windreamph Privacy Policy

1. Introduction

windreamph ("windreamph," "we," "us," or "our") is committed to protecting the privacy and personal data of all users ("you," "your," or "Player") who access and use the windreamph online casino platform at https://windreamph.app (the "Platform"). This Privacy Policy ("Policy") describes how windreamph collects, uses, stores, shares, and protects your personal information in connection with your use of our services.

This Policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines. By registering an account or using the windreamph Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms and Conditions and our Responsible Gaming Policy, which together govern your relationship with windreamph.

2. Personal Data We Collect

windreamph collects personal data that is necessary to provide you with a safe, secure, and enjoyable gaming experience. The categories of personal data we collect include:

2.1 Registration and Identity Data

When you create a windreamph account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile phone number
• Residential address (including barangay, city, province, and ZIP code)
• Username and encrypted password
• Government-issued identification number (e.g., PhilSys ID, passport, driver's license, SSS/GSIS number)

2.2 Financial and Transaction Data

To process deposits and withdrawals, windreamph collects:

• Payment method details (e.g., GCash mobile number, PayMaya account, bank account number with BPI, BDO, Metrobank, or other Philippine banks)
• Transaction history, including deposit amounts, withdrawal requests, and bonus usage
• Account balance and wagering history
• Source of funds documentation (where required for compliance purposes)

2.3 Technical and Usage Data

When you access the windreamph Platform, we automatically collect certain technical information:

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Session duration, pages visited, and features used
• Game play history and betting patterns
• Login timestamps and access logs
• Cookies and similar tracking technologies (see Section 6)

2.4 Communications Data

If you contact windreamph customer support or communicate with us through any channel, we may collect and retain:

• The content of your messages, emails, or live chat transcripts
• Records of any complaints or disputes you raise
• Your communication preferences and marketing opt-in/opt-out status

2.5 Verification Documents

As part of our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, we may collect copies of:

• Government-issued photo identification (front and back)
• Proof of address (e.g., utility bill, bank statement dated within the last three months)
• Selfie or live photo for identity verification purposes
• Proof of payment method ownership

3. How We Use Your Personal Data

windreamph uses your personal data for the following purposes:

Purpose	Data Used
Account creation and management	Registration data, identity documents
Processing deposits and withdrawals	Financial data, transaction history
Identity and age verification (KYC)	Identity documents, selfie/photo
Fraud prevention and security	Technical data, transaction data, IP address
Regulatory and AML compliance	Identity data, financial data, transaction history
Customer support	Communications data, account data
Responsible gaming monitoring	Betting patterns, session data, account history
Platform improvement and analytics	Usage data, technical data (anonymized where possible)
Marketing communications (with consent)	Email, phone number, communication preferences
Legal claims and dispute resolution	All relevant data as required

windreamph will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, windreamph processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering laws, gaming regulations, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for windreamph's legitimate business interests, such as fraud prevention, platform security, and improving our services, provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities, such as sending you marketing communications or using non-essential cookies, we rely on your explicit consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Vital Interests: In rare circumstances, we may process data to protect your vital interests or those of another person, such as in a responsible gaming emergency.

5. Data Sharing and Disclosure

windreamph does not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

5.1 Service Providers

We engage trusted third-party service providers who assist us in operating the windreamph Platform. These include payment processors (such as GCash, PayMaya, and banking partners), identity verification services, cloud hosting providers, customer support platforms, and analytics providers. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection laws.

5.2 Regulatory and Law Enforcement Authorities

windreamph may disclose your personal data to government agencies, regulatory bodies, law enforcement authorities, or courts when required to do so by law, court order, or regulatory directive. This includes disclosures required under Philippine anti-money laundering laws, gaming regulations, and tax laws.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of windreamph's business, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify you of any such transfer and ensure that your data continues to be protected in accordance with this Policy.

5.4 With Your Consent

We may share your data with third parties for purposes not described in this Policy if we have obtained your explicit prior consent to do so.

6. Cookies and Tracking Technologies

windreamph uses cookies and similar tracking technologies to enhance your experience on our Platform, analyze usage patterns, and support security functions. A cookie is a small text file placed on your device when you visit our website.

6.1 Types of Cookies We Use

• Essential Cookies: These are strictly necessary for the Platform to function. They enable core features such as account login, session management, and security. You cannot opt out of essential cookies.
• Performance and Analytics Cookies: These cookies collect anonymized information about how visitors use our Platform, such as which pages are visited most often and whether users encounter error messages. This helps us improve the windreamph experience.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, display settings, and game history, to provide a more personalized experience.
• Marketing Cookies: With your consent, we may use cookies to deliver relevant promotions and offers based on your interests and activity on the windreamph Platform.

6.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, please note that disabling certain cookies may affect the functionality of the windreamph Platform and your ability to access some features. For more information on managing cookies, refer to your browser's help documentation.

7. Data Retention

windreamph retains your personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by Philippine anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC and identity documents: Retained for a minimum of five (5) years after the end of the business relationship.
• Customer support communications: Retained for three (3) years from the date of the last communication.
• Technical and usage data: Retained for up to two (2) years, after which it is anonymized or deleted.
• Marketing preferences: Retained until you withdraw your consent or close your account.

When personal data is no longer required, windreamph will securely delete or anonymize it in accordance with our data disposal procedures.

8. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by windreamph:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
• Right to Access: You may request a copy of the personal data windreamph holds about you, along with information about how it is being processed.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider.
• Right to Lodge a Complaint: If you believe windreamph has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 12 of this Policy. We will respond to all valid requests within thirty (30) days. In some cases, we may need to verify your identity before processing your request.

9. Data Security Measures

windreamph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data, including passwords and financial information, is stored in encrypted form using strong cryptographic algorithms.
• Access Controls: Access to personal data is restricted to authorized windreamph personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Regular Security Audits: windreamph conducts regular security assessments, vulnerability scans, and penetration tests to identify and address potential security weaknesses.
• Incident Response: We maintain a documented data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the National Privacy Commission within the timeframes required by law.
• Staff Training: All windreamph employees who handle personal data receive regular training on data privacy and security best practices.

While windreamph takes all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. You are also responsible for maintaining the security of your account credentials and for notifying us immediately if you suspect any unauthorized access to your account.

10. Protection of Minors

windreamph strictly prohibits the use of our Platform by individuals under the age of twenty-one (21) years. We do not knowingly collect personal data from minors. Our registration process includes age verification steps designed to prevent underage access.

If windreamph becomes aware that personal data has been collected from a person under 21 years of age without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on our Platform, please contact us immediately at the details provided in Section 12.

Parents and guardians are encouraged to use parental control tools and to monitor their children's online activities to prevent underage access to gambling platforms.

11. Changes to This Privacy Policy

windreamph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on the windreamph Platform
• Send an email notification to registered players where the changes are significant

Your continued use of the windreamph Platform after any changes to this Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. If you do not agree with any changes, you should stop using the Platform and may request account closure.

12. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by windreamph, please contact our designated Data Protection Officer (DPO):

• Data Protection Officer: windreamph Privacy Team
• Email: [email protected]
• General Support: [email protected]
• Mailing Address: windreamph, Metro Manila, Philippines

We aim to acknowledge all privacy-related inquiries within five (5) business days and to resolve them within thirty (30) days. For unresolved complaints, you may escalate your concern to the National Privacy Commission of the Philippines.