Summary: winbest ("we," "us," "our") is committed to protecting the privacy and personal data of every player on the winbest platform. This Privacy Policy describes how winbest collects, uses, stores, and shares your personal information when you access winbest.app or use any winbest service. By using winbest, you consent to the practices described in this Policy.
Section 01
Introduction
winbest operates the online gaming platform accessible at winbest.app, offering Filipino players a wide range of casino games, live dealer tables, slots, bingo, and sports betting. In the course of providing these services, winbest necessarily collects and processes certain personal data about its players and website visitors.
This Privacy Policy has been prepared in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations. winbest is committed to upholding the rights of data subjects as defined under the DPA and to processing personal data only in a manner that is lawful, fair, and transparent.
This Policy applies to all personal data collected by winbest through the winbest website, mobile platform, customer support channels, and any other winbest service. Please read this Policy carefully. If you have questions about how winbest handles your personal data, contact our Data Protection Officer using the details in Section 14.
Section 02
Data Controller
For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for your personal data is winbest, the operator of the winbest online gaming platform at winbest.app.
winbest has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable Philippine data protection law. You may contact the winbest DPO at any time using the contact details provided in Section 14 of this Policy.
Section 03
Personal Data We Collect
winbest collects the following categories of personal data from players and website visitors:
- Identity Data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., Philippine passport number, SSS number, PhilSys ID number, driver's license number).
- Contact Data: Email address, Philippine mobile number, and residential address (including city, province, and postal code).
- Account Data: winbest username, encrypted password, account registration date, account status, and communication preferences.
- Financial Data: Payment method details (e.g., GCash account number, PayMaya account, BPI/BDO/Metrobank account details), deposit and withdrawal history, transaction amounts, and currency information.
- Gaming Data: Game history, bet amounts, win/loss records, session duration, bonus usage, and responsible gaming tool settings.
- Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and time zone.
- Usage Data: Pages visited on winbest.app, features used, links clicked, search queries, and navigation patterns within the winbest platform.
- Communications Data: Records of your communications with winbest customer support, including live chat transcripts,
email correspondence, and support ticket history.
- Verification Data: Copies of government-issued identification documents, selfies or photographs submitted for identity verification, and proof of payment method ownership submitted during KYC review.
winbest only collects personal data that is necessary for the purposes described in this Policy. We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law (for example, where a player discloses a gambling-related health concern through our Responsible Gaming tools).
Section 04
How We Collect Your Data
winbest collects personal data through the following means:
- Direct Collection: Data you provide when registering a winbest account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
- Automated Collection: Technical and usage data collected automatically when you access winbest.app, including through cookies, web beacons, and server logs. See Section 10 for details on our cookie practices.
- Third-Party Sources: Identity verification data from third-party KYC service providers; fraud detection signals from payment processors; and publicly available information used to verify your identity or comply with anti-money laundering obligations.
- Payment Processors: Transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners when you make deposits or withdrawals on winbest.
Section 05
Purpose of Processing
winbest processes your personal data for the following purposes:
- Account Management: To register, verify, maintain, and manage your winbest player account.
- Service Delivery: To provide you with access to winbest games, process your bets, calculate winnings, and deliver the full range of winbest services.
- Financial Transactions: To process deposits, withdrawals, and bonus credits; to verify payment method ownership; and to maintain accurate financial records.
- Identity Verification (KYC): To verify your identity and age (21+) in compliance with Philippine gaming regulations and anti-money laundering requirements.
- Legal Compliance: To comply with applicable Philippine laws and regulations, including the Data Privacy Act, Anti-Money Laundering Act, and gaming regulations administered by relevant Philippine authorities.
- Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the winbest platform.
- Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
- Responsible Gaming: To monitor gaming behavior for signs of problem gambling and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
- Marketing Communications: To send you promotional offers, bonus notifications, and winbest news — but only where you have given your explicit consent to receive such communications.
- Platform Improvement: To analyze usage patterns, conduct research, and improve the winbest platform, games, and user experience.
Marketing Opt-Out: You can withdraw your consent to receive marketing communications from winbest at any time by updating your preferences in your winbest account settings or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.
Section 06
Legal Basis for Processing
winbest processes your personal data on the following legal bases under the Data Privacy Act of 2012:
- Contractual Necessity: Processing is necessary to perform the contract between you and winbest — specifically, to operate your account, process transactions, and deliver gaming services.
- Legal Obligation: Processing is required to comply with winbest's legal obligations under Philippine law, including KYC, AML, and gaming regulatory requirements.
- Legitimate Interests: Processing is necessary for winbest's legitimate interests in fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and interests.
- Consent: For marketing communications and non-essential cookies, winbest relies on your freely given, specific, and informed consent. You may withdraw this consent at any time.
Section 07
Data Sharing & Disclosure
winbest does not sell, rent, or trade your personal data to third parties. winbest may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
- Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners, to process your deposits and withdrawals.
- KYC & Identity Verification Providers: Third-party identity verification services used to confirm your identity and age in compliance with Philippine regulations.
- Fraud Prevention Services: Third-party fraud detection and anti-money laundering service providers who assist winbest in identifying and preventing prohibited activity.
- Game Content Providers: Game software providers whose titles are available on the winbest platform may receive limited technical data (such as session tokens) necessary to deliver their games.
