winmayam8 Privacy Policy

This Privacy Policy ("Policy") describes how winmayam8 ("the Platform," "We," "Us," or "Our") collects, uses, discloses, stores, and protects the personal information of individuals ("You," "Player," or "User") who access, register on, or use the winmayam8 website and its associated gaming services.

winmayam8 is committed to protecting the privacy and personal data of every player on our platform. This Policy has been prepared to reflect our obligations under applicable data protection principles and to ensure that Filipino players — whether based in Metro Manila, Cebu, Davao, or elsewhere in the Philippines — understand clearly how their personal information is handled from the moment they visit our site to the point of account closure.

This Privacy Policy should be read together with our Terms and Conditions, which govern your overall use of the winmayam8 platform. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of this Privacy Policy, the data controller responsible for your personal data is winmayam8, operating under the domain winmayam8.net. The data controller determines the purposes and means by which your personal data is processed.

If you have questions, concerns, or requests relating to your personal data and how winmayam8 handles it, you may contact our designated data protection contact through the support details provided in Section 15 of this Policy. We will respond to all data-related inquiries within a reasonable timeframe and in accordance with applicable legal requirements.

winmayam8 collects the following categories of personal data in connection with your use of the Platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used for age verification — players must be 21 or older)
• Residential address, including city, province, and postal code
• Email address and Philippine mobile number
• Username and encrypted password credentials

3.2 Identity Verification (KYC) Documents

• Scanned or photographed copies of government-issued photo ID (Philippine passport, driver's license, SSS/UMID card, PhilSys National ID, or equivalent)
• Proof of address documents (e.g., utility bill, bank statement) where required
• Selfie or liveness check images where required by our KYC process

3.3 Financial & Transaction Data

• GCash account number or mobile number used for deposits and withdrawals
• Maya (formerly PayMaya) account details where used
• Bank account or e-wallet reference information for BPI, BDO, Metrobank, and other linked payment methods
• Complete transaction history including deposit amounts, withdrawal amounts, dates, and payment method references
• Cryptocurrency wallet addresses where USDT transactions are conducted

3.4 Gaming Activity Data

• Full history of games played, bets placed, outcomes, and winnings
• Session timestamps, duration of play, and session frequency
• Bonus and promotion usage history
• Self-imposed limits, cooling-off periods, and self-exclusion requests

3.5 Technical & Device Data

• IP address at the time of each login and transaction
• Device type, operating system, and browser information
• Cookie identifiers and session tokens (see Section 9)
• Geolocation data derived from IP address (not precise GPS location)

3.6 Communications Data

• Transcripts of live chat conversations with our support team
• Emails sent to and received from our support address
• Records of complaints, dispute submissions, and their resolutions

winmayam8 collects personal data through the following means:

• Directly from you: When you complete the account registration form, submit KYC verification documents, make deposits or withdrawal requests, contact our support team, or opt in to promotional communications.
• Automatically through the Platform: When you browse the winmayam8 website or use any of its features, technical data such as your IP address, device type, and session activity is collected automatically through server logs and cookie technology.
• Through third-party KYC providers: Where we engage licensed identity verification service providers to process your submitted ID documents, those providers may return verification outcomes and risk scores to us. winmayam8 selects KYC partners who operate under equivalent data protection standards.
• Through payment processors: When you initiate a deposit or withdrawal, our payment processing partners transmit transaction confirmation data to winmayam8 to update your account balance. We do not receive or store complete card numbers or full GCash PIN credentials.

winmayam8 processes your personal data for specific, legitimate purposes. The principal purposes and their corresponding legal bases are as follows:

