This Privacy Policy explains how winsir Casino collects, uses, stores, and protects the personal data of players and visitors who use the winsir platform at winsir.vip. winsir is committed to handling your personal information with care, transparency, and in full compliance with applicable Philippine data protection law — including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.
Overview: winsir Casino respects the privacy of every Filipino player on our platform. This Policy is written in plain language wherever possible so you can understand exactly what personal data we hold, why we hold it, who we share it with, and what your rights are under Philippine law. If anything is unclear, contact our Data Protection Officer at the details provided in Section 15.
winsir Casino ("winsir," "we," "us," "our") is the data controller responsible for personal data collected through the winsir platform accessible at winsir.vip. winsir operates under the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR).
As data controller, winsir determines the purposes and means by which your personal data is processed. winsir is subject to the requirements of Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.
Contact details for the winsir Data Protection Officer (DPO) are provided in Section 15 of this Policy. All data-related requests, complaints, and queries should be directed to the DPO in the first instance.
winsir collects and processes the following categories of personal data in connection with the operation of the platform:
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity | Name, date of birth, Philippine ID | Account creation, KYC, age verification |
| Contact | Email, mobile number, address | Communication, 2FA, account recovery |
| Financial | GCash number, BPI/BDO account | Deposit & withdrawal processing |
| Gaming Activity | Bet history, game sessions | Platform operation, responsible gaming |
| Technical | IP address, device, browser | Security, fraud detection, analytics |
| Communications | Support chat logs, emails | Customer service, dispute resolution |
winsir collects personal data through the following channels:
winsir does not purchase personal data from data brokers or third-party marketing lists. We do not source personal data about you from your social media profiles without your explicit consent.
winsir processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012:
Where winsir relies on legitimate interests as its legal basis, we conduct a balancing test to ensure those interests do not unfairly override your rights and freedoms. You have the right to object to processing based on legitimate interests — see Section 10 for how to exercise this right.
winsir uses your personal data for the following specific purposes:
To create and maintain your winsir account; to authenticate your login via username, password, and SMS 2FA; to process your deposits and withdrawals in Philippine Peso; to credit bonuses and track promotional eligibility; to display your gaming history and account dashboard; and to provide 24/7 customer support.
To verify that you are at least 21 years of age in compliance with PAGCOR's requirements; to verify your identity and payment method ownership as part of KYC; to fulfil AML reporting obligations; and to respond to any lawful requests for information from PAGCOR or other competent Philippine authorities.
To detect and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct; to monitor login sessions for suspicious activity; to enforce the one-account-per-person rule; and to investigate and resolve security incidents.
To administer and enforce responsible gaming tools you have set (deposit limits, self-exclusion, session timers); to identify patterns of play that may indicate problem gambling; and to provide intervention where appropriate in accordance with winsir's responsible gaming commitments under PAGCOR regulations.
To analyse platform usage patterns and game performance data (in aggregated, anonymised form where possible) to improve winsir's product offering; to test new features; and to personalise your platform experience based on your gaming preferences where you have not opted out.
To send you promotional emails, SMS messages, or platform notifications about new games, bonuses, tournaments, and offers — strictly where you have given explicit consent to receive such communications at the time of registration or subsequently in your account settings. You may withdraw consent at any time.
What We Do Not Do: winsir does not sell, rent, or trade your personal data to third parties for their own marketing purposes. winsir does not use your data to build profiles for sale to advertisers. Your gaming history is not shared with employers, insurers, or credit providers.
winsir shares personal data only where necessary and with appropriate safeguards in place. The categories of third parties who may receive your data are as follows:
winsir shares necessary transaction data with payment processors including GCash (Mynt), PayMaya (Maya Philippines), BPI, BDO, Metrobank, Visa/Mastercard networks, and InstaPay/PESONet clearing infrastructure solely to process your deposit and withdrawal instructions. These providers are bound by their own data protection obligations under Philippine law and applicable payment network rules.
winsir uses licensed third-party identity verification services to conduct KYC checks. Your identity documents and selfie may be shared with such providers for the purpose of verification. These providers are contractually obligated to process your data only for that purpose and to maintain appropriate security standards.
winsir's game library is powered by third-party providers including JILI, PG Soft, Pragmatic Play, and Evolution Gaming. Game session data (including bet amounts and outcomes) is processed by these providers' systems in the course of game delivery. These providers are contractually restricted from using game session data for any purpose other than service provision to winsir.
winsir is legally obligated to share data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities when required by law, regulation, court order, or lawful government request. winsir will notify you of such disclosures to the extent permitted by law.
Legal counsel, auditors, and other professional advisers engaged by winsir may have access to personal data where necessary for the provision of their professional services. All such advisers are bound by confidentiality obligations.
winsir uses cookies and similar technologies to operate and improve the platform. Cookies are small data files stored on your browser or device. The following categories of cookies are used:
You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the winsir platform. winsir does not use third-party advertising cookies or retargeting pixels.
winsir implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
While winsir takes all reasonable precautions, no internet-based system provides absolute security guarantees. You are responsible for maintaining the security of your login credentials and for ensuring your devices are adequately protected. Please refer to the account security guidance in winsir's Terms & Conditions.
winsir retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by legal obligations:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | PAGCOR regulatory requirement |
| KYC documents (ID copies, selfie) | 5 years from last account activity | AMLC reporting obligations, RA 9160 |
| Financial transaction records | 5 years from transaction date | Anti-Money Laundering Act |
| Gaming session logs | 3 years from session date | PAGCOR operational compliance |
| Support correspondence | 3 years from resolution | Dispute resolution and legal claims |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of lawful processing |
After applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised aggregate data may be retained for statistical and analytical purposes without time limit.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by winsir. To exercise any of these rights, contact our Data Protection Officer as described in Section 15. winsir will respond to verified requests within thirty (30) days as required by the NPC.
