winzit Privacy Policy

1. Introduction and Scope

winzit ("winzit," "we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who interact with the winzit online gaming platform (the "Platform"). This Privacy Policy describes how winzit collects, uses, stores, shares, and protects personal data in connection with your use of the Platform, including all games, features, promotions, customer support services, and any other services made available through winzit.

This Privacy Policy applies to all registered Players, prospective Players who browse the Platform without registering, and any other individuals whose personal data winzit processes in connection with the operation of the Platform. By accessing or using the winzit Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller Information

For the purposes of applicable data protection legislation, winzit acts as the data controller in respect of personal data collected through the Platform. As data controller, winzit determines the purposes and means by which your personal data is processed.

If you have any questions about how winzit processes your personal data, or if you wish to exercise any of your data rights, you may contact our Data Protection team via live chat (available 24/7 on the Platform) or by email at [email protected].

3. Personal Data We Collect

winzit collects the following categories of personal data:

3.1 Identity and Contact Data

• Full legal name
• Date of birth
• Nationality and country of residence
• Email address
• Mobile phone number
• Residential address (including city — e.g., Manila, Cebu, Davao, Quezon City, Makati)

3.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., Philippine passport, driver's license, SSS/UMID card, PhilSys national ID)
• Proof of address documents
• Selfie or facial image for identity verification purposes
• Proof of payment method ownership

3.3 Financial Data

• GCash account details
• PayMaya account details
• Bank account information (BPI, BDO, Metrobank, or other supported banks)
• Transaction history, including deposits, withdrawals, and wager amounts in Philippine Peso (PHP)

3.4 Gaming and Behavioral Data

• Game history, wager amounts, and outcomes
• Session duration and frequency of play
• Bonus and promotion usage
• Responsible gaming tool usage (e.g., deposit limits, self-exclusion requests)

3.5 Technical and Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Session identifiers and authentication tokens
• Platform interaction logs and error reports

3.6 Communications Data

• Records of live chat conversations with winzit support
• Email correspondence with winzit
• Feedback and survey responses

4. How We Collect Your Data

winzit collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically — through cookies, session tracking, and server logs when you access and use the Platform.
• From third parties — including identity verification service providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud prevention services, and regulatory authorities where required by law.

5. How We Use Your Personal Data

winzit uses your personal data for the following purposes:

6. Legal Basis for Processing

winzit processes your personal data on the following legal bases:

• Performance of a contract — processing necessary to provide you with the winzit gaming services you have registered for, including account management, payment processing, and game delivery.
• Legal obligation — processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and regulatory reporting obligations.
• Legitimate interests — processing necessary for winzit's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights.
• Consent — where you have given explicit consent, such as for receiving marketing communications. You may withdraw consent at any time by contacting our support team.

7. Sharing Your Personal Data

winzit does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:

• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals.
• Identity verification providers — third-party KYC and age verification service providers engaged by winzit to verify player identities in compliance with regulatory requirements.
• Fraud prevention and security services — providers of fraud detection, risk management, and cybersecurity services that help winzit protect the integrity of the Platform.
• Regulatory and law enforcement authorities — where winzit is required by applicable law, court order, or regulatory directive to disclose personal data.
• IT and infrastructure providers — cloud hosting, data storage, and platform infrastructure providers engaged by winzit under strict data processing agreements.
• Professional advisers — lawyers, auditors, and other professional advisers where necessary for winzit's legal and compliance obligations.

All third parties with whom winzit shares personal data are required to process such data in accordance with applicable data protection laws and are prohibited from using it for any purpose other than that for which it was shared.

8. International Data Transfers

Some of winzit's service providers and infrastructure partners may be located outside the Philippines. Where personal data is transferred internationally, winzit takes appropriate steps to ensure that such transfers are conducted in compliance with applicable data protection laws and that adequate safeguards are in place to protect your personal data, including the use of standard contractual clauses or equivalent mechanisms.

9. Data Retention

winzit retains personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account and KYC data — retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations.
• Transaction and financial data — retained for a minimum of five (5) years following the date of the transaction.
• Gaming and behavioral data — retained for the duration of your account and for up to three (3) years following account closure.
• Communications data — retained for up to three (3) years from the date of the communication.
• Technical and device data — retained for up to twelve (12) months from collection.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with winzit's data retention procedures.

10. Cookies and Tracking Technologies

winzit uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. winzit uses the following types of cookies:

• Strictly necessary cookies — essential for the Platform to function, including session management, authentication, and security. These cannot be disabled.
• Performance cookies — used to collect anonymized information about how Players use the Platform, helping winzit identify and fix technical issues and improve performance.
• Functional cookies — used to remember your preferences and settings (e.g., language, display preferences) to provide a more personalized experience.

winzit does not use third-party advertising cookies or cross-site tracking technologies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may affect the functionality of the Platform.

11. Security of Your Personal Data

winzit implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the winzit Platform;
• Encryption of sensitive data at rest, including financial and identity data;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing;
• Multi-factor authentication for administrative access to winzit systems;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While winzit takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for keeping your winzit login credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

12. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by winzit:

• Right of access — you may request a copy of the personal data winzit holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of your personal data where winzit no longer has a lawful basis to retain it, subject to applicable legal retention obligations.
• Right to restriction of processing — you may request that winzit restrict the processing of your personal data in certain circumstances.
• Right to data portability — you may request a copy of personal data you have provided to winzit in a structured, commonly used, machine-readable format.
• Right to object — you may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact winzit via live chat or email at [email protected]. winzit will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

13. Children and Minors

The winzit Platform is strictly restricted to individuals aged 21 years and older, in accordance with Philippine gaming regulations. winzit does not knowingly collect personal data from individuals under the age of 21. If winzit becomes aware that personal data has been collected from a minor, such data will be deleted immediately and the associated account will be closed.

14. Changes to This Privacy Policy

winzit reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered Players via the email address on file and/or by a prominent notice on the Platform. The revised Privacy Policy will take effect on the date specified in the notice.

We encourage you to review this Privacy Policy periodically. Your continued use of the winzit Platform following the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy.

15. Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or winzit's data practices, please contact us:

• Live Chat: Available 24/7 on the winzit Platform — average response time under 2 minutes
• Email: [email protected]

winzit will acknowledge all privacy-related complaints within five (5) business days and endeavor to resolve them within thirty (30) days. If you are not satisfied with winzit's response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.