Your personal data matters. This Privacy Policy explains what information winbest collects from you, how we use and protect it, who we share it with, and what rights you have under Philippine law.
Registration details, KYC documents, transaction history, and usage data.
Account management, KYC, fraud prevention, and service improvement.
Regulated service providers and authorities only — never sold to marketers.
Session, analytics, and preference cookies to improve your experience.
Access, correction, deletion, and portability rights under RA 10173.
Reach our Data Protection Officer for any privacy-related request.
This Privacy Policy ("Policy") describes how winbest ("we," "our," or "the Platform"), the online casino and sports betting service operated at winbest.club, collects, processes, stores, uses, and discloses personal information about users ("you," "your") who register for or interact with the winbest Platform.
winbest is committed to protecting the privacy and personal data of all users in compliance with the Republic of the Philippines' Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations ("IRR"), as overseen by the National Privacy Commission ("NPC"). This Policy fulfils our obligation under RA 10173 to inform data subjects of our data processing activities.
By registering on or using the winbest Platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Policy. This Policy applies alongside the winbest Terms & Conditions and Responsible Gaming Policy.
This Policy applies to all personal information collected by winbest through the following touchpoints:
This Policy does not apply to third-party websites, payment processors, or service providers that may be accessible from the winbest Platform. Those third parties operate under their own independent privacy policies, and winbest encourages you to review those policies separately.
winbest collects personal data that is necessary, adequate, and limited to what is required for the specific purposes outlined in this Policy. The categories of data we collect are described in the table below.
| Category | Data Points Collected | Collected At |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number and document images | Registration & KYC |
| Contact Data | Philippine mobile number, email address, physical address (for address verification) | Registration & KYC |
| Account Data | Username, hashed password, account preferences, VIP tier, session history, and responsible gaming settings | Registration & ongoing use |
| Financial Data | Deposit and withdrawal records, GCash number (partial), bank account name, transaction amounts, and payment method identifiers | Payment transactions |
| Gameplay Data | Game history, bet amounts, wager records, winnings, losses, bonus usage, and game session timestamps | Platform use |
| Technical Data | IP address, device type, browser type and version, operating system, geolocation (country/region level), and login timestamps | Automatic collection during platform access |
| Communications Data | Live chat transcripts, support ticket content, email correspondence, and promotional communication responses | Support interactions |
| Verification Media | Selfie photographs submitted alongside government ID during KYC, and any additional liveness check images | KYC verification |
The majority of personal data winbest holds about you is data you provide directly — through registration forms, KYC document uploads, payment details, and support communications. Providing accurate and complete information is a condition of using the Platform, as described in the winbest Terms & Conditions.
Technical data — including IP addresses, device identifiers, browser characteristics, and session data — is collected automatically each time you access the winbest Platform. This data is used for security purposes, fraud detection, and to ensure service availability and performance. winbest does not collect precise GPS coordinates or real-time physical location data.
Under RA 10173, certain categories of personal data are considered sensitive personal information ("SPI"), including government ID numbers, biometric data (such as photographs used for liveness verification), and financial account identifiers. winbest collects SPI only where strictly required for KYC compliance and anti-money laundering obligations, and applies enhanced security measures to its processing and storage.
winbest processes personal data only for legitimate, specified purposes with an appropriate legal basis under RA 10173. The table below maps the primary processing activities to their purposes and legal bases.
| Processing Activity | Purpose | Legal Basis |
|---|---|---|
| Account Registration | Creating and managing your winbest account | Performance of contract |
| KYC Verification | Age verification, identity confirmation, AML compliance | Legal obligation (RA 9160, PAGCOR regulations) |
| Payment Processing | Processing deposits, withdrawals, and transaction records | Performance of contract; legal obligation |
| Gameplay Provision | Delivering game sessions, calculating outcomes, settling bets | Performance of contract |
| Fraud & Security | Detecting and preventing fraud, account abuse, and money laundering | Legitimate interest; legal obligation |
| Responsible Gaming | Enforcing deposit limits, self-exclusions, and age restrictions | Legal obligation; legitimate interest |
| Customer Support | Resolving account issues, handling disputes, and support communication | Performance of contract; legitimate interest |
| Marketing (where consented) | Sending promotional offers, bonus announcements, and relevant communications | Consent (opt-in, withdrawable at any time) |
| Platform Improvement | Analysing usage patterns, improving features, and personalising experience | Legitimate interest |
winbest does not process personal data for any purpose beyond what is listed above without first obtaining your explicit consent or establishing a separate applicable legal basis under RA 10173.
winbest does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is shared only in the limited circumstances described below.
