This Privacy Policy explains what personal data wtfwin collects from Filipino players, how we use it, how we protect it, and what rights you have over your information under Philippine law.
These cards summarize the core principles of wtfwin's approach to data privacy. They are an overview — the full legally binding policy is detailed below.
wtfwin only collects personal data that is necessary for account registration, identity verification (KYC), payment processing, gameplay delivery, regulatory compliance, and customer support. We do not collect data for collection's sake.
All personal data stored and transmitted by wtfwin is protected with 256-bit SSL encryption and access-controlled server infrastructure. Your data is never stored in plain text. Security audits are conducted regularly under PAGCOR compliance requirements.
wtfwin does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Your data is yours. It is shared only where legally required — with PAGCOR and Philippine law enforcement — or with your explicit consent.
Filipino players on wtfwin have rights under the Data Privacy Act of 2012 (Republic Act 10173) — including the right to access, correct, delete, and port your personal data. We honor all such requests within statutory timeframes.
wtfwin retains personal data only for as long as required to fulfil the purpose for which it was collected, or as required by law. Transaction and KYC records may be retained for up to seven years in compliance with anti-money laundering regulations.
In the event of a personal data breach that is likely to affect your rights, wtfwin will notify affected account holders and the National Privacy Commission (NPC) within 72 hours of discovering the breach, as required by Philippine law.
This Privacy Policy ("Policy") describes how wtfwin ("the Platform," "we," "us," or "our"), operating at wtfwin.asia, collects, uses, stores, shares, and protects the personal information of users ("Players," "Users," or "you") who access the wtfwin platform and related services. This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Republic of the Philippines and its Implementing Rules and Regulations.
⚠ Please read this Policy carefully. By registering a wtfwin account or using our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the wtfwin platform.
wtfwin is a PAGCOR-regulated online gaming platform designed for Filipino players. As a regulated platform, we are obligated — legally and ethically — to collect certain personal data from players in order to verify identity, process financial transactions, prevent fraud, comply with PAGCOR and anti-money laundering (AML) requirements, and provide the services you signed up for. We take these obligations seriously and are equally committed to protecting the personal information you entrust to us.
This Policy applies to all personal data collected through the wtfwin website at wtfwin.asia, including during account registration, KYC verification, deposit and withdrawal processes, gameplay, customer support interactions, and any other use of the platform's features. It applies to all registered and prospective players, regardless of the city or region in the Philippines from which they access the Service.
For the purposes of the Data Privacy Act of 2012, wtfwin is the Personal Information Controller responsible for the personal data collected through this platform. We determine the purposes and means by which your personal data is processed and are accountable for ensuring that all processing complies with RA 10173 and applicable PAGCOR regulations.
wtfwin has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy law. You may contact the DPO using the details provided in Section 14 of this Policy.
wtfwin collects the following categories of personal data from players:
wtfwin does not collect sensitive personal information — such as health data, political opinions, or religious beliefs — except where this arises incidentally in the context of responsible gaming self-assessments, in which case it is handled with the highest level of data protection.
wtfwin collects personal data through the following means:
wtfwin processes your personal data on the following legal bases under RA 10173:
| Purpose of Processing | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (service agreement with you) |
| KYC identity verification (21+ age check) | Legal obligation (PAGCOR regulations, RA 9487) |
| Processing deposits and withdrawals | Performance of contract; legal obligation (AML law) |
| Delivering gameplay and platform services | Performance of contract |
| Fraud detection and account security | Legitimate interests; legal obligation |
| Anti-money laundering monitoring | Legal obligation (RA 9160, as amended) |
| Customer support and dispute resolution | Performance of contract; legitimate interests |
| Responsible gaming monitoring | Legal obligation (PAGCOR RG requirements); legitimate interests |
| Platform analytics and service improvement | Legitimate interests |
| Marketing communications | Consent (you may withdraw at any time) |
| Regulatory reporting to PAGCOR / AMLC | Legal obligation |
wtfwin does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the following circumstances:
We are required by Philippine law to share certain player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other government authorities upon lawful request or as part of mandatory regulatory reporting obligations.
To process your financial transactions, wtfwin shares necessary payment data with our approved payment partners — including GCash (G-Xchange, Inc.), PayMaya Philippines, Inc., and participating local banks (BDO, BPI, Metrobank). These providers process data strictly for transaction execution and are bound by their own privacy and data security obligations under Philippine law.