• Account creation and management: To register your player account, maintain your profile, and provide you with access to Platform features. Legal basis: performance of a contract.
• Identity and age verification (KYC): To verify that you are who you claim to be, that you meet the minimum age requirement of 21 years, and that your identity does not appear on sanctions or self-exclusion lists. Legal basis: legal obligation and legitimate interest.
• Payment processing: To process your deposits and withdrawal requests and to maintain accurate financial records. Legal basis: performance of a contract and legal obligation.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, money laundering, and other prohibited conduct. Legal basis: legitimate interest and legal obligation.
• Regulatory compliance: To fulfill reporting, record-keeping, and anti-money laundering (AML) obligations applicable to online gaming operations. Legal basis: legal obligation.
• Platform improvement: To analyze aggregate usage patterns, identify technical issues, and improve the overall player experience on winmayam8. Legal basis: legitimate interest.
• Responsible gaming management: To apply and monitor your self-imposed deposit limits, loss limits, session alerts, and self-exclusion settings, and to identify players who may need intervention based on behavioral patterns. Legal basis: legitimate interest and, where relevant, legal obligation.
• Customer support: To respond to your queries, resolve disputes, and maintain records of communications for quality assurance purposes. Legal basis: performance of a contract and legitimate interest.
• Direct marketing: To send you promotional offers, bonus notifications, and news relevant to your account and activity on winmayam8, where you have provided your consent or where we have a legitimate interest to do so. Legal basis: consent or legitimate interest (with opt-out rights).

winmayam8 does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary to fulfill the stated purpose:

• Payment processors and e-wallet providers: GCash, Maya, BPI, BDO, and other payment infrastructure providers receive the minimum data necessary to execute your deposit or withdrawal transactions and to verify source-of-funds compliance.
• KYC and identity verification providers: Licensed third-party verification services receive your submitted identity documents for the purpose of processing age and identity verification. These providers are bound by data processing agreements requiring them to handle your data only for this purpose.
• Game content providers: Software providers such as Pragmatic Play, PG Soft, Evolution, and other licensed studios may receive anonymized session data for purposes of game performance monitoring and RNG integrity verification. No personal identification data is shared with game studios.
• Regulatory and law enforcement authorities: winmayam8 may be required to disclose your data to regulatory bodies, law enforcement agencies, or court orders in accordance with applicable legal obligations, including AML reporting requirements.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by winmayam8 may access personal data in the course of providing their professional services, subject to confidentiality obligations.
• Business succession: In the event of a merger, acquisition, or sale of assets involving winmayam8, your data may be transferred to a successor entity, provided that the successor agrees to protect your data in accordance with terms no less protective than this Policy.

winmayam8 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following general retention principles apply:

• Active account data: Personal data associated with an active winmayam8 account is retained for the duration of your account's active status and for a defined period following account closure.
• Financial transaction records: Records of all deposits, withdrawals, and wagering activity are retained for a minimum period required by applicable AML and financial record-keeping regulations. This period is typically not less than five (5) years from the date of the transaction.
• KYC verification documents: Identity verification documents submitted for KYC purposes are retained for the period required by applicable identity verification regulations applicable to online gaming operations.
• Support communications: Records of live chat transcripts and email correspondence with the support team are retained for a period consistent with our quality assurance and dispute resolution requirements.
• Marketing consent records: Records of your marketing consent or opt-out preferences are retained for as long as is necessary to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be attributed to you.

winmayam8 implements comprehensive technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. Our security infrastructure includes the following:

• Encryption in transit: All data transmitted between your browser and the winmayam8 platform is encrypted using 256-bit SSL/TLS encryption — the same standard used by Philippine commercial banks including BPI and BDO.
• Password hashing: Passwords are never stored in plain text. We use industry-standard one-way hashing algorithms to store password credentials, meaning the actual password cannot be read or recovered even by platform staff.
• Access controls: Access to systems containing personal data is restricted to authorized personnel on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations.
• Secure infrastructure: The winmayam8 platform is hosted on secure servers with firewalls, intrusion detection systems, and regular penetration testing protocols.
• Session management: Player sessions automatically expire after a configurable period of inactivity to protect accounts on shared or unattended devices.
• Two-factor authentication: Players may optionally enable two-factor authentication (2FA) on their accounts using SMS or authenticator app methods for an additional layer of login security.

While winmayam8 takes all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. Players are encouraged to use strong, unique passwords and to enable 2FA to further protect their accounts.

winmayam8 uses cookies and similar tracking technologies on the Platform to support its operation, enhance the player experience, and gather analytical data. A cookie is a small text file stored on your device by your browser when you visit a website.

