43winph Privacy Policy

This Privacy Policy ("Policy") describes how 43winph ("43winph", "we", "us", or "our") collects, uses, stores, shares, and protects personal information about individuals ("you", "Player", or "User") who register for or access the 43winph online gaming platform at 43winph.club (the "Platform").

This Policy applies to all personal data processed by 43winph in connection with your use of the Platform, including registration, account management, deposits and withdrawals, gameplay, customer support interactions, and marketing communications (where you have opted in).

By registering on 43winph and using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how 43winph handles your personal data as described herein, you should discontinue use of the Platform and contact the support team to initiate account closure.

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, 43winph acts as the Personal Information Controller in respect of personal data collected from registered players and website visitors through the 43winph.club Platform.

43winph is an online gaming and sports betting platform operating in compliance with applicable Philippine gambling regulations and the oversight framework of the Philippine Amusement and Gaming Corporation (PAGCOR). 43winph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with RA 10173.

Contact details for 43winph and the Data Protection Officer are provided in Section 16 of this Policy. Players wishing to exercise their data subject rights or raise a privacy concern should direct their communication to the DPO in the first instance.

43winph collects personal data across several categories depending on how you interact with the Platform. The following table summarises the types of data collected and the context in which each category arises:

43winph does not collect or process sensitive personal information as defined under Section 3(l) of RA 10173 — such as health data, religious affiliation, or political opinion — unless specifically required for a regulatory compliance purpose and with your explicit consent.

43winph collects personal data through the following means:

• Direct Collection: Information you provide voluntarily when registering a 43winph account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Collection: Technical data automatically collected when you access the Platform, including your IP address, device identifiers, browser information, and session activity logs. This data is collected through server logs and, where applicable, first-party cookies.
• Payment Processors: When you complete a GCash, Maya, BPI, BDO, Metrobank, Coins.ph, or 7-Eleven transaction, limited transaction confirmation data is received from the respective payment provider to reconcile your deposit or withdrawal against your 43winph account.
• KYC Verification Providers: Where 43winph engages third-party identity verification services to assist with document authentication, those providers may return verification results to 43winph. The underlying document images are processed in accordance with the applicable provider's own security and privacy standards.
• PAGCOR and Regulatory Sources: In some circumstances, 43winph may receive information from PAGCOR or other Philippine regulatory authorities in the course of regulatory compliance activities, including verification of self-exclusion registers.

43winph processes your personal data for the following purposes:

• Account Registration and Operation: To create and maintain your 43winph player account, authenticate your identity, and enable you to access the Platform's games, sportsbook, and cashier functions.
• Age and Identity Verification: To verify that you are at least 21 years of age at the time of registration, as required by PAGCOR regulations and Philippine gambling law. This is a mandatory processing purpose that cannot be opted out of.
• Payment Processing: To facilitate deposits to and withdrawals from your 43winph account via GCash, Maya, Philippine banks, and other accepted methods.
• Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) Compliance: To fulfil 43winph's obligations under Republic Act No. 9160 (Anti-Money Laundering Act of 2001, as amended) and related AMLC circulars, including transaction monitoring, suspicious transaction reporting, and customer due diligence.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling, enforce deposit and loss limits set by players, and implement self-exclusion requests. Responsible gaming monitoring is a mandatory processing purpose under PAGCOR regulations.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent account takeover attempts, bonus abuse, collusion, and other fraudulent or prohibited activities on the Platform.
• Customer Support: To respond to your enquiries, resolve account disputes, and provide assistance in English and Filipino via live chat and email.
• Legal and Regulatory Compliance: To comply with applicable Philippine laws, regulations, PAGCOR directives, court orders, and lawful requests from Philippine government authorities.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided your opt-in consent at registration or subsequently. You may opt out at any time from within your account settings or by contacting the support team.
• Platform Improvement: To analyse aggregate, anonymised usage data to improve the design, performance, and content of the 43winph Platform.

Under the Data Privacy Act of 2012, 43winph processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — including account creation, payment processing, and game operation — is conducted on the basis that it is necessary for the performance of the Terms and Conditions you agreed to upon registration.
• Legal Obligation: Processing required to comply with Philippine law — including AML/CTF obligations, PAGCOR regulatory requirements, age verification, and data retention mandated by law — is conducted on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, and aggregate analytics is conducted on the basis of 43winph's legitimate interests, where those interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications is conducted solely on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

43winph does not sell, rent, or trade your personal data to any third party for commercial or advertising purposes. We share personal data only in the following limited and defined circumstances:

• Payment Processors: GCash, Maya, BPI, BDO, Metrobank, Coins.ph, and 7-Eleven receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable Philippine financial data protection regulations.
• KYC and Identity Verification Providers: Third-party identity verification services engaged by 43winph to assist with document authentication during the KYC process. These providers are contractually required to process data only for the stated purpose and to maintain appropriate security standards.
• PAGCOR and Philippine Regulatory Authorities: 43winph is legally required to share player data with PAGCOR and, where applicable, the Anti-Money Laundering Council (AMLC), in compliance with applicable gambling and AML regulations. This includes filing of covered transaction reports (CTRs) and suspicious transaction reports (STRs) as required by RA 9160.
• Law Enforcement and Courts: Where 43winph receives a lawful order, warrant, or subpoena from a Philippine court or law enforcement authority, 43winph will comply and disclose the requested data to the extent required by law.
• Technology and Infrastructure Providers: Third-party providers who supply hosting, cloud storage, security monitoring, or other technical infrastructure services to 43winph may have access to personal data in the course of providing those services. All such providers are bound by data processing agreements that require them to process data only on 43winph's instructions and to maintain appropriate security measures.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of 43winph's assets, personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and your rights under this Policy will continue to apply.

