wpiso Privacy Policy

1. Introduction

wpiso ("we", "us", "the Company") is committed to protecting the privacy and personal data of every player who registers and plays on our online gaming platform. This Privacy Policy sets out how wpiso collects, processes, stores, and protects personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as well as applicable PAGCOR regulatory requirements.

This Privacy Policy should be read alongside the wpiso Terms and Conditions, which govern your use of the Platform. Defined terms used in this Privacy Policy have the same meanings as those set out in the Terms and Conditions unless otherwise stated.

wpiso acts as the Data Controller in respect of the personal data you provide when using the Platform. As Data Controller, wpiso determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection law.

2. Personal Data We Collect

wpiso collects the following categories of personal data from registered players and visitors to the Platform:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (to verify that you meet the minimum age requirement of 21 years)
• Philippine mobile number and email address
• Residential address (province, city/municipality, barangay, and postal code)
• Government-issued identification numbers (e.g., SSS, UMID, PhilSys ID, passport number)

2.2 Financial Data

• GCash or Maya account details (mobile number associated with the account)
• Bank account information (account name and number) for BPI, BDO, Metrobank, or other linked banks
• Card details (masked card number, card type) for Visa and Mastercard transactions
• Transaction history, deposit amounts, withdrawal requests, and account balances

2.3 Gaming and Behavioural Data

• Game play history, bet amounts, wager outcomes, and bonus utilisation records
• Session duration, login timestamps, and platform activity logs
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests)
• Customer support interaction records, including live chat transcripts and email correspondence

2.4 Technical Data

• IP address and approximate geolocation data
• Device type, operating system, browser type, and version
• Cookie identifiers and session tokens
• Referring URL and on-site navigation behaviour

3. How We Collect Your Data

wpiso collects personal data through the following means:

• Direct collection: Information you provide when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automated collection: Technical and behavioural data collected automatically when you access the Platform, including cookies, server logs, and analytics tools.
• Third-party sources: Identity verification data from KYC service providers, fraud detection data from security partners, and payment confirmation data from payment processors such as GCash, Maya, BPI, and BDO.
• Regulatory sources: Data received from PAGCOR or other competent Philippine authorities in connection with compliance obligations, including self-exclusion registers.

4. Legal Basis for Processing

wpiso processes your personal data on the following legal grounds under the Data Privacy Act of 2012:

5. How We Use Your Personal Data

wpiso uses the personal data we collect for the following purposes:

• To create, verify, and manage your wpiso Account, including processing your registration and authenticating your identity at login.
• To process financial transactions, including deposits via GCash, Maya, BPI, BDO, Metrobank, and other supported Philippine payment channels, as well as withdrawal requests.
• To comply with PAGCOR's Know Your Customer (KYC) requirements and verify that you meet the minimum age requirement of 21 years before enabling real-money gameplay.
• To monitor gaming activity for the purpose of identifying and supporting players who may be exhibiting signs of problem gambling, in fulfilment of our responsible gaming obligations.
• To detect, prevent, and investigate fraudulent transactions, collusion, bonus abuse, money laundering, and other prohibited activities.
• To respond to your queries, complaints, and support requests submitted via live chat, email, or other communication channels.
• To send you transactional communications, including account confirmations, deposit receipts, and security alerts.
• To send you promotional and marketing communications, where you have provided your consent to receive such messages. You may withdraw consent at any time by contacting [email protected].
• To analyse platform usage patterns, game performance, and player behaviour for the purpose of improving the overall wpiso experience.
• To meet our legal and regulatory obligations under Philippine law, including reporting obligations to PAGCOR and the Anti-Money Laundering Council (AMLC).

6. Data Sharing and Disclosure

wpiso does not sell, rent, or trade your personal data to any third party. We may, however, share your personal data with carefully selected categories of recipients in the following circumstances:

6.1 Regulatory and Government Authorities

wpiso is required by law to share player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government agencies upon receipt of a valid legal request, court order, or regulatory directive. wpiso will notify affected players of such disclosures where permitted by law.

6.2 Payment Processors

To process your deposits and withdrawals, wpiso shares relevant financial data with licensed payment processors and e-wallet providers, including GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, PesoNet, and Visa/Mastercard acquiring banks. These processors are contractually required to handle your data in accordance with applicable data protection law and PCI-DSS standards.

6.3 Identity Verification and KYC Providers

wpiso engages licensed third-party KYC and identity verification service providers to validate the documents you submit during account verification. These providers process your identification data solely for the purpose of verifying your identity and are bound by strict confidentiality obligations.

6.4 Game Content Providers

Some game providers integrated into the wpiso platform may receive limited gameplay and session data for the purpose of delivering the game service, calculating payouts, and auditing game outcomes. These providers do not receive your financial or full identity data.

