winbest Privacy Policy

1. Overview

winbest is committed to protecting the personal data of every Filipino player who uses the platform. We collect only the data we genuinely need to operate the service, verify player identity, process payments, and comply with Philippine gaming and anti-money-laundering regulations. We do not sell your personal data. We do not share it with unrelated third parties for marketing purposes without your consent.

This Policy is written in plain, accessible English — not buried in legalese — because we believe Filipino players deserve to understand exactly what happens with their information when they register and play at winbest. If anything in this Policy is unclear, our support team is available 24/7 to explain it.

By registering an Account at winbest.asia or by continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read, understood, and accepted the data practices described herein. If you do not agree with this Policy, please do not register or continue to use the Platform.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules, winbest is the Personal Information Controller in respect of the personal data it processes in connection with the winbest platform. winbest is responsible for ensuring that personal data is processed lawfully, fairly, and in compliance with applicable Philippine law and PAGCOR's data protection requirements.

If you have any questions about this Policy or wish to exercise your data rights, please contact our Data Protection Officer using the contact details in Section 15.

3. Personal Data We Collect

winbest collects the following categories of personal data from and about registered players and platform visitors:

winbest does not collect or store full payment card numbers. Payment processing is handled through the relevant payment provider's secure infrastructure.

4. How We Collect Personal Data

winbest collects personal data through the following means:

• Direct provision by you: When you complete the registration form, upload identity documents, contact support, or set responsible gaming preferences;
• Automated collection during use: Technical and usage data collected automatically when you access the Platform, via server logs, session tracking, and analytics tools;
• Payment providers: Transaction confirmation data shared by GCash, Maya, BPI, BDO, Metrobank, and other accepted payment processors when you deposit or withdraw;
• Identity verification providers: Confirmation of identity document authenticity from third-party KYC service providers where applicable;
• Regulatory and public sources: winbest may cross-reference your information against PAGCOR exclusion registers and public anti-money-laundering databases as required by Philippine law.

5. How winbest Uses Your Personal Data

winbest processes your personal data for the following specific purposes:

5.1 Account Creation and Management

To register your Account, verify your identity and age (you must be at least 21 years of age as required by PAGCOR regulations), maintain your Account profile, authenticate your login sessions via OTP, and manage Account security.

5.2 Gaming Services

To operate the games you play, calculate and credit winnings, apply promotional bonuses in accordance with the applicable terms, and personalise game recommendations based on your gaming activity and preferences.

5.3 Financial Transactions

To process deposits from your GCash, Maya, or bank account and to process withdrawals back to your registered payment method. Financial data is also processed to comply with the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended) and related PAGCOR financial monitoring requirements.

5.4 Responsible Gaming

To administer the responsible gaming tools you activate — deposit limits, session timers, cooling-off periods, and self-exclusion — and to monitor gaming patterns that may indicate problematic behaviour, enabling winbest to intervene proactively where appropriate under its responsible gaming obligations.

5.5 Platform Security and Fraud Prevention

To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, money laundering, underage access, and any other conduct that violates the winbest Terms & Conditions or Philippine law.

5.6 Legal and Regulatory Compliance

To fulfil winbest's obligations under Philippine gaming law, the Data Privacy Act, PAGCOR regulatory requirements, anti-money-laundering legislation, and any applicable court order or direction from a competent Philippine government authority.

5.7 Communications and Support

To respond to your support queries, send transaction confirmations and security alerts, and — where you have given consent — to send promotional messages about winbest offers. You may withdraw marketing consent at any time by contacting support.

5.8 Platform Improvement

To analyse aggregated usage data and improve the design, performance, and content of the winbest Platform. Analytics data used for this purpose is anonymised or pseudonymised where possible.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act, winbest processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the services described in the winbest Terms & Conditions — including account management, game operation, and payment processing;
• Legal obligation: Processing required to comply with PAGCOR regulations, anti-money-laundering law, KYC requirements, and any applicable Philippine statute;
• Legitimate interests: Processing for platform security, fraud prevention, and improvement of winbest services, where those interests are not overridden by your fundamental rights;
• Consent: Processing for marketing communications and non-essential personalisation, where you have given explicit consent. You may withdraw consent at any time.

7. How winbest Shares Your Data

winbest does not sell your personal data to any third party. We share personal data only in the following limited circumstances:

• Payment processors: Your financial data is shared with GCash, Maya, BPI, BDO, Metrobank, and other payment providers solely to process your transactions;
• Game providers: Certain technical data (session identifiers, bet amounts) is shared with licensed game providers whose games you play on the winbest Platform, solely for the purpose of operating those games;
• KYC and identity verification providers: Identity documents and verification data are shared with certified third-party KYC providers to fulfil PAGCOR's identity verification requirements;
• Regulatory and law enforcement authorities: winbest may be required by law or PAGCOR directive to disclose player data to the Philippine Amusement and Gaming Corporation, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or any other competent Philippine government authority;
• Service providers: Technical partners who provide infrastructure, analytics, security, and customer support tools to winbest — all bound by data processing agreements requiring them to handle your data only on winbest's instructions and in compliance with Philippine data protection law.

All third parties with whom winbest shares personal data are required to implement appropriate security measures and to use your data only for the specified purposes.

