Privacy Policy – How 23winph Protects Your Personal Data

This Privacy Policy applies to all personal data collected and processed by 23winph in connection with the operation of its online gaming platform at 23winph.net. It covers all interactions you have with 23winph — including account registration, deposits, gameplay, customer support communications, and any promotional activities you participate in.

This Policy applies to all registered players and visitors of 23winph based in the Philippines. It is written to comply with the Republic of the Philippines' Data Privacy Act of 2012 (RA 10173) and the regulations issued by the National Privacy Commission (NPC).

By registering an account or using any feature of 23winph, you consent to the collection, use, storage, and processing of your personal data as described in this Privacy Policy. If you do not agree with any part of this Policy, please discontinue your use of the platform and contact support to request account closure.

23winph collects the following categories of personal data from players:

23winph does not collect sensitive personal information beyond what is strictly required for identity verification and compliance with Philippine anti-money laundering (AML) and gaming regulations. We do not collect biometric data, religious beliefs, political opinions, or health information.

23winph collects personal data through the following channels:

• Direct registration: When you create your 23winph account, you provide your name, contact details, date of birth, and other registration information directly to us.
• KYC document submission: When you submit identity verification documents to comply with Philippine gaming and AML requirements, 23winph collects the information contained in those documents.
• Payment processing: When you make a deposit or request a withdrawal on 23winph, financial data is exchanged with the relevant payment provider (GCash, Maya, InstaPay, etc.) as necessary to complete the transaction.
• Platform usage: Technical and gameplay data is automatically collected as you interact with 23winph — browsing the platform, placing bets, and using game features. This is collected through server logs, session tracking, and cookies.
• Customer support: When you contact the 23winph support team by email or live chat, the contents of those communications are recorded for quality assurance and to help resolve your issue.
• Third-party sources: In some cases, 23winph may verify identity or anti-fraud information through authorised third-party identity verification services operating in the Philippines. This is done only where necessary and with appropriate data processing agreements in place.

23winph uses your personal data for the following specific purposes:

• Account management: To create, maintain, and manage your 23winph player account, including verifying your identity, processing logins, and updating account details.
• Payment processing: To process deposits and withdrawals to and from your 23winph balance via GCash, Maya, bank transfer, and other supported Philippine payment channels.
• Regulatory compliance: To meet our obligations under Philippine gaming regulations, anti-money laundering laws, and the Data Privacy Act — including KYC verification, transaction monitoring, and reporting to relevant Philippine authorities where required.
• Fraud prevention and security: To detect and prevent fraudulent activity, account takeovers, bonus abuse, and other prohibited conduct on 23winph.
• Platform improvement: To analyse gameplay patterns, platform performance, and user behaviour in aggregate form to improve the 23winph experience for all Filipino players.
• Customer support: To respond to your queries, resolve complaints, and provide technical assistance related to your 23winph account or any game.
• Marketing communications: Where you have opted in, to send you promotional offers, bonus notifications, and gaming updates from 23winph. You can unsubscribe at any time through your account settings.
• Responsible gaming: To identify patterns that may indicate problem gambling behaviour and to apply responsible gaming tools or restrictions where appropriate.

Under the Philippines' Data Privacy Act of 2012, 23winph relies on the following lawful bases for processing your personal data:

• Contractual necessity: Processing required to fulfil the player account agreement — including identity verification, payment processing, and gameplay — is necessary for 23winph to perform its obligations to you as a registered player.
• Legal obligation: 23winph is required by Philippine gaming regulations and anti-money laundering laws to collect, retain, and report certain player data. This processing is mandatory and cannot be opted out of.
• Legitimate interest: Fraud detection, platform security, and aggregate analytics are processed on the basis of 23winph's legitimate business interest in operating a safe and compliant gaming platform.
• Consent: Marketing communications and certain optional data uses rely on your explicit consent. You may withdraw consent at any time without affecting your ability to use 23winph for gaming purposes.

23winph does not sell your personal data. We share your data only in the following limited circumstances, and only with parties who have appropriate data protection safeguards in place:

• Payment processors: GCash, Maya, GrabPay, Coins.ph, InstaPay, PESONet, BDO, BPI, UnionBank, and card networks receive the minimum financial data required to process your transactions. These are regulated Philippine financial institutions.
• Identity verification services: Third-party KYC and identity verification providers may process your ID documents under strict data processing agreements on behalf of 23winph.
• Philippine regulatory authorities: 23winph is obligated to share player and transaction data with relevant Philippine gaming regulators and law enforcement agencies when legally required to do so — for example, under AML reporting obligations.
• Platform technology providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on 23winph's behalf are bound by data processing agreements and cannot use your data for their own purposes.
• Professional advisers: Legal, accounting, and audit professionals may access limited player data as part of their professional duties, subject to confidentiality obligations.

