who may be at risk of problem gambling, enabling us to offer appropriate support tools.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyze usage patterns and improve the performance, features, and user experience of the wtfwin platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your explicit consent to receive such communications. You may opt out at any time.

wtfwin will never use your personal data for purposes beyond those listed above without first obtaining your explicit consent or establishing a new lawful basis for processing.

Under the Philippine Data Privacy Act of 2012, wtfwin must have a lawful basis for processing your personal data. Depending on the specific processing activity, we rely on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and wtfwin — specifically, to operate your account, process transactions, and deliver the Services you have signed up for.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including AML obligations, tax reporting requirements, and PAGCOR-related compliance.
• Legitimate Interests: Processing is necessary for wtfwin's legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — such as sending marketing communications or processing sensitive personal information — we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

wtfwin does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. We may, however, share your personal data with the following categories of recipients where necessary and lawful:

• Payment Processors: We share financial data with payment service providers (such as GCash, PayMaya, and partner banks) solely to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• Identity Verification Providers: We work with licensed KYC and identity verification service providers to verify your identity and age as required by law. These providers process your data under strict confidentiality agreements.
• Game Software Providers: Our platform integrates games from licensed third-party game developers. These providers may receive anonymized or pseudonymized gaming data necessary to operate their games. They do not receive your full identity or financial data.
• Regulatory Authorities: We are required by law to share certain data with Philippine regulatory bodies, including PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC), upon lawful request or as required by our operating obligations.
• Law Enforcement: We may disclose personal data to law enforcement agencies where required by a valid court order, subpoena, or other lawful legal process under Philippine law.
• Professional Advisors: We may share data with our legal counsel, auditors, and other professional advisors where necessary for the conduct of our business, subject to strict confidentiality obligations.

All third parties with whom we share personal data are required to handle that data in accordance with applicable privacy laws and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

wtfwin uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage patterns, and improve your experience. A cookie is a small text file stored on your device when you visit a website.

The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display options, and game history. Disabling these may affect your experience.
• Analytics Cookies: Help us understand how players use the platform — which pages are visited most, where players encounter issues, and how we can improve. Data collected is aggregated and anonymized.
• Marketing Cookies: Used to deliver relevant promotional content within the wtfwin platform. These are only activated with your consent.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the wtfwin platform. For full details on the cookies we use, please refer to our Cookie Notice available in your account settings.

wtfwin retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our general retention periods are as follows:

• Account Data: Retained for the duration of your active account plus five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and related regulations.
• KYC Documents: Retained for five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, to enable us to resolve any subsequent disputes or complaints.
• Marketing Consent Records: Retained for the duration of your consent plus three (3) years, to demonstrate compliance with consent requirements.
• Technical Logs: Retained for twelve (12) months for security and fraud prevention purposes.

When personal data is no longer required, wtfwin will securely delete or anonymize it in accordance with our data disposal procedures. Anonymized data — which can no longer be linked to any individual — may be retained indefinitely for statistical and analytical purposes.

wtfwin implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Sensitive data at rest — including financial information and government ID details — is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo background checks and regular privacy training.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts. Our internal systems require 2FA for all staff accessing player data.
• Regular Security Audits: We conduct regular penetration testing and security audits of our platform infrastructure, carried out by independent third-party security specialists.
• Incident Response: We maintain a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission within 72 hours of becoming aware of the incident, as required by Philippine law.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by wtfwin:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed — which is the primary purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update most account information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request to protect against unauthorized access.

The wtfwin platform is strictly intended for adults aged 21 years and older, consistent with Philippine regulations governing online gambling and casino-style gaming. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be returned to the verified payment source.

If you are a parent or guardian and believe that your child has registered on the wtfwin platform, please contact our support team immediately via live chat or by emailing our Data Protection Officer. We will investigate and take appropriate action without delay.

The wtfwin platform integrates services from carefully selected third-party providers, including game software developers, payment processors, and identity verification services. While we take care to work only with reputable providers, wtfwin is not responsible for the privacy practices of these third parties.

Each third-party service provider we work with is required to:

• Process personal data only for the specific purpose for which it was shared by wtfwin.
• Implement appropriate technical and organizational security measures to protect the data.
• Comply with applicable Philippine data privacy laws and any other relevant regulations.
• Not share or disclose the data to any further third parties without wtfwin's prior written consent.

We periodically review our third-party providers to ensure ongoing compliance with these requirements. If a provider is found to be non-compliant, we will take appropriate action, including terminating the relationship where necessary.

wtfwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When we make material changes to this Policy, we will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the wtfwin platform following the effective date of any update constitutes your acceptance of the revised Policy.

If you do not agree with any changes to this Policy, you may close your account by contacting our support team. We will process your account closure request and handle your remaining data in accordance with our retention obligations.

wtfwin has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data, please contact our DPO directly.

• Data Protection Officer: wtfwin Data Privacy Office
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 directly within the wtfwin platform — the fastest way to reach us.
• Response Time: We aim to respond to all privacy-related requests within 30 days of receipt.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012.