windreamph Privacy Policy

1. Introduction

windreamph ("windreamph," "we," "us," or "our") operates the online gaming platform accessible at windreamph.club, providing casino games, sports betting, live dealer tables, bingo, and related entertainment services to players in the Philippines. In the course of providing these services, windreamph collects and processes personal data about registered players and visitors to the windreamph platform.

This Privacy Policy ("Policy") sets out the basis on which windreamph collects, uses, stores, shares, and protects personal data. It applies to all personal data collected through the windreamph website, mobile interface, customer support channels, and any other touchpoints through which you interact with windreamph.

windreamph is committed to handling your personal data responsibly, transparently, and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). windreamph is also subject to data-related obligations under PAGCOR's regulatory framework for online gaming operators.

Please read this Policy carefully. If you have any questions about how windreamph handles your personal data, you can reach our Data Protection Officer at the contact details provided in Section 15 of this Policy.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, windreamph is the personal information controller in respect of the personal data collected through the windreamph platform. This means windreamph determines the purposes and means of processing your personal data.

windreamph has appointed a Data Protection Officer (DPO) who is responsible for overseeing windreamph's compliance with applicable data protection laws and for handling data subject rights requests. You may contact the windreamph DPO at the email address provided in Section 15 of this Policy.

3. Personal Data We Collect

windreamph collects the following categories of personal data from players and platform visitors:

windreamph does not intentionally collect sensitive personal information (as defined under the DPA 2012) beyond what is strictly required for identity verification and regulatory compliance purposes.

4. How We Collect Your Data

windreamph collects personal data through the following means:

• Direct Collection: Data you provide when registering a windreamph account, completing KYC verification, making deposits or withdrawals, contacting windreamph support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the windreamph platform, including IP address, device identifiers, browser information, and session activity logs, via cookies and similar tracking technologies.
• Third-Party Sources: Identity and address verification data received from KYC service providers, fraud screening services, and payment processors in connection with windreamph's regulatory compliance obligations.
• Regulatory Sources: Information received from PAGCOR or other Philippine government authorities in connection with windreamph's licensing and compliance obligations.

5. How We Use Your Personal Data

windreamph uses the personal data it collects for the following purposes:

• Account Management: Creating, maintaining, and administering your windreamph player account, including verifying your identity and eligibility to play.
• Service Delivery: Providing access to windreamph's games, processing deposits and withdrawals, and delivering the core gaming experience.
• KYC & AML Compliance: Verifying your identity, age (21+), and source of funds in accordance with PAGCOR regulations and the Philippine Anti-Money Laundering Act (AMLA) and its amendments.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, and other security threats to the windreamph platform.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behavior and administering responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive marketing communications from windreamph. You may opt out at any time.
• Legal & Regulatory Obligations: Complying with windreamph's obligations under Philippine law, PAGCOR regulations, NPC requirements, and any lawful orders from competent authorities.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve the windreamph platform, game selection, and user experience.

6. Legal Basis for Processing

windreamph processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform windreamph's obligations under the Terms & Conditions you agreed to upon registration — including account management, game provision, and payment processing.
• Legal Obligation: Processing required to comply with windreamph's obligations under Philippine law, including PAGCOR licensing conditions, AMLA reporting requirements, and NPC data protection obligations.
• Legitimate Interests: Processing carried out for windreamph's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Sharing & Disclosure

windreamph does not sell, rent, or trade your personal data to third parties. windreamph may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party services engaged by windreamph to verify player identity and age in compliance with PAGCOR and AMLA requirements.
• Fraud Prevention Services: Specialist providers engaged to detect and prevent fraudulent activity on the windreamph platform.
• Game Technology Providers: Software providers whose games are hosted on the windreamph platform may receive limited technical data necessary to deliver their games.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where windreamph is legally required to disclose information.
• Legal & Professional Advisers: Lawyers, auditors, and other professional advisers engaged by windreamph, subject to professional confidentiality obligations.

All third-party service providers engaged by windreamph are required to process personal data only in accordance with windreamph's instructions and applicable data protection law, and to implement appropriate security measures to protect the data they handle.