You have the right to be told what personal data winsir collects, why it is collected, and how it is used — which is the purpose of this Privacy Policy.
You may request a copy of the personal data winsir holds about you, including what it is, where it came from, and who it has been shared with.
If any personal data winsir holds about you is inaccurate or incomplete, you have the right to have it corrected without undue delay.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
You may object to processing based on legitimate interests or to direct marketing at any time. winsir will cease that processing unless it can demonstrate compelling grounds.
Where processing is based on your consent or on a contract, you may request your data in a structured, commonly used, machine-readable format.
Rights are not absolute and may be limited by winsir's legal obligations — for example, winsir cannot delete AML records that must be retained under Philippine law. winsir will explain any such limitation clearly when responding to your request. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.
winsir Casino is strictly prohibited from use by persons under 21 years of age in accordance with PAGCOR regulations. winsir does not knowingly collect, process, or store the personal data of anyone below the age of 21.
Age verification is conducted during the KYC process, which requires submission of a valid Philippine government-issued ID showing date of birth. Any account discovered to belong to a person under 21 will be immediately suspended, all data handled in accordance with PAGCOR's directions, and the data subject's guardian or parent will be notified where legally required.
Important: If you are a parent or guardian and believe a minor has created an account on winsir, please contact our Data Protection Officer immediately at [email protected] (plain text only — not a clickable link). We will investigate and take appropriate action within 24 hours.
Some of winsir's third-party service providers — particularly game providers such as PG Soft, Pragmatic Play, and Evolution Gaming — may process game session data on servers located outside the Philippines. Where such transfers occur, winsir ensures appropriate safeguards are in place as required by the Data Privacy Act and NPC Circular No. 16-01.
Safeguards include contractual clauses imposing data protection obligations on the recipient equivalent to those applicable under Philippine law, and (where applicable) reliance on the NPC's adequacy determinations for specific jurisdictions. Details of applicable transfer mechanisms for specific providers are available from our DPO upon request.
Financial transaction data processed through Philippine payment networks (GCash, BPI, BDO, InstaPay, PESONet) is processed entirely within the Philippines.
The winsir platform does not contain links to third-party websites for advertising or general browsing purposes. Game content is delivered by third-party providers within the winsir platform environment; however, winsir's Privacy Policy governs your overall platform experience.
winsir is not responsible for the privacy practices of third-party game providers' own corporate websites or external services. If you interact directly with any third-party service outside the winsir platform, you should review that party's own privacy policy.
winsir may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The date of the most recent revision is displayed at the top of this page.
Where changes are material — meaning they significantly affect how we process your personal data or your rights in connection with it — winsir will notify you by email to your registered address and by a prominent notice on the platform at least fourteen (14) days before the changes take effect.
Continued use of the winsir platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the revised Policy, you may request account closure as described in winsir's Terms & Conditions.
For all data privacy matters including access requests, correction requests, deletion requests, objections, and complaints, please contact the winsir Data Protection Officer:
If you are not satisfied with winsir's handling of your data privacy request, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines.
For general account support, game queries, and payment questions, please use winsir's 24/7 live chat on winsir.vip or visit our FAQ page. Routing general queries through the DPO channel may delay your response time.
Privacy protection at winsir isn't just a legal checkbox — it's part of how we earn and keep the trust of every Filipino player on the platform.
Every byte of data exchanged between your browser and winsir.vip is protected by 256-bit SSL — the same encryption standard used by Philippine banks including BPI and BDO. Your login, payment details, and personal data travel securely at all times.
winsir's data practices are designed to comply with Republic Act No. 10173. A dedicated Data Protection Officer oversees compliance, handles data subject requests, and liaises with the National Privacy Commission on your behalf.
winsir does not sell, rent, or trade your personal data to advertisers, data brokers, or third-party marketing companies. Your gaming history, contact details, and financial data are used solely to operate your winsir account and meet legal obligations.
winsir collects only the data genuinely needed to operate the platform and meet regulatory requirements — not everything technically possible. KYC documents are used for identity verification only and are not stored beyond legal retention periods.
Access, correction, deletion, and objection requests are handled by winsir's DPO team and resolved within 30 days as required by the NPC. We explain clearly when a right cannot be fulfilled due to legal retention obligations — no vague refusals.
In the event of a personal data breach, winsir's incident response procedures require NPC notification within legally mandated timeframes and direct notification to affected players where the breach poses a significant risk to their rights and freedoms.
You've read how winsir handles your personal information. Now see what the platform offers — over 1,200 games, GCash withdrawals, live dealer tables, and PBA sports betting, all in Philippine Peso.
21+ only. Gambling is for entertainment purposes only. Please play responsibly. Full responsible gaming tools available on our Responsible Gaming page.