Some of 43winph's technology providers and infrastructure partners operate servers or process data outside the Republic of the Philippines. Where personal data is transferred internationally, 43winph ensures that such transfers are made only to countries or organisations that provide an adequate level of data protection, or under contractual arrangements that impose equivalent safeguards consistent with RA 10173 and the implementing rules of the National Privacy Commission.

43winph does not transfer player financial data or KYC identity documents internationally except where strictly necessary for the operation of specific payment processing functions, and always subject to contractual data protection safeguards.

43winph retains personal data for as long as necessary to fulfil the purposes described in this Policy, including the satisfaction of any applicable legal, regulatory, or accounting requirements. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active 43winph account plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and Philippine AML record retention obligations under RA 9160.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with RA 9160 and BSP regulations applicable to electronic payment transactions.
• KYC and Identity Documents: Retained for the duration of your account plus five (5) years following closure, unless a longer period is required by applicable law or ongoing regulatory proceedings.
• Customer Support Communications: Retained for three (3) years from the date of the communication, to facilitate dispute resolution and quality improvement.
• Marketing Preference Records: Records of your consent or opt-out status are retained for the life of your account plus three (3) years, to demonstrate compliance with consent requirements.
• Technical and Log Data: Server and security logs are retained for up to twelve (12) months in operational systems, after which they may be archived for a further period for security investigation purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you.

43winph uses cookies and similar technologies on the Platform. A cookie is a small text file placed on your device by a website when you visit it. 43winph uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the basic operation of the 43winph Platform — for example, to maintain your logged-in session across page loads and to remember your preferences such as language or display settings. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functionality Cookies: Used to remember your preferences within the Platform — for example, your preferred game category, display options, or notification settings — to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregate, anonymised data about how visitors interact with the 43winph Platform. This data helps 43winph understand which features are used most frequently and how the Platform can be improved. Analytics data does not identify individual players.

43winph does not use advertising cookies, cross-site tracking cookies, or any cookies that track your activity on third-party websites outside the 43winph.club domain.

Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies from the 43winph Platform; however, blocking strictly necessary cookies will prevent the Platform from functioning correctly and you will not be able to remain logged in to your account.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 43winph. You may exercise any of these rights by contacting the 43winph Data Protection Officer as described in Section 16.

43winph implements and maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• Encryption: All data transmitted between your device and the 43winph Platform is protected by 256-bit SSL/TLS encryption. Sensitive data at rest — including passwords, financial information, and identity documents — is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data held by 43winph is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to audit. Access privileges are reviewed regularly and revoked immediately upon staff departure.
• Two-Factor Authentication: 43winph offers and strongly encourages SMS OTP two-factor authentication on all player accounts to prevent unauthorised access even where login credentials are compromised.
• Intrusion Detection and Monitoring: 43winph's infrastructure is monitored around the clock for unauthorised access attempts, anomalous traffic patterns, and potential security incidents.
• Vulnerability Management: 43winph conducts regular security assessments and applies security patches to its systems in a timely manner to address known vulnerabilities.
• Incident Response: 43winph maintains a documented data breach response procedure designed to detect, contain, and assess security incidents promptly, and to fulfil notification obligations under RA 10173 and NPC regulations.

While 43winph takes all reasonable precautions to protect your personal data, no internet transmission is completely secure. You are responsible for maintaining the confidentiality of your 43winph login credentials and for notifying 43winph promptly if you believe your account has been compromised.

The 43winph Platform is strictly intended for individuals who are 21 years of age or older. 43winph does not knowingly collect personal data from any person under the age of 21. The Platform's registration process includes age declaration and is subject to mandatory KYC age verification.

If 43winph becomes aware that personal data has been collected from a person under 21 years of age — whether through registration, payment, or any other means — it will immediately suspend the associated account, initiate a review, and delete or quarantine the relevant data to the extent permitted by applicable law and regulatory obligations.

If you believe that a minor has registered on 43winph or that personal data of a person under 21 has been collected, please contact the 43winph Data Protection Officer immediately using the contact details in Section 16. 43winph takes underage access extremely seriously and will act promptly on all such reports.

The 43winph Platform does not contain links to third-party websites for general browsing purposes. All navigation links on 43winph.club direct users to pages within the 43winph Platform only. However, payment processes — such as redirects to GCash or Maya for transaction authentication — may temporarily transfer you to the relevant payment provider's interface.

When you interact with a third-party payment provider's interface in connection with a 43winph transaction, that provider's own privacy policy governs the handling of data within their system. 43winph is not responsible for the privacy practices of GCash, Maya, BPI, BDO, Metrobank, Coins.ph, 7-Eleven, or any other payment provider. You are encouraged to review the privacy policies of any payment provider you use in conjunction with 43winph.

43winph reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, NPC guidance, or 43winph's data processing practices. The date of the most recent revision is always displayed at the top of this page.

Where a material change is made to this Policy — for example, a new category of data being collected, a new third-party recipient being added, or a change in the legal basis for a processing activity — 43winph will provide advance notice to registered players via on-site notification or email to the registered contact address at least fourteen (14) days before the change takes effect.

Your continued use of the 43winph Platform after any amendment to this Policy constitutes your acknowledgement of the updated terms. If you do not agree with the changes, you should stop using the Platform and contact the support team to arrange account closure and data deletion to the extent legally permissible.

For all privacy-related enquiries, data subject rights requests, consent withdrawals, or data breach notifications, please contact the 43winph Data Protection Officer using the details below:

If you are not satisfied with 43winph's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent regulatory body established under RA 10173 to oversee data privacy compliance in the Philippines.

For questions about your 43winph account balance, game history, or general support matters unrelated to data privacy, please use the standard support channels — live chat available 24/7 on the Platform — so that DPO resources can be focused on privacy-specific requests.