wenph Privacy Policy

1. About This Privacy Policy

1.1 This Privacy Policy applies to the wenph platform operated at wenph.one and all associated mobile-optimised pages and services (collectively, the "wenph Platform"). It governs the collection, use, storage, disclosure, and protection of personal data belonging to players and visitors who interact with the wenph Platform.

1.2 wenph ("we," "us," "our") acts as the Personal Information Controller (PIC) in respect of all personal data collected through the Platform, as defined under the Philippine Data Privacy Act of 2012 (RA 10173).

1.3 By registering a wenph account or continuing to use the Platform, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree, please cease using the wenph Platform and contact support to close your account.

1.4 This Privacy Policy should be read together with the wenph Terms & Conditions, which govern the overall contractual relationship between you and wenph.

2. Personal Data We Collect

2.1 wenph collects the following categories of personal data:

Category	Examples	Collection Point
Identity Data	Full legal name, date of birth, nationality, government ID type and number	Registration & KYC verification
Contact Data	Philippine mobile number, email address	Registration
Financial Data	GCash account details, bank account name/number, transaction history, deposit and withdrawal records	Deposit/withdrawal requests
Gaming Data	Bet history, game session logs, win/loss records, bonus usage	Gameplay activity
Technical Data	IP address, device type, operating system, browser type, session tokens	Automatic — Platform access
Communications Data	Live chat transcripts, support ticket content, SMS OTP records	Customer support interactions
Responsible Gaming Data	Deposit limits, session limits, self-exclusion status, cooling-off periods	Account settings & RG tool usage

2.2 wenph does not collect sensitive personal information beyond what is required for KYC, age verification, and AML compliance. We do not collect biometric data, political opinions, religious beliefs, or health information unless expressly required by law.

3. How We Use Your Personal Data

3.1 wenph uses your personal data for the following purposes:

• Account management: Creating, verifying, maintaining, and securing your wenph account, including processing login, password resets, and OTP authentication.
• KYC and age verification: Confirming your identity and verifying that you meet the mandatory 21+ age requirement imposed by PAGCOR.
• Payment processing: Processing deposits via GCash, PayMaya, BPI, BDO, Metrobank, and USDT, and processing withdrawal requests to your registered payment account.
• Gaming operations: Enabling gameplay, calculating and crediting winnings, processing bonus awards, and maintaining accurate game session records.
• Regulatory compliance: Meeting wenph's obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160 as amended), and other applicable Philippine laws.
• Responsible gaming: Monitoring for signs of problem gambling, enforcing player-set limits, processing self-exclusion requests, and complying with PAGCOR player protection mandates.
• Customer support: Responding to enquiries, resolving disputes, processing complaints, and improving support quality.
• Platform security: Detecting and preventing fraud, unauthorized access, bot activity, multi-accounting, and other prohibited conduct described in the wenph Terms & Conditions.
• Service improvement: Analysing aggregated, anonymised usage data to improve Platform features, game offerings, and user experience.
• Marketing communications: Sending promotional offers and bonus notifications to players who have opted in. You may withdraw marketing consent at any time via your account settings or by contacting support.

4. Legal Basis for Processing

4.1 wenph processes your personal data on the following legal bases as recognised under RA 10173:

• Contractual necessity: Processing required to fulfil the wenph account agreement — including KYC, payment processing, and account management.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLC reporting requirements, NPC regulations, and other Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregated analytics — where these interests do not override your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. Consent may be withdrawn at any time.

5. Data Sharing & Disclosure

5.1 wenph does not sell, rent, or trade your personal data to third parties for commercial purposes. wenph may share your personal data only in the following circumstances:

• PAGCOR: wenph is required to provide player data, transaction records, and gaming logs to PAGCOR upon request as a condition of its operating license.
• Anti-Money Laundering Council (AMLC): wenph is obligated under the Anti-Money Laundering Act to report suspicious transactions and provide account information to AMLC as directed.
• Payment processors: Identity and transaction data is shared with GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers strictly to process your deposits and withdrawals.
• Game content providers: Gameplay session data (but not identity data beyond a pseudonymous player ID) may be shared with certified game studios to facilitate real-time gaming operations.
• IT and security service providers: Technical data may be shared with cloud hosting, cybersecurity, and fraud detection vendors under strict data processing agreements that prohibit secondary use.
• Law enforcement and courts: wenph will disclose personal data when required by a valid court order, search warrant, or lawful direction from a Philippine government authority.