winbest engages third-party service providers who process personal data on our behalf under data processing agreements that require them to maintain confidentiality and implement appropriate security measures. These providers include:
winbest will disclose personal data to regulatory bodies, law enforcement agencies, and courts where required by applicable Philippine law, including but not limited to:
In the event of a merger, acquisition, asset sale, or corporate restructuring involving winbest, personal data may be transferred to the successor entity as part of that transaction, subject to the protections described in this Policy continuing to apply.
winbest retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:
After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Where anonymization is not technically feasible within the retention period, data is stored in a restricted-access environment until secure deletion is possible.
winbest implements technical and organizational security measures appropriate to the sensitivity of the personal data processed. These measures include:
Despite these measures, no online platform can guarantee absolute security. winbest encourages you to use a strong, unique password for your account, enable two-factor authentication, and avoid accessing your account from public or shared devices.
The winbest Platform uses cookies and similar tracking technologies to operate core functions, improve performance, and analyze usage patterns. A cookie is a small text file stored on your device by your browser. winbest uses the following categories of cookies:
These cookies are required for the Platform to function and cannot be disabled. They include session management cookies that maintain your login state, security tokens, and load balancing identifiers. No personal data is collected by these cookies for marketing purposes.
winbest uses analytics tools to collect anonymized or pseudonymized data about how users interact with the Platform — such as pages visited, time spent, and features used. This data is used to identify areas for improvement. Analytics data is not combined with personally identifiable account data for marketing purposes.
These cookies remember your chosen settings — such as language preference, display options, and last-accessed game category — so the Platform loads in your preferred configuration on subsequent visits.
You may control cookie behavior through your browser settings. Disabling strictly necessary cookies will impair Platform functionality and may prevent you from logging in or accessing game sessions. Disabling analytics and preference cookies does not affect your ability to use core Platform features.
As a data subject under Republic Act No. 10173, you have the following rights with respect to personal data that winbest holds about you. These rights may be exercised by contacting our Data Protection Officer as described in Section 12.
You have the right to be informed about how your personal data is collected, processed, and used — which is the primary purpose of this Privacy Policy.
You may request a copy of the personal data winbest holds about you, including details of how it is being processed and with whom it has been shared.
You may request correction of inaccurate or incomplete personal data. Some corrections (e.g., name changes) require supporting documentary evidence.
You may request deletion of personal data that is no longer necessary for the purposes for which it was collected, subject to legal retention obligations under PAGCOR and AML regulations.
You may object to processing based on legitimate interest at any time. You may also withdraw marketing consent at any time by contacting support or adjusting your account notification settings.
You may request a copy of personal data you provided to winbest in a structured, commonly used, machine-readable format for transfer to another controller.
You may request restriction of processing while a correction request is pending, or where processing is unlawful but you oppose erasure of your data.
If you believe winbest has violated your data privacy rights, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines through official NPC channels.
winbest will respond to data subject rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days with written notice. Requests must include sufficient information to verify your identity before the request is actioned.
The winbest Platform is strictly intended for adults aged 21 years and older, in compliance with PAGCOR regulations governing online casino-style gambling in the Philippines. winbest does not knowingly collect personal data from persons under the age of 21.
Age verification is conducted as part of the registration process via OTP verification to a Philippine mobile number and enforced through KYC identity verification prior to processing any withdrawal. If winbest discovers that personal data has been collected from a person under 21 years of age, that account will be immediately closed, all deposits will be returned, any winnings will be forfeited, and the collected personal data will be deleted.
Some of winbest's third-party service providers — including game software developers and infrastructure partners — may be based outside the Philippines. Where personal data is transferred to countries that may not offer the same level of data protection as Philippine law, winbest ensures adequate safeguards are in place, including:
International transfers are limited to personal data strictly necessary for the recipient service provider's role, and no transfer occurs without a contractual basis ensuring your rights as a Philippine data subject are maintained.
winbest reviews this Privacy Policy periodically and will update it to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, winbest will:
Your continued use of the winbest Platform after a Policy update constitutes acceptance of the revised terms. If you do not agree with the updated Policy, you must stop using the Platform and may request account closure in accordance with the winbest Terms & Conditions.
winbest has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with RA 10173 and this Privacy Policy, and for handling data subject rights requests and privacy-related complaints.
To exercise any of the rights described in Section 8, to ask questions about this Policy, or to raise a privacy concern, please contact the winbest Data Protection Officer via:
winbest will acknowledge privacy requests within five (5) business days and aim to resolve standard requests within 30 calendar days. Complex requests may require additional time; we will notify you of any extension.
If you are not satisfied with winbest's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) through the NPC's official government channels.
This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all prior versions of the winbest Privacy Policy.