Any third party that receives personal data from 23winph is contractually required to protect that data in accordance with applicable Philippine privacy law and to use it only for the specified purpose for which it was shared.

23winph retains your personal data for as long as your account is active and for a reasonable period thereafter, as required by Philippine law. Specific retention periods include:

• Account data and KYC documents: Retained for a minimum of five (5) years from the date of account closure, in line with Philippine AML record-keeping requirements.
• Transaction records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Gameplay data: Retained for a minimum of three (3) years from the date of the gaming activity, or longer where required for dispute resolution or regulatory purposes.
• Support communications: Customer support records are retained for two (2) years from the date of the interaction.
• Marketing preferences: Retained until you withdraw your consent or request deletion, subject to overriding legal retention obligations.

When your data reaches the end of its required retention period, 23winph securely deletes or anonymises it so it can no longer be associated with you as an individual. You may request early deletion of your data by contacting support, though mandatory legal retention periods may prevent full deletion in some cases.

23winph implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:

• SSL/TLS encryption on all data transmitted between your device and the 23winph platform.
• Encrypted storage of sensitive personal and financial data at rest using industry-standard encryption protocols.
• Two-factor authentication (2FA) available for all 23winph player accounts to prevent unauthorised access even if login credentials are compromised.
• Strict internal access controls — only authorised 23winph staff with a legitimate business need can access player data, on a role-based permission system.
• Regular security audits and penetration testing of platform infrastructure.
• Automated fraud detection and account monitoring systems that flag suspicious activity in real time.

23winph uses cookies and similar tracking technologies to improve platform performance, maintain session security, and understand how players use the platform. A cookie is a small text file placed on your device when you visit 23winph.

The cookies used by 23winph fall into the following categories:

• Essential cookies: Required for the 23winph platform to function — session management, login state, and security tokens. These cannot be disabled without breaking platform functionality.
• Performance cookies: Collect anonymous data about how players navigate 23winph — which pages are visited most, average session times, and error reports. This data is used to improve the platform.
• Functional cookies: Remember your preferences on 23winph, such as language settings, display preferences, and game lobby filters.
• Analytics cookies: Used by 23winph's internal analytics tools to understand aggregate player behaviour. No individual player is identified in analytics reports.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to log in and use 23winph normally. Most modern browsers allow you to clear existing cookies, block third-party cookies, or receive notifications when a cookie is set.

Under the Philippines' Data Privacy Act of 2012, you have specific rights regarding your personal data held by 23winph. These rights are summarised below:

To exercise any of these rights, contact the 23winph Data Privacy Team at support@23winph.net. 23winph will respond to all data subject requests within fifteen (15) business days of receipt, in line with NPC requirements.

23winph is strictly an adults-only platform. The minimum age to register and play at 23winph is twenty-one (21) years old, consistent with Philippine gaming law. 23winph does not knowingly collect personal data from individuals under 21 years of age.

Where 23winph discovers or reasonably suspects that an account is held by a person under 21 years of age, the account will be immediately suspended. Any personal data collected from that account will be deleted from our systems to the extent permitted by Philippine law, and any remaining balance will be handled in accordance with our Terms and Conditions.

If you are a parent or guardian and believe a minor has registered on 23winph using false information, please contact support at support@23winph.net immediately so we can investigate and take appropriate action.

23winph is operated primarily within the Philippines and processes the majority of player data within Philippine jurisdiction. However, some of the platform's cloud infrastructure and technology service providers may be located or operate servers in other countries.

Where personal data is transferred outside the Philippines — for example, to cloud hosting services — 23winph ensures that such transfers are made in compliance with the Data Privacy Act of 2012, including requiring receiving parties to provide an equivalent level of data protection through binding contractual clauses or by operating in jurisdictions with comparable privacy frameworks.

23winph does not transfer personal data to countries where adequate data protection cannot be assured without implementing appropriate safeguards. If you have questions about specific cross-border transfers affecting your data, contact us at support@23winph.net.

23winph may update this Privacy Policy from time to time to reflect changes in the platform, Philippine privacy law, or our internal data practices. When changes are made, the updated Policy will be published on this page with a revised "Last Updated" date at the top.

For material changes — such as new categories of data being collected or new purposes for processing — 23winph will notify active players by email or through an in-platform notification before the changes take effect, giving you the opportunity to review the updates before continuing to use the platform.

Your continued use of 23winph after any updated Privacy Policy is published constitutes your acceptance of the updated terms. We recommend checking this page periodically so you stay informed about how your data is being handled.

If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a privacy concern about 23winph, please contact our Data Privacy Team: