wagiph Privacy Policy

01 About This Policy

This Privacy Policy applies to all personal data collected, processed, and stored by wagiph in connection with your use of the wagiph Platform, including the website accessible at wagiph.net, its associated subdomains, and any related digital services provided by wagiph.

wagiph is committed to protecting the privacy and security of all players registered on the Platform. This Policy is designed to comply with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines of the National Privacy Commission (NPC) of the Philippines, in addition to the data governance requirements imposed on licensed operators by PAGCOR.

References to "wagiph", "we", "us", or "our" in this Policy refer to the wagiph platform and its operators. References to "you", "your", or "Player" refer to any individual who accesses or uses the Platform in any capacity.

02 Personal Data We Collect

wagiph collects the following categories of personal data, depending on how you interact with the Platform:

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify that you meet the 21-year-old minimum age requirement under Philippine law);
• Gender (optional, collected for account personalisation purposes);
• Nationality and country of residence;
• Government-issued identification number (e.g., Philippine passport number, SSS, PhilHealth, or UMID number).

2.2 Contact Data

• Primary email address used for account registration and communications;
• Mobile number registered in the Philippines (used for OTP verification and account alerts);
• Residential address in the Philippines.

2.3 Financial & Transaction Data

• GCash or PayMaya mobile wallet account details;
• Bank account details for BPI, BDO, Metrobank, or other participating Philippine banks used for withdrawals;
• Credit or debit card details (Visa / Mastercard) where applicable — card data is processed by PCI-DSS-compliant payment processors and is not stored on wagiph's servers;
• Deposit and withdrawal transaction history, including amounts, timestamps, and reference numbers;
• Wagering history, game records, and account balance information.

2.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Session duration, pages visited, features accessed, and click-path data;
• Cookies and similar tracking technologies (see Section 7).

2.5 KYC Verification Documents

• Scanned or photographed copies of government-issued photo ID;
• Proof of address documents (e.g., utility bills, bank statements dated within 90 days);
• Selfie or liveness verification images required for identity confirmation.

2.6 Communications Data

• Records of your communications with the wagiph customer support team via live chat or email, including chat transcripts and support ticket content;
• Survey responses and feedback submitted voluntarily through the Platform.

03 How We Collect Your Data

wagiph collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey;
• Automatically — through cookies, server logs, and similar technologies when you browse and interact with the Platform;
• From third-party identity verification providers — licensed KYC and anti-money-laundering (AML) service providers that assist wagiph in verifying your identity in accordance with PAGCOR's requirements;
• From payment processors — GCash, PayMaya, and banking partners that share transaction confirmation data with wagiph to reconcile deposits and withdrawals;
• From fraud prevention and analytics partners — service providers that help wagiph detect suspicious activity and maintain platform integrity.

04 Why We Use Your Personal Data

wagiph uses the personal data it collects for the following specific purposes:

05 Legal Basis for Processing

wagiph processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable PAGCOR regulations:

• Contractual Necessity: Processing is necessary to perform the contract between you and wagiph — i.e., to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with wagiph's obligations under Philippine law, including PAGCOR licensing conditions, AML/CFT regulations, and tax reporting requirements.
• Legitimate Interests: Processing is in wagiph's legitimate interest where it does not override your rights — for example, fraud prevention, platform security, and responsible gaming monitoring.
• Consent: For optional data uses such as marketing communications, wagiph relies on your freely given, specific, and informed consent, which you may withdraw at any time.

06 Sharing Your Personal Data

wagiph does not sell, rent, or trade your personal data. We may share your data only with the following categories of recipients, and only to the extent necessary for each stated purpose:

• PAGCOR and Regulatory Authorities: wagiph is legally required to disclose player information to PAGCOR and, where applicable, other Philippine government agencies, law enforcement bodies, or courts upon receipt of a valid legal order or regulatory demand.
• KYC / AML Service Providers: Licensed identity verification and anti-money-laundering screening providers that assist wagiph in meeting its PAGCOR compliance obligations. These providers are bound by strict confidentiality agreements and data processing agreements consistent with the Data Privacy Act.
• Payment Processors: GCash, PayMaya, and participating Philippine banks receive only the transaction data necessary to process your deposits and withdrawals.
• Game Software Providers: Licensed game developers whose platforms power specific wagiph games may receive anonymised session and wagering data for game integrity and RTP auditing purposes. No personally identifiable information is shared with game providers without your consent.
• IT Infrastructure and Cloud Service Providers: wagiph uses third-party hosting and cloud providers operating under data processing agreements that prohibit the use of wagiph player data for any purpose other than providing the contracted infrastructure services.
• Fraud Prevention and Cybersecurity Partners: Specialist security firms that assist wagiph in detecting suspicious activity, preventing account compromise, and maintaining platform integrity.

07 Cookies & Tracking Technologies

wagiph uses cookies and similar tracking technologies on the Platform for the following purposes:

7.1 Essential Cookies

These cookies are strictly necessary for the Platform to function correctly. They enable core features such as session management, login authentication, and security token validation. Essential cookies cannot be disabled without impairing your ability to use the Platform.

7.2 Analytics Cookies

wagiph uses analytics cookies to understand how players interact with the Platform — for example, which games are most popular, how long players spend on particular pages, and where technical errors occur. This data is collected in aggregated and anonymised form and is used solely to improve the Platform experience.

7.3 Preference Cookies

These cookies remember your platform preferences — such as your selected language, display settings, and responsible gaming limit configurations — so that you do not need to re-enter them on each visit.

7.4 Fraud Prevention Cookies

wagiph uses cookies to identify and flag unusual device or session behaviour that may indicate fraudulent activity, account compromise, or bot automation. These cookies are part of wagiph's security infrastructure and operate continuously during active sessions.

You may manage cookie preferences through your browser settings. Please note that disabling analytics or preference cookies will not affect your ability to use the Platform's core gaming features, but may result in a less personalised experience.

08 Data Retention

wagiph retains your personal data for as long as is necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Transaction and wagering records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine financial regulations.
• KYC documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Analytics and usage data: Retained in anonymised, aggregated form indefinitely for platform improvement purposes; individually identifiable usage data is retained for up to two (2) years.
• Marketing consent records: Retained for as long as you remain opted in plus two (2) years following an opt-out, to demonstrate compliance with consent requirements.

When personal data is no longer required for the purpose for which it was collected and the applicable retention period has expired, wagiph will securely delete or anonymise the data in accordance with its internal data disposal procedures.

09 Data Security

wagiph implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All personal data transmitted between your device and the wagiph Platform is encrypted in transit using TLS 1.2 or higher. Sensitive data stored on wagiph's servers is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data is strictly limited to authorised wagiph personnel and third-party processors who require it to perform their designated functions. Role-based access controls and multi-factor authentication are enforced for all internal system access;
• Regular Security Testing: wagiph conducts regular penetration testing, vulnerability assessments, and security audits of the Platform's infrastructure;
• Incident Response: wagiph maintains a documented data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, wagiph will notify the National Privacy Commission (NPC) and affected players in accordance with the timelines prescribed under the Data Privacy Act.

10 Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by wagiph. These rights may be exercised by contacting our Data Protection Officer through the live chat support channel:

wagiph will respond to verified privacy rights requests within thirty (30) calendar days of receipt. Where the request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days and will notify you accordingly. wagiph will not charge a fee for processing reasonable privacy rights requests.

If you are not satisfied with wagiph's response to your privacy rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11 Children's Privacy and Age Restriction

The wagiph Platform is strictly intended for individuals who are 21 years of age or older, as required under Philippine law and PAGCOR regulations. wagiph does not knowingly collect, process, or retain the personal data of individuals under the age of 21.

During the registration process, wagiph requires all new players to confirm that they meet the minimum age requirement. wagiph further verifies age as part of the mandatory KYC process prior to authorising any withdrawal. Where wagiph discovers or has reasonable grounds to believe that an Account has been created by or on behalf of an individual who does not meet the minimum age requirement, wagiph will:

• Immediately suspend and permanently close the Account;
• Void all pending and historical wagers placed from the Account;
• Return any remaining real money balance to the payment method used for deposit, subject to verification;
• Delete all personal data associated with the underage Account as soon as is legally permissible;
• Report the matter to PAGCOR in accordance with its regulatory requirements.

12 International Data Transfers

wagiph is a Philippines-based platform serving Filipino players, and the majority of personal data processing takes place within the Philippines. However, certain third-party service providers — including cloud infrastructure providers, KYC verification partners, and game software suppliers — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, wagiph ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards include:

• Data processing agreements incorporating the standard contractual clauses approved by the National Privacy Commission;
• Transfers only to jurisdictions or organisations that the NPC has recognised as providing an adequate level of data protection;
• Binding corporate rules or equivalent mechanisms where transfers are made to affiliated entities.

You may request further information about the specific safeguards applicable to any international transfer of your personal data by contacting wagiph's Data Protection Officer via live chat.

13 Changes to This Privacy Policy

wagiph reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, or our data processing practices. The date on which the current version of this Policy was last updated is displayed at the top of this page.

Where changes are material — meaning they affect your rights or the fundamental ways in which wagiph uses your personal data — wagiph will notify registered players by email to the address on file and by posting a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

For non-material changes (such as clarifications of existing practices, corrections of typographical errors, or minor structural updates), the updated Policy will be published on this page without prior notice. Your continued use of the Platform following publication of any updated Policy constitutes your acknowledgement of the changes.

14 Contact Our Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way wagiph handles your personal data, please contact our Data Protection Officer (DPO) through the following channel:

wagiph is committed to addressing all privacy-related enquiries promptly and transparently. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.