5.2 Any third party that processes personal data on wenph's behalf is contractually bound to handle that data in accordance with RA 10173 and wenph's data protection standards.

6. Cookies & Tracking Technologies

6.1 The wenph Platform uses cookies and similar tracking technologies to operate core Platform functions, maintain your login session, and improve your gaming experience.

6.2 Essential cookies are required for the Platform to function and cannot be disabled. These include session authentication tokens, security cookies, and load-balancing cookies.

6.3 Analytics cookies help wenph understand how players use the Platform — which game categories are most popular, where navigation friction occurs, and how features perform. This data is aggregated and anonymised.

6.4 Marketing cookies allow wenph to deliver personalised promotional content to logged-in players who have opted in. These may be disabled via your account settings.

6.5 Most modern browsers allow you to control cookie settings. However, disabling essential cookies may prevent you from logging in or using core wenph Platform features.

7. Data Retention

7.1 wenph retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law.

7.2 KYC documents, financial transaction records, and gaming logs are retained for a minimum of five (5) years after account closure, in compliance with PAGCOR licensing requirements and the Anti-Money Laundering Act.

7.3 Marketing consent records are retained for the duration of your account and for three (3) years thereafter for compliance purposes.

7.4 Technical data (IP logs, session records) is retained for up to twelve (12) months for security and fraud investigation purposes.

7.5 Upon expiry of the applicable retention period, wenph will securely delete or anonymise your personal data in accordance with NPC guidelines.

8. Data Security

8.1 wenph implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and wenph servers.
• Bcrypt hashing for all stored account passwords — passwords are never stored in readable form.
• Two-factor authentication (OTP) available for all player accounts.
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis.
• Automated anomaly detection systems that flag unusual login activity, suspicious transactions, and potential account compromise.
• Regular third-party security audits and penetration testing of the wenph Platform infrastructure.

8.2 In the event of a personal data breach that is likely to result in harm to affected data subjects, wenph will notify the National Privacy Commission (NPC) within seventy-two (72) hours of discovery and will notify affected players as required under NPC Circular 16-03.

9. Your Data Subject Rights

9.1 As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by wenph:

• Right to be informed: The right to know what personal data wenph holds about you and how it is processed — as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data wenph holds about you.
• Right to rectification: The right to correct inaccurate or incomplete personal data in your wenph account.
• Right to erasure: The right to request deletion of your personal data, subject to wenph's retention obligations under PAGCOR regulations and the Anti-Money Laundering Act.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes at any time, without giving any reason.
• Right to damages: The right to claim compensation for damages suffered due to inaccurate, incomplete, outdated, false, or unlawfully obtained personal data in accordance with RA 10173.

9.2 To exercise any of the above rights, contact the wenph Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." wenph will respond within fifteen (15) calendar days of receipt of a verified request.

10. Children & Minors

10.1 The wenph Platform is strictly for individuals aged 21 years and above. wenph does not knowingly collect personal data from persons under 21. If wenph discovers that personal data has been collected from a person under 21, the account will be immediately suspended and all associated personal data deleted, except where retention is required by law for AML or fraud investigation purposes.

10.2 If you believe that a person under 21 has registered or is using the wenph Platform, please contact wenph support immediately at [email protected].

11. Amendments to This Privacy Policy

11.1 wenph reserves the right to update or amend this Privacy Policy at any time to reflect changes in Philippine law, NPC guidance, PAGCOR requirements, or our data practices. Material changes will be communicated to registered players via SMS notification to their registered Philippine mobile number and/or by prominent notice on the wenph Platform, with at least seven (7) days' advance notice where practicable.

11.2 Your continued use of the wenph Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. The date at the top of this page will always reflect when this Privacy Policy was last updated.

12. Contact & Data Protection Officer

12.1 For questions, concerns, or formal requests relating to this Privacy Policy or wenph's data practices, please contact:

12.2 If you are not satisfied with wenph's response to your data privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines.