win4life Privacy Policy

This Privacy Policy ("Policy") sets out how win4life ("we", "us", "the Platform") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "data subject", "Player") who access or use the win4life platform at win4life.one.

win4life is committed to respecting and protecting the privacy of every Filipino player who uses the Platform. We operate in accordance with Republic Act No. 10173, otherwise known as the Philippine Data Privacy Act of 2012 (the "DPA"), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission (NPC).

By registering an account on win4life, accessing the Platform, or otherwise providing personal information to us, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of the win4life Terms and Conditions.

The personal data of win4life players is controlled by win4life (the "Data Controller"), operating the Platform at win4life.one. win4life has registered a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act.

For all data privacy enquiries, data subject requests, and privacy-related concerns, players may contact the win4life Data Protection Officer directly at:

Data Protection Officer — win4life
Email: [email protected]
Subject Line: "Data Privacy / DPO Request"

win4life's DPO is responsible for ensuring compliance with the Data Privacy Act, handling data subject access requests, and serving as the designated point of contact for NPC communications.

win4life collects and processes the following categories of personal data, subject to the nature of your interaction with the Platform:

win4life does not intentionally collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. We do not collect biometric data other than where used in the KYC verification process.

win4life collects personal data through the following channels:

4.1 Direct Collection

Information you provide directly when you register an account, complete KYC verification, make a deposit, submit a withdrawal, contact customer support, respond to a promotion, or update your account profile.

4.2 Automated Collection

Technical data collected automatically when you access win4life, including your IP address, device identifiers, browser information, session duration, and navigation patterns. This data is collected via server logs, session tracking, and first-party cookies.

4.3 Third-Party Collection

Data received from third-party service providers in the course of identity verification, payment processing, fraud detection, and regulatory compliance. For example, win4life's KYC provider may return verification status and risk scores. Payment providers such as GCash and Maya return transaction confirmation data.

win4life processes your personal data for the following specific, legitimate purposes:

• Account creation and management — establishing and maintaining your win4life player account
• Identity verification (KYC) — confirming your identity, age (21+), and eligibility to use the Platform in compliance with applicable regulations
• Payment processing — facilitating deposits and withdrawals via your chosen Philippine payment method (GCash, Maya, InstaPay, etc.)
• Anti-money laundering (AML) compliance — monitoring transactions and account behaviour to detect and prevent money laundering, fraud, and other financial crimes
• Customer support — responding to your enquiries, resolving disputes, and providing assistance
• Security and fraud prevention — protecting your account and the integrity of the Platform from unauthorised access, abuse, and prohibited conduct
• Responsible gaming — administering self-imposed limits, cooling-off periods, and self-exclusion requests; monitoring for signs of problem gambling where required
• Regulatory compliance — fulfilling obligations under the DPA, AML regulations, gaming regulations, and any other applicable Philippine law
• Platform improvement — analysing aggregated, anonymised usage data to improve Platform performance, user experience, and game offerings
• Marketing communications — sending promotional offers and updates to players who have opted in to receive marketing materials (opt-out available at any time)

Under the Philippine Data Privacy Act, personal data must be processed on a lawful basis. win4life processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform the contract between you and win4life (i.e., providing the Platform services you have registered for)
• Legal obligation — processing required for compliance with applicable Philippine laws and regulations, including KYC/AML obligations and gaming regulations
• Legitimate interests — processing necessary for win4life's legitimate business interests, including fraud prevention, security, and platform improvement, where these interests are not overridden by your rights
• Consent — for specific processing activities where consent is the appropriate basis, including marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing

win4life does not sell your personal data. We may share your personal data with third parties strictly in the following circumstances:

7.1 Service Providers

win4life engages third-party service providers who process personal data on our behalf under binding data processing agreements. These include identity verification providers, payment processors (GCash, Maya, InstaPay, PesoNet, and banking partners), fraud detection services, game platform providers, and IT infrastructure providers. All such providers are contractually required to protect your data and use it only for the purposes specified by win4life.

