This Privacy Policy explains how winmaya collects, uses, stores, and protects the personal information of all registered players and site visitors. Your data is handled responsibly and in compliance with Philippine data protection law.
These cards highlight the most important aspects of how winmaya handles your data. Please read the full policy below for complete details.
winmaya collects registration details, identity verification documents, payment information, gameplay data, and technical information such as IP address and device identifiers — only what is necessary to operate the Platform.
Your data is used to operate your account, process transactions, comply with legal obligations, detect fraud, improve the Platform, and where you have consented, to send you relevant promotions.
winmaya does not sell personal data. We share data only with trusted service providers (payment processors, KYC verification services), regulatory authorities as required, and no one else.
All data is protected using 256-bit SSL encryption in transit and secure encrypted storage at rest. Access to personal data is restricted to authorised personnel on a strict need-to-know basis.
Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have rights to access, correct, erase, and port your personal data. You may also object to certain processing activities.
winmaya retains personal data for as long as your account is active and for a minimum of five (5) years after account closure, as required by applicable anti-money laundering and gaming regulations.
winmaya ("winmaya," "we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who use the winmaya Platform at winmaya.biz (the "Platform"), including registered players, visitors, and prospective customers.
This Privacy Policy ("Policy") describes the types of personal information winmaya collects, the purposes for which it is collected and used, the parties with whom it may be shared, and the rights available to you as a data subject under Philippine law. This Policy should be read alongside winmaya's Terms & Conditions and Responsible Gaming Policy.
By registering for an account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
The data controller responsible for personal data processed through the winmaya Platform is winmaya, operating under Philippine jurisdiction. winmaya has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
For data protection enquiries, you may contact our DPO via email at: [email protected] (please include "Data Privacy" in the subject line).
winmaya collects personal data through several means, including information you provide directly, data generated through your use of the Platform, and information obtained from third parties where permitted by law.
winmaya uses personal data collected from players and site visitors for the following purposes:
winmaya processes personal data on the following legal grounds under the Data Privacy Act of 2012:
winmaya does not sell, rent, or trade personal data to any third party for commercial purposes. winmaya may share personal data in the following limited circumstances:
No cross-border data sales. winmaya does not transfer or sell your personal data to foreign advertising networks, data brokers, or any third party for commercial resale purposes.
winmaya uses cookies and similar technologies to operate the Platform and improve your experience. These include:
You may manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the Platform. winmaya does not use third-party advertising or retargeting cookies.
winmaya implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. These measures include:
While winmaya takes all reasonable precautions, no internet transmission or electronic storage system is completely secure. In the event of a data breach that poses a risk to your rights, winmaya will notify you and the National Privacy Commission in accordance with the requirements of the Data Privacy Act.
winmaya retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.
Under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by winmaya:
To exercise any of these rights, please contact winmaya's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." winmaya will respond within thirty (30) days of receipt of a verifiable request.
The winmaya Platform is strictly restricted to individuals aged 21 years and above. winmaya does not knowingly collect personal data from any person under this age. If winmaya becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, that account will be immediately suspended, the data will be deleted, and any deposits will be returned in accordance with winmaya's account closure procedures.
If you believe that a minor has registered on the Platform, please contact winmaya support immediately via live chat or at [email protected].
winmaya's operations are based in the Philippines. Where personal data is transferred to service providers or infrastructure located outside the Philippines (for example, cloud hosting services), winmaya ensures that adequate safeguards are in place to protect your data to a standard at least equivalent to that required under the Data Privacy Act of 2012. Such safeguards may include standard contractual clauses, data processing agreements, and verification that recipient jurisdictions provide an adequate level of data protection.
winmaya reserves the right to update this Privacy Policy at any time to reflect changes in our practices, the Platform, or applicable law. Material changes will be communicated to registered Players via their registered email address or mobile number, or through a prominent notice on the Platform, at least fourteen (14) days before the changes take effect. The "Last updated" date at the top of this Policy will reflect the date of the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.
If you have questions, concerns, or complaints about this Privacy Policy or winmaya's data handling practices, please contact our Data Protection Officer:
Email: [email protected] (subject line: "Data Privacy")
Support Hours: Daily, 8AM to midnight Philippine Standard Time (PHT)
If you are not satisfied with winmaya's response to your complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines.
National Privacy Commission (Philippines): The NPC is the independent body responsible for overseeing compliance with the Data Privacy Act of 2012. Complaints may be filed through the NPC's official channels under Philippine law.
winmaya protects every Filipino player's personal and financial information with industry-grade security, full compliance with Philippine data privacy law, and a commitment to transparency in all data practices.
For players 21 and above only. Please gamble responsibly. Sumugal nang may responsibilidad.