We use the following categories of cookies on winmayam8:

• Strictly necessary cookies: Required for the Platform to function. These include session tokens that keep you logged in, security cookies that prevent cross-site request forgery, and cookies that remember your account preferences. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Enable enhanced features such as remembering your preferred language, game display settings, and notification preferences between sessions.
• Analytical cookies: Used to collect anonymized data about how players interact with the Platform — which pages are most visited, where players spend most time, and where technical errors occur. This data is used solely to improve Platform performance and user experience.
• Security and fraud-detection cookies: Used to identify and flag suspicious login behavior, unusual transaction patterns, or signs of account compromise.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect your ability to use some features of the winmayam8 platform.

As a player on winmayam8, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team using the details in Section 15. We will respond within a reasonable timeframe and free of charge, except where requests are manifestly unfounded or excessive.

Please note that certain rights are subject to limitations where winmayam8 has a legal obligation to retain data (for example, AML record-keeping requirements). We will explain any such limitations when responding to your request.

winmayam8 is strictly an adults-only platform. In accordance with PAGCOR requirements for casino-style online gaming in the Philippines, the minimum age for registration and play is 21 years. We do not knowingly collect personal data from individuals under the age of 21.

Age verification is performed at registration through self-declaration and is confirmed through KYC document review prior to the processing of any withdrawal. Where winmayam8 discovers that an account has been registered by a person under 21 years of age, the account will be immediately suspended, all pending and processed gaming activity will be voided, and any deposited funds will be returned. The personal data of the underage individual will be deleted following the resolution of the account matter and expiry of any legally required retention period.

If you are a parent or guardian and believe that a minor has registered an account on winmayam8 or has provided personal data to the Platform, please contact our support team immediately so that we can take appropriate action.

winmayam8 may use your email address and mobile number to send you promotional communications including deposit bonus offers, free spins notifications, seasonal promotions, and platform news. We will only send marketing communications where you have provided consent at registration, or where we have a legitimate interest to do so based on your existing customer relationship with us.

You may opt out of marketing communications at any time through any of the following methods:

• Using the unsubscribe link included in every promotional email sent by winmayam8;
• Updating your communication preferences in your account settings;
• Contacting our support team and requesting removal from marketing lists.

Opting out of marketing communications does not affect the delivery of transactional messages related to your account, such as deposit confirmations, withdrawal notifications, and security alerts. These service messages are sent regardless of your marketing preferences as they are necessary for the operation of your account.

Some of the third-party service providers used by winmayam8 — including KYC verification partners, game content providers, and payment infrastructure partners — may process personal data in countries outside the Philippines. Where such international transfers occur, winmayam8 takes steps to ensure that appropriate safeguards are in place, including:

• Entering into data processing agreements with third-party processors that include standard contractual clauses providing equivalent data protection;
• Selecting third-party providers who operate in jurisdictions with recognized data protection frameworks;
• Limiting the categories and volume of data transferred to only what is strictly necessary for the stated processing purpose.

By using winmayam8, you acknowledge that your data may be processed outside the Philippines in connection with the services described in this Policy.

winmayam8 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made to this Policy, we will notify registered players by posting a notice on the Platform and, where appropriate, by sending a notification to your registered email address.

The "Last Updated" date displayed at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to remain informed of how your data is being handled. Your continued use of the winmayam8 platform following the effective date of any update constitutes your acceptance of the revised Policy.

If you do not agree with the updated Policy, you must cease using the Platform and may request account closure in accordance with the Terms and Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 10, or wish to raise a complaint about how winmayam8 handles your personal data, please contact our support team. We have Filipino-speaking support staff available 24/7 through the Platform's live chat feature, and you may also submit written queries to our support email address displayed in the site footer.

When submitting a data rights request, please include:

• Your registered winmayam8 username;
• The email address associated with your account;
• A clear description of your request or concern;
• Any relevant context that will help our team process your request efficiently.

winmayam8 will acknowledge your request within 48 hours and provide a full response within a reasonable timeframe. Identity verification may be required before processing certain data requests to ensure that personal data is not disclosed to unauthorized third parties.