To comply with PAGCOR's identity verification requirements, wtfwin engages third-party KYC service providers who process identity documents and perform liveness checks on our behalf. These providers act as Personal Information Processors and are contractually bound to handle your data solely for verification purposes.
wtfwin uses third-party cloud infrastructure and security services to host and protect the platform. These providers may have access to encrypted data as part of their service delivery but are contractually prohibited from accessing or using that data for any purpose other than providing the specified infrastructure services.
Note: All third-party data processors engaged by wtfwin are subject to binding contractual obligations requiring them to maintain appropriate data protection standards consistent with RA 10173. wtfwin remains accountable for ensuring these standards are upheld.
wtfwin uses cookies and similar tracking technologies on the platform to deliver and improve the service. Cookies are small data files stored on your device that help the platform remember your session, preferences, and usage patterns.
The following types of cookies are used on wtfwin:
You may manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies will impair the functionality of the wtfwin platform and may prevent you from accessing your account.
wtfwin implements appropriate technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:
Despite these measures, no online system can guarantee absolute security. wtfwin encourages players to use strong, unique passwords for their accounts and to enable two-factor authentication (2FA) — available in account settings — to significantly reduce the risk of unauthorized access.
wtfwin retains personal data for the period necessary to fulfil the purpose for which it was collected, plus any additional period required by applicable law. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and identity data (active account) | Duration of account plus 5 years after closure |
| KYC verification documents | 5 years after account closure (regulatory requirement) |
| Financial transaction records | 7 years (Anti-Money Laundering Act requirement) |
| Gameplay and session records | 3 years after last activity |
| Customer support communications | 3 years from last interaction |
| Marketing consent records | Until consent is withdrawn plus 1 year |
| Security and fraud logs | 2 years from the relevant event |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with wtfwin's data disposal procedures.
As a data subject under the Data Privacy Act of 2012, Filipino players on wtfwin have the following rights with respect to their personal data:
To exercise any of the above rights, please contact the wtfwin Data Protection Officer using the details in Section 14. We will respond to all verified data rights requests within fifteen (15) business days unless a statutory extension applies.
The wtfwin platform is strictly restricted to persons aged 21 years and above, in compliance with PAGCOR's age requirements for online gaming in the Philippines. wtfwin does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately suspend the associated account, delete the data, and where appropriate refer the matter to relevant authorities.
Parents and guardians who believe a minor under their care has accessed or registered on the wtfwin platform should contact our support team immediately via Live Chat or at [email protected].
In limited circumstances, personal data processed by wtfwin may be transferred to, stored on, or processed by servers or third-party service providers located outside of the Philippines — for example, cloud infrastructure providers operating in international data centers.
Where such transfers occur, wtfwin ensures that appropriate safeguards are in place in accordance with Section 21 of RA 10173 — including contractual data protection clauses equivalent to those required under Philippine law, and measures ensuring that the recipient country provides an adequate level of protection for the data transferred.
wtfwin will not transfer personal data to countries or organizations that do not provide adequate data protection safeguards without your explicit consent, except where required by Philippine law.
wtfwin reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR requirements. When we make material changes, we will post the updated Policy on this page with a revised effective date and, where practicable, notify registered account holders by email or in-platform notification.
Your continued use of the wtfwin platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of and consent to the updated terms. We encourage you to review this Policy periodically to stay informed about how we protect your data.
This Privacy Policy was last reviewed and updated in January 2026. It supersedes all previous versions of the wtfwin Privacy Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by wtfwin, please contact our Data Protection Officer through the following channels:
If you are not satisfied with wtfwin's response to a data privacy concern, or if you believe your rights under RA 10173 have been violated, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. Information about filing a complaint with the NPC is available through official Philippine government channels.
wtfwin is committed to resolving all data privacy concerns fairly and promptly. Our target response time for privacy-related inquiries is five (5) business days for standard requests and up to fifteen (15) business days for complex access or deletion requests.
Now that you know how wtfwin handles your data — with full RA 10173 compliance, PAGCOR oversight, and no sale of your information to third parties — you can play with confidence. Register your verified account and enjoy 800+ games in PHP, with GCash payouts built in.
For Filipino players aged 21 and above only. PAGCOR-regulated platform. KYC required before real-money play.