Privacy Policy

38winph is an online gaming platform operating under the domain 38winph.net, offering a range of gaming products to registered players in the Philippines, including card games, live dealer tables, instant-win titles, and other interactive entertainment products.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), 38winph acts as the Personal Information Controller in respect of the personal data collected through the platform. This means we determine the purposes and means by which your personal data is processed.

If you have any questions about this Privacy Policy or how 38winph handles your personal data, please refer to the contact details provided in Section 13 of this document.

38winph collects the following categories of personal data from players and platform visitors. The specific data collected depends on how you interact with the platform:

38winph collects personal data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your account profile.
• Automated Collection: Technical and usage data collected automatically when you access and interact with the 38winph platform, including through cookies, server logs, and similar tracking technologies. See Section 7 for full details on cookies.
• Third-Party Sources: Identity and fraud-screening data received from KYC verification service providers, payment processors (such as GCash and PayMaya), and regulatory databases where permitted by law.
• Publicly Available Sources: In limited circumstances, 38winph may supplement your profile with information from publicly available sources for the purposes of fraud prevention and regulatory compliance.

38winph uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and administer your 38winph player account, including processing your registration, verifying your identity, and managing your account settings.
• Service Delivery: To provide you with access to the games and features available on the 38winph platform, process your deposits and withdrawals, and deliver the gaming experience you expect.
• Identity Verification & KYC: To verify your identity and age (21+ requirement) in compliance with PAGCOR regulations and Philippine anti-money laundering laws. This includes processing government-issued identification documents.
• Financial Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to maintain accurate financial records.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited conduct on the platform.
• Regulatory Compliance: To comply with our obligations under Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act, and the Data Privacy Act of 2012.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance when you contact the 38winph support team.
• Responsible Gaming: To monitor gameplay patterns and identify potential problem gambling behaviors, and to administer self-exclusion and deposit limit requests. See our Responsible Gaming page for more information.
• Platform Improvement: To analyze usage patterns and technical performance data to improve the 38winph platform, fix bugs, and develop new features.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time through your account settings.

Under the Philippine Data Privacy Act of 2012, 38winph processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform our contract with you — that is, to provide you with the 38winph gaming platform and associated services as described in our Terms & Conditions.
• Legal Obligation: Processing that is required to comply with our legal and regulatory obligations under Philippine law, including PAGCOR licensing conditions, anti-money laundering requirements, and tax reporting obligations.
• Legitimate Interests: Processing carried out for our legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and certain optional data collection activities. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

38winph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals. These providers process your financial data under their own privacy policies and applicable regulations.
• KYC & Identity Verification Providers: Third-party identity verification services engaged by 38winph to assist with age verification, document authentication, and fraud screening.
• Technology Service Providers: Cloud hosting providers, platform infrastructure vendors, and software service providers who support the operation of the 38winph platform. All such providers are bound by data processing agreements that restrict their use of your data.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or regulatory obligation.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required by a valid legal order, court order, or where necessary to prevent or investigate criminal activity.
• Professional Advisors: Legal counsel, auditors, and other professional advisors engaged by 38winph, subject to professional confidentiality obligations.

In all cases where 38winph shares your personal data with third-party service providers, we require those providers to implement appropriate technical and organizational security measures and to process your data only for the specified purpose.

38winph uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage patterns, and support security functions. The following types of cookies are used on the 38winph platform:

• Strictly Necessary Cookies: These cookies are essential for the 38winph platform to function. They enable core features such as user authentication, session management, and security controls. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred language and display options — to provide a more personalized experience on 38winph.
• Analytics Cookies: These cookies collect aggregated, anonymized data about how players use the 38winph platform, including which pages are visited most frequently and how users navigate between sections. This data helps us improve the platform.
• Security Cookies: These cookies support fraud detection and platform security functions, including identifying unusual login patterns and protecting against unauthorized access attempts.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 38winph platform. For strictly necessary cookies, no opt-out is available as they are required for the platform to operate.

38winph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the 38winph platform is encrypted using Transport Layer Security (TLS) protocols.
• Encryption at Rest: Sensitive personal data, including identity documents and financial information, is encrypted when stored in our systems.
• Access Controls: Access to personal data within 38winph's systems is restricted to authorized personnel on a strict need-to-know basis. All access is logged and monitored.
• Secure Infrastructure: The 38winph platform is hosted on secure, access-controlled infrastructure with regular security patching and vulnerability assessments.
• Incident Response: 38winph maintains a data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

While 38winph takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying 38winph immediately if you suspect unauthorized access to your account.

38winph retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with 38winph, and for a period of five (5) years following account closure, in compliance with PAGCOR licensing requirements and anti-money laundering regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and applicable tax regulations.
• KYC & Identity Documents: Retained for the duration of your account and for five (5) years following account closure, or longer if required by a regulatory investigation or legal proceeding.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, to support dispute resolution and service improvement.
• Technical & Usage Logs: Retained for up to twelve (12) months for security and platform performance purposes, after which they are anonymized or deleted.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where data cannot be immediately deleted due to technical constraints, it will be isolated from active processing until deletion is possible.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 38winph. To exercise any of these rights, please contact us using the details in Section 13.

38winph will respond to all valid data privacy rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and we will notify you of any such extension. We may need to verify your identity before processing your request.

If you are not satisfied with how 38winph has handled your personal data or responded to your rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC).

The 38winph platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. 38winph does not knowingly collect personal data from individuals under the age of 21.

If you are under 21 years of age, you are not permitted to register for or use the 38winph platform. If 38winph becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor has registered on the 38winph platform or that we have inadvertently collected personal data from a minor, please contact our support team immediately using the details in Section 13.

38winph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify registered players through one or more of the following methods:

• A prominent notice displayed on the 38winph platform upon login.
• An email notification sent to your registered email address.
• An in-account notification visible in your account dashboard.

The date of the most recent revision is displayed at the top of this Privacy Policy. We encourage you to review this policy periodically to stay informed of how 38winph protects your personal data. Your continued use of the 38winph platform following the posting of a revised Privacy Policy constitutes your acceptance of the changes.

If you do not agree with any changes to this Privacy Policy, you should stop using the 38winph platform and may request closure of your account by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 38winph processes your personal data, please contact our Data Privacy team. We aim to respond to all privacy-related inquiries within five (5) business days.

For concerns about responsible gaming and player protection tools, please visit our Responsible Gaming page. For the full terms governing your use of the platform, please review our Terms & Conditions.