8. Cookies & Tracking Technologies

windreamph uses cookies and similar tracking technologies on the windreamph platform to enhance your experience, maintain session security, and analyze platform usage. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the windreamph platform to function correctly, including session management, login authentication, and security features. These cookies cannot be disabled.
• Functional Cookies: Used to remember your preferences and settings on the windreamph platform, such as language preferences and responsible gaming limit settings.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the windreamph platform, helping windreamph improve its services. No personally identifiable information is included in analytics reports.
• Marketing Cookies: Used to deliver relevant promotional content to players who have consented to receive marketing communications from windreamph. These cookies are only active for players who have opted in.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the windreamph platform. For strictly necessary cookies, no opt-out is available as they are essential to platform operation.

9. Data Retention

windreamph retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

• Account Data & KYC Records: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR licensing conditions and AMLA record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA requirements.
• Gaming History: Retained for a minimum of three (3) years from the date of each gaming session, for regulatory reporting and dispute resolution purposes.
• Support Communications: Retained for two (2) years from the date of the last communication, for dispute resolution and service quality purposes.
• Marketing Consent Records: Retained for the duration of your windreamph account and for two (2) years following account closure, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, windreamph will securely delete or anonymize your personal data, unless further retention is required by a specific legal obligation or ongoing regulatory investigation.

10. Data Security

windreamph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the windreamph platform.
• Encryption of sensitive data at rest, including financial data and government ID information submitted for KYC verification.
• Role-based access controls ensuring that windreamph staff can only access personal data that is necessary for their specific job function.
• Regular security assessments, penetration testing, and vulnerability scanning of the windreamph platform infrastructure.
• Multi-factor authentication requirements for windreamph staff accessing systems that contain personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While windreamph takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your windreamph account credentials and for notifying windreamph immediately if you suspect unauthorized access to your account.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by windreamph:

• Right to Be Informed: The right to be informed about how windreamph collects and processes your personal data — which this Privacy Policy fulfils.
• Right of Access: The right to request a copy of the personal data windreamph holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by windreamph.
• Right to Erasure: The right to request deletion of your personal data, subject to windreamph's legal and regulatory retention obligations. windreamph may be unable to delete data that must be retained under PAGCOR or AMLA requirements.
• Right to Object: The right to object to windreamph's processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to windreamph's overriding legitimate grounds.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe windreamph has processed your personal data in violation of the DPA 2012.

To exercise any of the above rights, please contact windreamph's Data Protection Officer at the email address provided in Section 15. windreamph will respond to all data subject rights requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. windreamph may request proof of identity before processing a data subject rights request.

12. Children's Privacy

The windreamph platform is strictly intended for adults aged 21 years and above, in compliance with Philippine gaming regulations. windreamph does not knowingly collect personal data from individuals under the age of 21.

windreamph implements age verification controls during the registration process and as part of its KYC procedures to prevent underage individuals from accessing the windreamph platform. Any account found to be held by a person under the age of 21 will be immediately closed and any funds held in the account will be handled in accordance with windreamph's underage gambling policy and applicable PAGCOR guidelines.

If you believe that windreamph has inadvertently collected personal data from a person under the age of 21, please contact windreamph immediately at the contact details in Section 15 so that the data can be deleted and the account closed.

13. Cross-Border Data Transfers

windreamph's primary operations and data storage are based in the Philippines. In certain circumstances, personal data may be transferred to or accessed from locations outside the Philippines — for example, where windreamph engages technology providers or game software suppliers whose infrastructure is located abroad.

Where such cross-border transfers occur, windreamph ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring overseas recipients to apply data protection standards equivalent to those required under the Philippine DPA 2012.
• Transfers only to countries or organizations that provide an adequate level of data protection as recognized by the NPC.
• Your explicit consent to the transfer, where required by applicable law.

windreamph will not transfer your personal data to overseas recipients unless the transfer is necessary for the performance of your windreamph account agreement or is otherwise permitted under the DPA 2012 and NPC regulations.

14. Updates to This Privacy Policy

windreamph may update this Privacy Policy from time to time to reflect changes in windreamph's data practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, windreamph will notify registered players by email or by displaying a prominent notice on the windreamph platform prior to the changes taking effect.

The date of the most recent revision to this Privacy Policy is displayed at the top of this page. windreamph recommends that you review this Policy periodically to stay informed of how windreamph protects your personal data. Your continued use of the windreamph platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised Policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or windreamph's handling of your personal data, please contact windreamph's Data Protection Officer:

For general customer support enquiries, you may also contact the windreamph support team at [email protected]. windreamph aims to respond to all privacy-related enquiries within fifteen (15) business days.

If you are not satisfied with windreamph's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) through the NPC's official complaint channels.