winmayam8 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") explains how winmayam8 ("the Platform", "we", "us", "our") — the operator of the online gaming platform accessible at winmayam8.app — collects, processes, stores, shares, and protects the personal information of its registered users and website visitors ("you", "User", "Data Subject").

winmayam8 operates under the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR) and processes personal data in compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Republic of the Philippines.

By registering an account on winmayam8, accessing the platform, or otherwise providing your personal information to us, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent to this Policy, you should not register an account or use the winmayam8 platform.

2 Data Controller Identity

The data controller responsible for personal data processed through winmayam8 is the operator of winmayam8.app, a PAGCOR-licensed online gaming platform operating in the Philippines. For all data privacy inquiries, requests, and formal complaints, the designated Data Protection Officer (DPO) can be reached at:

• Email: [email protected] (Subject: "Data Privacy — [Request Type]")
• Platform: winmayam8.app — Account Settings > Privacy

winmayam8 has appointed a Data Protection Officer in accordance with the requirements of the National Privacy Commission. The DPO oversees compliance with RA 10173, manages data subject requests, and coordinates with the NPC on matters of data privacy.

3 Personal Data We Collect

winmayam8 collects personal data through multiple touchpoints across the user lifecycle. The categories of data collected and their sources are set out in the table below:

winmayam8 does not collect sensitive personal information beyond what is necessary for identity verification and regulatory compliance. We do not collect biometric data, health information, or religious/political affiliation data.

4 Legal Basis for Processing

winmayam8 processes personal data only where a lawful basis exists under RA 10173. The applicable legal bases for each category of processing are:

• Consent: Processing for marketing communications, optional preference tracking, and non-essential cookies. Consent is freely given, specific, informed, and revocable at any time through account settings.
• Contractual Necessity: Processing required to operate your winmayam8 account, process deposits and withdrawals, manage game sessions, and deliver platform services as described in the Terms & Conditions.
• Legal Obligation: Processing required for PAGCOR regulatory compliance, KYC verification under PAGCOR's Anti-Money Laundering framework, and obligations under Philippine tax law, RA 9160 (Anti-Money Laundering Act), and the Data Privacy Act of 2012.
• Legitimate Interests: Processing for platform security, fraud prevention, responsible gaming monitoring, internal analytics, and customer support quality assurance — where such processing does not override your fundamental data rights.

5 How winmayam8 Uses Your Personal Data

Personal data collected by winmayam8 is used exclusively for the purposes described below. We do not use your data for purposes materially different from those stated without first notifying you and, where required, obtaining your consent.

5.1 Account Operation and Service Delivery

Your identity, contact, and financial data are used to create and maintain your winmayam8 account, process your deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other approved methods, authenticate your login sessions, and deliver all gaming services available on the platform.

5.2 Regulatory Compliance and KYC

PAGCOR licensing requires winmayam8 to verify the identity and age of its registered users. KYC document data is processed to confirm that you meet the 21+ age requirement mandated by Philippine law and to comply with PAGCOR's Anti-Money Laundering obligations. Transaction data is monitored and reported to PAGCOR and the Anti-Money Laundering Council (AMLC) as required by law.

5.3 Responsible Gaming

Gaming activity data and preference settings are used to monitor for signs of problem gambling behaviour, enforce the deposit limits and loss limits you have set, apply self-exclusion decisions, and generate the session and transaction history available in your account dashboard. winmayam8's responsible gaming obligations under PAGCOR's framework require this monitoring.

5.4 Security and Fraud Prevention

Technical data — including IP addresses, device fingerprints, and session timestamps — is used to detect and prevent unauthorized account access, identify suspicious transaction patterns, enforce the single-account policy, and investigate potential fraud, bonus abuse, or money laundering.

5.5 Customer Support

Communication data from your support interactions is used to handle your inquiries, resolve disputes, and improve the quality and responsiveness of winmayam8 customer service. Support logs may be reviewed for quality assurance and training purposes.

5.6 Marketing Communications

Where you have provided consent, winmayam8 uses your contact data and gaming preference data to send promotional communications about bonuses, new game releases, and platform updates. You may withdraw consent and opt out of marketing communications at any time via account settings or by contacting [email protected].

6 Data Sharing and Disclosure

winmayam8 does not sell, rent, or trade your personal data to any third party for commercial or advertising purposes. Data is shared only in the following circumstances:

• PAGCOR and Regulatory Authorities: winmayam8 discloses player data, transaction records, and identity verification results to PAGCOR, the AMLC, and other Philippine regulatory bodies as required by law, court order, or regulatory directive. Such disclosures are non-negotiable legal obligations.
• Payment Service Providers: GCash, Maya (PayMaya), BPI, BDO, Metrobank, and other payment processors receive the minimum data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy frameworks and applicable Philippine financial regulations.
• Game Technology Providers: Licensed game providers supplying slots, live dealer games, and other content to the winmayam8 platform receive anonymized or pseudonymized session data required for game functionality and RNG certification. No personally identifiable information is shared with game providers beyond what is operationally necessary.
• Technical Infrastructure Providers: Cloud hosting, security, and analytics service providers operating under data processing agreements that bind them to confidentiality and RA 10173-equivalent data protection standards.
• Legal Proceedings: winmayam8 may disclose personal data to law enforcement or legal counsel in connection with the investigation or prosecution of fraud, money laundering, or other criminal activity, or as required to defend or enforce legal claims.