- IT & Cloud Service Providers: Hosting, database, and infrastructure providers who process data on winbest's behalf under strict data processing agreements.
- Regulatory & Law Enforcement Authorities: Philippine government agencies, law enforcement, and gaming regulators where disclosure is required by law, court order, or regulatory instruction.
All third parties with whom winbest shares personal data are required to handle that data in accordance with applicable Philippine data protection law and are prohibited from using it for any purpose other than the specific purpose for which it was shared.
Section 08
Data Retention
winbest retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:
- Active Account Data: Retained for the duration of your winbest account and for a period of five (5) years following account closure, in compliance with Philippine AML and gaming regulatory requirements.
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of the Philippines.
- KYC Verification Documents: Retained for five (5) years following account closure or the completion of the relevant transaction, whichever is later.
- Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
- Marketing Consent Records: Retained for the duration of your marketing consent and for three (3) years following withdrawal of consent, as evidence of your consent history.
- Technical & Usage Data: Retained for up to twelve (12) months from collection, after which it is anonymized or deleted.
Upon expiry of the applicable retention period, winbest will securely delete or anonymize your personal data in accordance with our data disposal procedures.
Section 09
Data Security
winbest implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
- 256-Bit SSL/TLS Encryption: All data transmitted between your device and the winbest platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
- Encryption at Rest: Sensitive personal data stored in winbest databases is encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data is restricted to winbest personnel and authorized third parties who have a legitimate need to access it. All access is logged and audited.
- Two-Factor Authentication: winbest offers two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorized access.
- Regular Security Audits: winbest conducts regular security assessments and penetration testing to identify and remediate vulnerabilities in the winbest platform.
- Staff Training: All winbest personnel who handle personal data receive regular data protection and security training.
While winbest takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winbest will notify you and the National Privacy Commission of the Philippines in accordance with the requirements of the Data Privacy Act.
Section 10
Cookies & Tracking Technologies
winbest uses cookies and similar tracking technologies on the winbest.app website to enhance your experience, maintain your session, and analyze platform usage. The following types of cookies are used by winbest:
- Strictly Necessary Cookies: Essential for the winbest platform to function. These cookies enable core features such as keeping you logged in, maintaining your session security, and remembering your language preferences. These cookies cannot be disabled.
- Performance & Analytics Cookies: Used to collect anonymized information about how players use the winbest platform, such as which pages are visited most frequently and how long sessions last. This data helps winbest improve the platform experience.
- Functional Cookies: Used to remember your preferences and personalize your winbest experience, such as your preferred game categories or display settings.
- Marketing Cookies: Used only where you have given explicit consent, to deliver relevant winbest promotional content. winbest does not use marketing cookies to track your activity across third-party websites.
You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the winbest platform. For more information on managing cookies in your browser, refer to your browser's help documentation.
Section 11
Your Data Subject Rights
Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by winbest:
- Right to Be Informed: The right to be informed of how your personal data is being collected and processed by winbest — which is the purpose of this Privacy Policy.
- Right of Access: The right to request a copy of the personal data winbest holds about you, along with information about how it is being processed.
- Right to Rectification: The right to request correction of any inaccurate or incomplete personal data winbest holds about you.
- Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to winbest's legal retention obligations.
- Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on winbest's legitimate interests.
- Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
- Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe winbest has violated your data privacy rights.
To exercise any of these rights, please contact the winbest Data Protection Officer using the details in Section 14. winbest will respond to all data subject requests within the timeframe required by the Data Privacy Act. We may need to verify your identity before processing your request.
Response Timeframe: winbest will acknowledge your data subject request within 72 hours and provide a substantive response within 30 calendar days of receipt, in accordance with the Data Privacy Act of 2012.
Section 12
Children's Privacy & Age Restriction
The winbest platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gaming law. winbest does not knowingly collect personal data from individuals under the age of 21.
If winbest discovers or has reasonable grounds to believe that a player is under 21 years of age, winbest will immediately suspend the account, cease processing the player's personal data for gaming purposes, and take steps to delete or return any funds deposited by the underage player in accordance with applicable law.
If you are a parent or guardian and believe that your child under the age of 21 has registered a winbest account or provided personal data to winbest, please contact us immediately using the details in Section 14. winbest will investigate and take appropriate action promptly.
Section 13
Changes to This Privacy Policy
winbest reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, winbest will notify registered players by email or through a prominent notice on the winbest platform at least 7 days before the changes take effect, where practicable.
The "Last Updated" date at the top of this page indicates when this Privacy Policy was most recently revised. The current version of this Policy will always be available at winbest.app/privacy-policy. Your continued use of the winbest platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.
We encourage you to review this Privacy Policy periodically to stay informed about how winbest is protecting your personal data.
Section 14
Contact Us & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or the way winbest handles your personal data, please contact the winbest Data Protection Officer through any of the following channels:
- Live Chat: Available 24/7 through the winbest platform at winbest.app — the fastest way to reach our support team.
- Email: [email protected] — for data subject requests, privacy complaints, or DPO inquiries. Please include "Privacy Request" in the subject line.
National Privacy Commission: If you are not satisfied with winbest's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the government body responsible for administering and enforcing the Data Privacy Act of 2012.
winbest is committed to resolving all privacy concerns promptly and transparently. We take every data privacy inquiry seriously and will work with you to address your concerns in accordance with Philippine law.