Windreama Privacy Policy – How We Protect Filipino Players

1. Who We Are

Windreama is an online gaming and sports betting platform serving eligible players in the Philippines, accessible at windreama.best. For the purposes of this Privacy Policy, windreama is the data controller responsible for your personal information collected through the platform.

We are committed to handling all personal data in accordance with applicable Philippine data protection regulations, including the principles of transparency, legitimate purpose, and proportionality that underpin the Data Privacy Act. If you have any questions about how windreama handles your personal data, our contact details are in Section 13 of this policy.

2. Data We Collect

Windreama collects personal data in several ways during normal platform use. The categories of data and the typical source of each are described below.

Data You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile phone number, and residential address provided when opening a windreama account.
• Identity verification documents: Government-issued ID, proof of address, and any other documentation submitted for KYC verification purposes.
• Payment information: GCash or Maya mobile wallet numbers, bank account references, or card details submitted when depositing or withdrawing PHP ₱ through the platform. Full card numbers are handled by payment processors and are not stored on windreama's own servers.
• Communications: Content of messages, emails, and chat conversations sent to the windreama support team.
• Responsible gaming preferences: Deposit limit settings, session timer configurations, and self-exclusion requests made through the account dashboard.

Data Generated by Platform Use

• Betting and gaming activity: Records of bets placed, markets selected, stakes and odds, settlement outcomes, and gaming session details across all windreama product categories.
• Transaction history: Deposit and withdrawal records including amount, timestamp, method, and reference number, all denominated in PHP ₱.
• Login and access records: IP address, device type, operating system, browser, and session timestamps each time you access your windreama account.
• Navigation behaviour: Pages visited, features used, and click patterns within the windreama platform, collected through cookies and similar tracking tools as described in Section 9.

Data from Third Parties

• Payment processors: Confirmation of transaction status from GCash, Maya, and banking partners to verify deposits and withdrawals.
• Identity verification services: Confirmation of identity document validity from licensed verification providers used during the KYC process.
• Fraud prevention services: Risk indicators from third-party fraud detection tools used to protect windreama and its players from fraudulent activity.

3. How We Use Your Data

Every piece of personal data collected by windreama has a specific, documented purpose. The following table summarises the primary uses:

Windreama does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Responsible gaming flags and account risk reviews involve human assessment before any account action is taken.

4. Legal Basis for Processing

Under applicable data protection principles, windreama processes your personal data on the following legal grounds:

• Contract performance: Processing necessary to deliver the services you signed up for — account management, bet placement, settlements, and PHP ₱ transaction processing.
• Legal obligation: Processing required by applicable Philippine law, including anti-money laundering obligations, age verification requirements, and regulatory reporting.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not outweighed by your privacy rights.
• Consent: Where windreama relies on consent — such as for non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

5. Data Sharing and Third Parties

Windreama does not sell, rent, or trade your personal data to unrelated third parties for commercial purposes. We share data only in the following defined circumstances:

Payment Processors

To process PHP ₱ deposits and withdrawals, windreama transmits necessary transaction details to GCash, Maya, GrabPay, Coins.ph, InstaPay, PESONet, BDO, BPI, UnionBank, and Visa/Mastercard card processing networks as applicable to your chosen payment method. These providers receive only the data required to complete the specific transaction.

Identity Verification Providers

During the KYC process, windreama may share identity document data with licensed third-party verification services to confirm document authenticity. These providers are contractually bound to handle data only for verification purposes and may not use it for any other function.

Fraud Prevention and Risk Services

Device identifiers, IP addresses, and transaction patterns may be shared with fraud prevention service providers to protect both the platform and its players from fraudulent activity. These providers process data under strict confidentiality agreements and applicable data protection requirements.

Regulatory and Legal Authorities

Windreama may be required to disclose personal data to Philippine regulatory authorities, law enforcement agencies, or courts where required by applicable law — for example, in connection with anti-money laundering investigations, court orders, or regulatory inspections. Such disclosures are made only to the extent legally required and are not voluntary.

Service Providers

Windreama uses third-party service providers for functions including cloud hosting, platform analytics, email delivery, and customer support tooling. These providers process data only on windreama's behalf and under contractual instructions that prohibit independent use of player data.

6. International Data Transfers

Some of the third-party service providers used by windreama may process data on servers located outside the Philippines. Where personal data is transferred internationally, windreama ensures that appropriate safeguards are in place — including contractual data processing agreements that require the receiving party to maintain standards of protection equivalent to those applicable in the Philippines.

If you would like information about the specific safeguards applied to a particular international transfer, contact windreama at support@windreama.best with the subject line "International Transfer Query" and a member of the data team will respond within a reasonable timeframe.

7. How We Protect Your Data

Protecting the personal data and PHP ₱ transaction records of Filipino players is a core operational priority for windreama. The following technical and organisational measures are applied across the platform:

• TLS encryption on all data transmitted between your device and windreama servers, regardless of the connection type or device used.
• Encrypted storage for sensitive personal data and payment credentials held on windreama infrastructure.
• Role-based access controls ensuring that only staff with a documented operational need can access specific categories of player data, with all access logged and auditable.
• Regular security reviews of platform infrastructure, including vulnerability assessments and patch management processes.
• Secure payment processing — full payment card numbers are processed by PCI-compliant payment processors and are not stored on windreama's own servers.
• Incident response procedures for identifying, containing, and reporting data security incidents within the timeframes required by applicable law.

No system is completely immune to security risks. If you suspect that your windreama account has been accessed without your authorisation, contact support@windreama.best immediately and change your password from a trusted device.

8. Data Retention

Windreama retains personal data only for as long as necessary to fulfil the purposes described in this policy, and for the minimum period required by applicable Philippine law and regulatory obligations. The following general retention principles apply:

• Account registration data and KYC documents are retained for the duration of the active account relationship and for a defined period after account closure, as required by anti-money laundering and gaming regulations.
• Betting and transaction records are retained for the period required by applicable regulatory reporting obligations.
• Customer support communications are retained for a reasonable operational period and then securely deleted unless a longer retention period is required for an unresolved dispute or regulatory inquiry.
• Non-essential analytics and cookie data is retained for shorter periods as described in the cookie settings available on the platform.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual player. If you close your windreama account and wish to request deletion of data beyond what is mandated by law, see Section 10 for the applicable process.

9. Cookies and Similar Technologies

Windreama uses cookies and similar browser-based technologies to keep the platform functional, measure performance, and improve the experience for Filipino players. The categories of cookies in use are described below.

You can manage your cookie preferences through the cookie settings panel available on the windreama platform. Note that disabling non-essential cookies will not affect your ability to place bets or access your account, but may limit some convenience features.

10. Your Data Rights

As a Filipino player, you have rights over the personal data that windreama holds about you. These rights are described below, along with how to exercise each one.

How to Submit a Data Rights Request

Email support@windreama.best with the subject line "Data Rights Request" and include your full name, registered email address, and a clear description of the right you wish to exercise. Windreama will acknowledge your request within three business days and aim to resolve it within thirty calendar days. In complex cases, this period may be extended once by a further thirty days, with notice provided to you of the extension and the reason for it.

11. Children and Minors

The windreama platform is strictly for individuals aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. Registration by minors is prohibited, and accounts identified as belonging to underage individuals will be permanently closed.

If you believe that personal data belonging to a minor has been provided to windreama, please contact support@windreama.best immediately with the subject line "Underage Account" and we will investigate and delete the relevant data as quickly as possible.

12. Changes to This Privacy Policy

Windreama may update this Privacy Policy from time to time to reflect changes in applicable law, platform features, or data handling practices. Material changes — those that meaningfully affect how your personal data is used — will be communicated to registered players via the email address on record before the effective date of the change.

The "last updated" date at the top of this page reflects the most recent revision. Continued use of the windreama platform after the effective date of any update constitutes acceptance of the revised policy. If a material change is unacceptable to you, you may close your account before the effective date by contacting support.

Previous versions of this Privacy Policy may be requested from support@windreama.best for reference purposes.

13. How to Contact Us

For any question, concern, or request related to this Privacy Policy or how windreama handles your personal data, the appropriate contact channel is email. Please include your registered account email address and a clear description of your query so we can direct it to the right team member promptly.