7.2 Regulatory and Legal Disclosures

win4life may disclose personal data to government authorities, regulatory bodies, law enforcement agencies, or courts where required to do so by Philippine law, valid legal process, regulatory demand, or to prevent or respond to fraud, crime, or national security concerns. win4life will, where legally permissible, notify affected data subjects of such disclosures.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving win4life, personal data held by win4life may be transferred to the relevant successor entity, subject to the same privacy protections as set out in this Policy. Affected players will be notified in advance where practicable.

win4life retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law — whichever is longer. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with win4life's data disposal procedures.

win4life implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and win4life's servers
• AES-256 encryption for sensitive data at rest, including payment information and identity documents
• Password hashing using industry-standard algorithms — win4life does not store plaintext passwords
• Two-factor authentication (2FA) via SMS OTP available to all registered players
• Access controls — personal data is accessible only to win4life staff who require it for their specific job functions, governed by role-based access control policies
• Regular security assessments including penetration testing and vulnerability scanning
• Incident response procedures in compliance with the NPC's 72-hour breach notification requirements under the DPA

win4life uses cookies and similar tracking technologies on the Platform to enable core functionality, maintain session state, improve platform performance, and understand how players use the site. The following types of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They maintain your login session, remember your account preferences, and ensure secure authentication. No consent is required for strictly necessary cookies.

10.2 Functional Cookies

Cookies that enable enhanced functionality such as remembering your game preferences, display settings, and responsible gaming limit configurations. These may be disabled but doing so will reduce Platform functionality.

10.3 Analytical Cookies

First-party analytical cookies used by win4life to understand how players navigate and use the Platform — such as which games are played most frequently and where players encounter difficulties. This data is aggregated and anonymised. win4life does not use third-party analytics platforms that transfer your data to external parties for their own purposes.

You may manage cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect your ability to use Platform features. win4life does not use advertising cookies or cross-site tracking technologies.

Under the Philippine Data Privacy Act and its Implementing Rules, you have the following rights with respect to your personal data held by win4life. These rights may be exercised by contacting the win4life Data Protection Officer at [email protected]:

win4life will respond to all data subject requests within thirty (30) days of receipt. Where a request is complex or high in volume, the response period may be extended by an additional sixty (60) days with notice. win4life will not charge a fee for processing data subject requests unless they are manifestly unfounded or excessive.

If you believe win4life has not adequately addressed your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

win4life does not knowingly collect, process, or retain personal data from persons under 21 years of age. The win4life Platform is strictly intended for adults aged 21 and above in accordance with applicable Philippine gaming regulations.

All account registrations are subject to mandatory age verification as part of the KYC process. Any account found to belong to a person under 21 years of age will be immediately closed, and any associated personal data will be deleted to the extent permitted by applicable law and regulatory obligations.

If you are a parent or guardian and believe that your child or a person under 21 has accessed win4life and provided personal information, please contact us immediately at [email protected] so that we may take appropriate action.

win4life's primary data processing infrastructure is operated in compliance with Philippine data residency and cross-border transfer requirements. Where personal data is transferred to or processed by service providers outside the Philippines — for example, certain game platform technology providers or cloud infrastructure services — win4life ensures that such transfers comply with the requirements of the Data Privacy Act, including:

• Execution of binding data processing agreements with all cross-border service providers
• Confirmation that the receiving country or organisation provides a level of data protection substantially similar to the protections afforded under Philippine law
• Implementation of additional contractual safeguards where required by NPC guidance

win4life does not transfer personal data to jurisdictions without adequate data protection frameworks without implementing appropriate contractual and technical safeguards.

win4life reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. Material changes to this Policy will be communicated to registered players via the email address registered to their account or through a prominent notice on the win4life Platform.

The version number and effective date displayed at the top of this Policy are updated each time a material amendment is made. Your continued use of win4life following the publication of a revised Policy constitutes your acknowledgement and acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically. The most current version is always accessible at win4life.one/privacy-policy.

For all privacy-related enquiries, data subject access requests, consent withdrawals, or complaints regarding win4life's handling of your personal data, please contact the win4life Data Protection Officer:

Data Protection Officer
win4life — win4life.one
Email: [email protected]
Subject Line: "Data Privacy / DPO Request"
Response Time: Within 30 days of receipt

If you are not satisfied with the response you receive from win4life, or if you believe your rights under the Philippine Data Privacy Act have not been upheld, you may escalate your complaint to:

National Privacy Commission (NPC) of the Philippines
5th Floor, Delegation Building, PICC Complex, Roxas Boulevard, Pasay City, Metro Manila
Complaint procedure available at the NPC's official website.