7 Data Retention

winmayam8 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. KYC documents are destroyed using methods that comply with the NPC's guidelines on secure disposal of personal data.

8 Data Security Measures

winmayam8 implements technical and organizational security measures appropriate to the nature and sensitivity of the personal data it processes. These measures include:

• Transport Encryption: All data transmitted between your device and winmayam8 servers is encrypted using TLS 1.3 with AES-256 ciphers. This applies to all account interactions, payment flows, and login sessions.
• Data-at-Rest Encryption: Sensitive data stored in winmayam8 databases — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis using role-based access control. Administrative access to production data requires multi-factor authentication.
• Infrastructure Security: winmayam8 operates on enterprise-grade cloud infrastructure with dedicated security monitoring, intrusion detection systems, and regular penetration testing.
• Payment Data Handling: Full payment instrument numbers (bank account numbers, card numbers) are never stored on winmayam8 systems. Only masked references are retained for transaction identification purposes.
• Breach Response: winmayam8 maintains a documented data breach response procedure. In the event of a personal data breach affecting Filipino data subjects, the NPC and affected Users will be notified within the timeframes prescribed by RA 10173.

9 Cookies and Tracking Technologies

winmayam8 uses cookies and similar tracking technologies on its platform. The categories of cookies used are:

• Essential Cookies: Strictly necessary for platform operation — session management, authentication tokens, security verification. These cannot be disabled without impacting platform functionality.
• Functional Cookies: Remember your preferences — language settings, game lobby filters, notification preferences — to personalize your experience across sessions.
• Analytics Cookies: Collect aggregated, anonymized data on how users navigate the platform — page visit frequency, feature usage, error rates — to improve platform performance. No individual user profiles are built from analytics data.
• Responsible Gaming Cookies: Store your session duration data locally to support winmayam8's session time alerts and responsible gaming monitoring features.

winmayam8 does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to use the winmayam8 platform.

10 Minors and Age Restriction

winmayam8 is strictly restricted to individuals aged twenty-one (21) years and above, as required under Philippine law and PAGCOR regulations. winmayam8 does not knowingly collect personal data from individuals under 21 years of age.

If winmayam8 becomes aware that personal data has been collected from an individual under the age of 21 — whether through registration misrepresentation or any other means — that account will be immediately suspended, all associated data will be securely deleted (subject to any mandatory PAGCOR reporting obligations), and the matter will be referred to PAGCOR as required by the platform's licensing conditions.

11 Your Data Rights Under Philippine Law

As a data subject under RA 10173, you hold the following rights in relation to your personal data processed by winmayam8. These rights are exercisable by contacting [email protected] with the subject line "Data Rights Request — [Right Type]":

12 Cross-Border Data Transfers

winmayam8's primary data processing and storage infrastructure is located within the Philippines. Where technical or operational requirements necessitate the transfer of personal data to service providers or infrastructure located outside the Philippines — such as international cloud hosting providers or game technology suppliers — winmayam8 ensures that such transfers are governed by appropriate safeguards, including:

• Data processing agreements binding recipient entities to data protection standards equivalent to RA 10173;
• Standard contractual clauses approved by the National Privacy Commission;
• Transfer only to jurisdictions with adequate data protection frameworks recognized by the NPC.

winmayam8 does not transfer KYC identity documents or sensitive financial data to jurisdictions that do not provide an adequate level of data protection without your explicit consent and notification.

13 Third-Party Services and Links

The winmayam8 platform integrates third-party services required for its operation — including payment processors (GCash, Maya, BPI, BDO, Metrobank), game content providers, and analytics tools. Each of these third parties operates under its own privacy framework.

winmayam8 selects third-party processors that demonstrate compliance with applicable data protection standards and binds them to data processing agreements that reflect the requirements of RA 10173. However, winmayam8 cannot accept responsibility for the independent data processing activities of third-party services that operate under separate, autonomous privacy frameworks — particularly payment service providers regulated by the Bangko Sentral ng Pilipinas (BSP).

14 Amendments to This Privacy Policy

winmayam8 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, platform functionality, or data processing practices. Material changes — those that significantly affect how your personal data is collected, used, or shared — will be communicated to registered Users via email or in-platform notification at least seven (7) calendar days before taking effect.

The effective date displayed at the top of this Policy indicates the current version in force. Continued use of the winmayam8 platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not accept material changes, you may close your account under the voluntary closure procedure in the Terms & Conditions.

15 Contact and Data Rights Requests

All data privacy inquiries, rights requests, and formal complaints should be directed to winmayam8's Data Protection Officer:

• General Privacy Inquiries: [email protected] — Subject: "Privacy Inquiry"
• Data Rights Requests: [email protected] — Subject: "Data Rights Request — [Access / Rectification / Erasure / Portability / Objection]"
• Data Breach Reports: [email protected] — Subject: "Data Breach Report"

winmayam8 will acknowledge all data rights requests within forty-eight (48) hours and will complete processing within fifteen (15) working days, as prescribed by the National Privacy Commission's guidelines. Complex requests may require an extension, of which you will be notified with reasons.

This Privacy Policy was last reviewed and updated on June 1, 2026. winmayam8 is operated under the PAGCOR regulatory framework. For the platform's full user agreement, see the Terms & Conditions. For responsible gaming information and tools, see the Responsible Gaming page.