8. Data Retention

winbest retains your personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following specific retention periods:

• Account data and transaction records: Retained for a minimum of five (5) years following Account closure, as required by PAGCOR regulations and Philippine anti-money-laundering law;
• Identity documents (KYC records): Retained for five (5) years following the end of the business relationship, consistent with AMLC requirements;
• Gaming activity data: Retained for three (3) years following Account closure for responsible gaming monitoring purposes, after which it is anonymised;
• Support communications: Retained for two (2) years following resolution of the relevant query or dispute;
• Technical and usage data (logs): Retained for twelve (12) months, after which it is deleted or anonymised;
• Marketing consent records: Retained for the duration of the marketing relationship plus two (2) years.

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

9. Data Security

winbest implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your device and winbest servers;
• At-rest encryption for sensitive stored data, including identity documents and financial records;
• Password hashing using industry-standard salted algorithms — winbest never stores your password in plain text;
• Access controls limiting internal access to personal data on a strict need-to-know basis;
• Two-factor authentication (OTP via SMS) available for all player Account logins;
• Automated anomaly detection to identify and flag suspicious login activity or data access patterns;
• Regular security assessments of the Platform and its supporting infrastructure.

While winbest takes all reasonable and required steps to protect your data, no security system is completely impenetrable. In the unlikely event of a personal data breach that affects your rights and freedoms, winbest will notify the National Privacy Commission and affected players in accordance with the requirements of the Philippine Data Privacy Act.

10. Cookies & Tracking Technologies

winbest uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function — including session management, login authentication, and security features. These cannot be disabled without impairing core functionality;
• Functional cookies: Remember your preferences, such as language settings and responsible gaming tool configurations, to improve your experience;
• Analytics cookies: Collect aggregated, anonymised data about how players use the Platform — pages visited, features used, session duration — to help winbest identify improvements;
• Security cookies: Support fraud detection and prevention by tracking suspicious device or behaviour patterns.

winbest does not use advertising or cross-site tracking cookies. You can manage cookie preferences through your browser settings, though disabling essential cookies will impair Platform functionality. Continued use of the Platform after being presented with the cookie notice constitutes acceptance of the cookie policy described above.

11. Minors and Age Restriction

winbest verifies player age through its KYC process. If winbest discovers or has reasonable grounds to believe that an Account has been registered by a person under 21 years of age, the Account will be immediately suspended, all associated funds will be held pending investigation, and any bonuses or winnings accrued during the period of underage access will be voided. winbest will notify relevant Philippine authorities as required by law.

If you are a parent or guardian and believe your child has registered an Account at winbest, please contact our support team immediately via live chat so that the Account can be investigated and closed.

12. Your Data Rights Under Philippine Law

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by winbest. To exercise any of these rights, contact our Data Protection Officer as described in Section 15.

• Right to be Informed: The right to know what personal data winbest collects, how it is used, and with whom it is shared — which this Policy provides;
• Right to Access: The right to request a copy of the personal data winbest holds about you, along with information about how it has been processed;
• Right to Correction: The right to have inaccurate or incomplete personal data corrected. You can update basic profile information directly from your Account settings;
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where processing is unlawful, where data is no longer necessary for the purpose it was collected, or where consent has been withdrawn — subject to winbest's legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You can withdraw marketing consent at any time by contacting support;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible;
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe winbest has violated your data privacy rights.

winbest will respond to all data rights requests within thirty (30) days of receipt. Complex requests may require up to an additional thirty (30) days with notification of the extension. winbest may need to verify your identity before processing a data rights request.

13. International Data Transfers

Some of winbest's service providers — including game providers and certain technology infrastructure partners — may be located outside the Philippines. Where personal data is transferred internationally, winbest ensures that:

• The recipient country offers an adequate level of data protection, or
• Appropriate contractual safeguards (such as standard data processing agreements) are in place to protect your personal data to the same standard required under Philippine law.

winbest does not transfer personal data to countries or organisations that cannot guarantee an adequate level of protection. All international transfers comply with the cross-border transfer requirements of the Philippine Data Privacy Act and the National Privacy Commission's implementing rules.

14. Changes to This Privacy Policy

winbest may update this Privacy Policy from time to time to reflect changes in our data practices, Philippine law, or PAGCOR requirements. Material changes — those that significantly affect how we collect or use your personal data — will be communicated to you via SMS to your registered Philippine mobile number and/or via a notice on the Platform's login page, at least seven (7) days before the changes take effect.

The effective date at the top of this Policy reflects when the current version entered into force. We recommend reviewing this Policy periodically. Continued use of the Platform after an update has been communicated constitutes acceptance of the revised Policy. If you disagree with any material change, you have the right to close your Account before the effective date of the change.

15. Contact & Complaints

For all questions, requests, or complaints regarding this Privacy Policy or the processing of your personal data, please contact the winbest Data Protection Officer:

• Live Chat: Available 24/7 on the winbest Platform — the fastest way to reach us
• Email: [email protected] (plain text — not a clickable link)
• Response commitment: winbest will acknowledge all privacy requests within 72 hours and respond substantively within 30 days

If you are not satisfied with winbest's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the independent government body responsible for enforcing the Data Privacy Act and protecting the privacy rights of Filipino citizens.