6.5 Fraud Prevention and Security Partners

wpiso shares device fingerprint data, IP addresses, and behavioural signals with trusted fraud detection and cybersecurity partners to identify and block suspicious activity on the Platform.

7. Cookies and Tracking Technologies

The wpiso Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure gaming experience. A cookie is a small text file stored on your device when you visit a website.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session management, login authentication, and security. These cannot be disabled without affecting core Platform functionality.
• Functional Cookies: Remember your preferences, such as language settings and display options, to personalise your experience on the wpiso Platform.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate and interact with the Platform. This helps wpiso identify areas for improvement.
• Security Cookies: Assist in fraud detection and prevention by identifying unusual device or session behaviour.

7.2 Managing Cookies

You may configure your browser settings to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use the wpiso Platform. Instructions for managing cookies are available in the help documentation of all major browsers.

8. Data Retention

wpiso retains your personal data for as long as your Account remains active and for a period thereafter as required by applicable law and regulatory obligation. Specifically:

• Account registration and identity data is retained for a minimum of five (5) years following Account closure, in compliance with PAGCOR record-keeping requirements and anti-money laundering regulations.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Customer support correspondence is retained for three (3) years from the date of the last interaction.
• Analytics and behavioural data in anonymised or aggregated form may be retained indefinitely for statistical and platform improvement purposes.

Upon expiry of the applicable retention period, wpiso will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012 (RA 10173), registered players on the wpiso Platform hold the following rights in respect of their personal data:

• Right to be Informed: You have the right to be told what personal data wpiso collects and how it is used, as set out in this Privacy Policy.
• Right of Access: You may request a copy of the personal data wpiso holds about you at any time.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to wpiso's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: You may request that wpiso provide your personal data in a structured, commonly used, and machine-readable format.
• Right to File a Complaint: If you believe wpiso has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of the above rights, please contact the wpiso Data Privacy Officer at [email protected] with the subject line "Data Privacy Request". wpiso will respond to your request within fifteen (15) business days.

10. Data Security Measures

wpiso implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These include:

• Transport Layer Security (TLS 1.2 or higher) encryption for all data transmitted between your device and the wpiso Platform.
• AES-256 encryption for sensitive data stored in wpiso databases, including identity documents and financial records.
• Role-based access controls limiting staff access to personal data to only those with a legitimate operational need.
• Multi-factor authentication for all internal systems handling player data.
• Regular third-party penetration testing and vulnerability assessments of the wpiso Platform.
• 24/7 monitoring of platform infrastructure for anomalous activity, intrusion attempts, and data exfiltration signals.

11. Children and Minors

The wpiso Platform is strictly intended for individuals aged 21 years and above, in accordance with PAGCOR regulations governing online gambling in the Philippines. wpiso does not knowingly collect personal data from individuals under the age of 21.

If wpiso discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the associated Account and delete all related personal data. Parents or guardians who believe their child has registered on the wpiso Platform are urged to contact us immediately at [email protected].

12. International Data Transfers

The wpiso Platform is operated primarily within the Philippines and your personal data is stored on servers located within the country. In circumstances where it becomes necessary to transfer personal data to a third-party service provider located outside the Philippines — such as certain game content providers or cloud infrastructure partners — wpiso will ensure that such transfers are carried out in compliance with the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

Specifically, wpiso will only transfer personal data internationally where the recipient country offers an adequate level of data protection, or where adequate contractual safeguards — such as standard contractual clauses approved by the National Privacy Commission — are in place.

13. Third-Party Links

The wpiso Platform may contain references to wpiso's own internal pages and game categories. While we do not include external links to third-party websites within the platform itself, players should be aware that if they independently navigate to external sites, those sites operate under their own privacy policies and wpiso has no control over, and accepts no responsibility for, the data practices of any external operator.

14. Amendments to This Privacy Policy

wpiso reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or Platform functionality. The effective date at the top of this page will be updated whenever material changes are made.

Where changes are significant, wpiso will notify registered players via email or an on-platform notification before the changes take effect. We encourage you to review this Privacy Policy periodically to stay informed about how wpiso protects your data. Your continued use of the Platform after any amendment constitutes your acceptance of the updated Privacy Policy.

15. Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data privacy rights, or have a concern about how wpiso has handled your personal data, please contact our Data Privacy Officer:

• Email: [email protected] (Subject: "Data Privacy Request")
• Response Time: Within 15 business days of receipt
• Support Hours: 24/7 — including Philippine public holidays

If you are not satisfied with wpiso's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines through their official channels.

For matters relating to your gaming account, responsible gaming tools, or self-exclusion requests, please also visit our Responsible Gaming page or review the Terms and Conditions.