wtfwin Privacy Policy

wtfwin ("wtfwin," "we," "us," or "our") operates the online gaming platform accessible at wtfwin.one and all associated subdomains and mobile applications (collectively, the "Platform"). wtfwin is the data controller responsible for the personal information collected through the Platform.

This Privacy Policy applies to all users of the Platform, including registered players, visitors who browse without registering, and any individual who contacts wtfwin through our support channels. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

If you have questions about this Policy or how wtfwin handles your personal data, please contact our Data Protection Officer (DPO) at the details provided in Section 14.

wtfwin collects only the personal data that is necessary for the purposes described in this Policy. The categories of data we collect include:

We do not collect sensitive personal information (as defined under RA 10173) unless strictly required for identity verification or responsible gaming compliance, and only with your explicit consent or as permitted by law.

wtfwin collects personal data through the following means:

• Direct interactions: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey.
• Automated technologies: When you browse the Platform, we automatically collect Technical Data and Usage Data via cookies, server logs, and similar tracking technologies (see Section 7).
• Third-party sources: We may receive data from payment processors (e.g., GCash, Maya), identity verification providers, fraud prevention services, and analytics partners — solely to the extent necessary to provide and secure the Platform.
• Publicly available sources: In limited circumstances, we may verify information against publicly available Philippine government databases for KYC and anti-money laundering (AML) compliance purposes.

wtfwin uses your personal data for the following purposes:

• Account management: To create, maintain, and secure your wtfwin account.
• Service delivery: To process deposits and withdrawals, provide access to games, and deliver customer support.
• Identity & age verification: To confirm that you are 21 years of age or older and that your identity matches your registration details, as required by PAGCOR regulations.
• AML & fraud prevention: To detect, investigate, and prevent money laundering, fraud, cheating, and other prohibited activities.
• Responsible gaming: To monitor gaming patterns, enforce self-exclusion requests, and provide responsible gaming tools and interventions where appropriate.
• Legal compliance: To comply with applicable Philippine laws, PAGCOR directives, court orders, and regulatory requests.
• Platform improvement: To analyze usage patterns, fix bugs, and improve the overall player experience.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time.

wtfwin does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, wtfwin processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration (e.g., account management, payment processing).
• Legal obligation: Processing required to comply with Philippine law, PAGCOR regulations, AML obligations, and tax reporting requirements.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

wtfwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following circumstances:

• Service providers: Payment processors (GCash, Maya, Philippine banks), KYC/identity verification providers, cloud hosting providers, and customer support platform operators — all bound by data processing agreements requiring them to protect your data.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where required by law or regulatory directive.
• Law enforcement: Philippine law enforcement agencies, where required by a valid court order, subpoena, or legal process.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of wtfwin's assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.
• With your consent: In any other circumstances where you have given explicit prior consent to the specific disclosure.

All third-party service providers engaged by wtfwin are contractually required to process your personal data only for the specified purpose and in accordance with RA 10173.

wtfwin uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform.

We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function (e.g., session authentication, security tokens). These cannot be disabled.
• Functional cookies: Remember your preferences (e.g., language, display settings) to improve your experience.
• Analytics cookies: Collect aggregated, anonymized data about how players use the Platform to help us improve performance and content. Used only with your consent.
• Marketing cookies: Used to deliver relevant promotional content. Used only with your explicit consent.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access core Platform features, though some personalization features may be limited.

wtfwin retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations.

• Active account data: Retained for the duration of your account and for a period of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act (AMLA) and its amendments.
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship.
• Support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter for compliance documentation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our internal data disposal procedures.

wtfwin implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the Platform;
• AES-256 encryption for sensitive data stored at rest;
• Multi-factor authentication (MFA) options for player accounts;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Regular security audits and penetration testing by independent third parties;
• 24/7 intrusion detection and monitoring systems.

In the event of a personal data breach that is likely to result in harm to affected individuals, wtfwin will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with RA 10173 and NPC Circular 16-03.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by wtfwin:

• Right to be informed: The right to know what personal data we collect and how we use it — which this Policy fulfills.
• Right of access: The right to request a copy of the personal data we hold about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will cease processing immediately.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 14. We will respond to verified requests within thirty (30) days. We may need to verify your identity before processing your request.

The wtfwin Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, delete the data, and refund any deposits in accordance with our Terms & Conditions.

If you are a parent or guardian and believe your child has registered on the Platform, please contact us immediately at the details provided in Section 14.

Some of wtfwin's service providers — including cloud infrastructure, KYC verification, and analytics partners — may process your personal data outside the Philippines. Where such transfers occur, wtfwin ensures that appropriate safeguards are in place, including contractual clauses that require the recipient to protect your data to a standard equivalent to RA 10173.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

wtfwin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Material changes will be communicated to registered players via email or a prominent notice on the Platform at least seven (7) days before the effective date of the change.

The "Effective Date" at the top of this Policy indicates when it was last revised. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact wtfwin's Data Protection Officer:

• Live Chat: Available 24/7 via the Platform
• Email (DPO): [email protected]
• General Support: [email protected]

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights under RA 10173 have been violated.