windream Privacy Policy

1Introduction

windream ("windream," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the windream online gaming platform at windream.one (the "Platform"). This Privacy Policy describes how windream collects, uses, stores, shares, and protects your personal data when you access or use the Platform, including when you register a windream account, make deposits or withdrawals, participate in games or promotions, or contact windream's support team.

This Privacy Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations. windream takes its obligations under Philippine data protection law seriously and is committed to handling your personal data with transparency, integrity, and care.

This Privacy Policy applies to all users of the windream Platform, including registered players, visitors, and any person who interacts with windream in any capacity. Please read this document carefully alongside the windream Terms & Conditions, which govern your use of the Platform.

2Personal Data We Collect

windream collects personal data that you provide directly, data generated automatically through your use of the Platform, and in limited circumstances, data obtained from trusted third-party sources. The categories of personal data windream collects include:

2.1 Data You Provide Directly

• Registration Data: Your full legal name, date of birth, residential address (including city — whether you are based in Manila, Cebu, Davao, Quezon City, Makati, or elsewhere in the Philippines), email address, and mobile number.
• Identity Verification (KYC) Data: Government-issued identification documents such as a Philippine passport, SSS ID, PhilHealth ID, driver's license, or UMID card, as required for account verification and regulatory compliance.
• Financial Data: Payment method details including GCash account numbers, PayMaya account details, BPI, BDO, or Metrobank account information used for deposits and withdrawals. windream does not store full bank account credentials — payment processing is handled by certified payment processors.
• Communications Data: Records of your correspondence with windream's support team, including live chat transcripts, emails, and any feedback or complaints you submit.
• Responsible Gaming Data: Information you provide when setting deposit limits, requesting cooling-off periods, or applying for self-exclusion through the windream platform.

2.2 Data Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage Data: Pages visited on the windream Platform, games played, session duration, click patterns, and navigation paths.
• Gaming Activity Data: Wager amounts, game outcomes, bonus usage, deposit and withdrawal history, and account balance history.
• Cookie Data: Data collected through cookies and similar tracking technologies as described in Section 6 of this Privacy Policy.

2.3 Data from Third Parties

• Identity Verification Providers: windream may receive confirmation of identity verification results from third-party KYC service providers.
• Payment Processors: Transaction status and confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment providers.
• Fraud Prevention Services: Risk scores and fraud indicators from third-party fraud detection services used to protect the integrity of the windream Platform.

3How windream Uses Your Personal Data

windream uses the personal data it collects for the following specific purposes. windream does not use your personal data for any purpose that is incompatible with the purposes listed below without first obtaining your consent or as otherwise permitted by applicable law.

4Legal Basis for Processing

windream processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 of the Philippines and its Implementing Rules and Regulations:

• Contractual Necessity: Processing that is necessary to perform the contract between you and windream — specifically, to operate your windream account, process your transactions, and provide the gaming services you have registered to use.
• Legal Obligation: Processing that windream is required to carry out to comply with applicable Philippine laws and regulations, including anti-money laundering obligations, age verification requirements, and regulatory reporting duties.
• Legitimate Interests: Processing carried out for windream's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw your consent at any time by contacting windream support or updating your communication preferences in your account settings.

5Data Sharing & Disclosure

windream does not sell, rent, or trade your personal data to third parties for their own marketing purposes. windream may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors require certain personal and financial data to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• Identity Verification Providers: Third-party KYC service providers that assist windream in verifying the identity and age of players as required by applicable regulations.
• Fraud Prevention & Security Services: Third-party providers that assist windream in detecting and preventing fraudulent activity, money laundering, and other prohibited conduct on the Platform.
• IT & Platform Service Providers: Cloud hosting, data storage, and technical infrastructure providers that support the operation of the windream Platform. These providers process data on windream's behalf and are contractually bound to protect your data.
• Regulatory & Law Enforcement Authorities: windream may be required to disclose your personal data to Philippine regulatory authorities, law enforcement agencies, or courts where required by law, court order, or regulatory directive. This includes reporting obligations under Philippine anti-money laundering laws.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of windream's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

6Cookies & Tracking Technologies

windream uses cookies and similar technologies — including web beacons and local storage — to operate the Platform, remember your preferences, maintain your session, and analyze how the Platform is used. The following types of cookies are used on the windream Platform:

• Strictly Necessary Cookies: These cookies are essential for the windream Platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming tool configurations — so you do not need to re-enter them each time you visit windream.
• Analytics Cookies: These cookies help windream understand how players use the Platform by collecting aggregated, anonymized data about page visits, session durations, and navigation patterns. This data is used solely to improve the windream Platform.
• Security Cookies: These cookies support windream's fraud detection and account security systems by helping to identify unusual or suspicious activity patterns.

windream does not use cookies to track your activity across unrelated third-party websites. You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may affect your ability to use certain features of the windream Platform, including the ability to log in to your account.

7Data Retention

windream retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce windream's agreements. The following general retention periods apply:

• Active Account Data: Personal data associated with an active windream account is retained for the duration of the account's existence and for a period of at least five (5) years following account closure, in accordance with Philippine anti-money laundering record-keeping requirements.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years from the date of the transaction.
• KYC & Identity Documents: Identity verification documents are retained for the period required by applicable Philippine regulations, typically five (5) years from the end of the business relationship.
• Support Communications: Records of customer support interactions are retained for three (3) years from the date of the interaction.
• Marketing Data: Where you have consented to receive marketing communications from windream, your marketing preferences and related data are retained until you withdraw your consent or for three (3) years of inactivity, whichever comes first.

When personal data is no longer required for any of the above purposes, windream will securely delete or anonymize it in accordance with windream's data disposal procedures.

8Data Security

windream implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the windream Platform is encrypted using industry-standard 256-bit SSL/TLS protocols — the same standard used by major Philippine financial institutions.
• Access Controls: Access to personal data within windream's systems is restricted on a strict need-to-know basis. windream staff are granted access only to the data necessary to perform their specific job functions.
• Secure Data Storage: Personal data is stored on secure servers with appropriate physical and logical access controls, firewalls, and intrusion detection systems.
• Regular Security Audits: windream conducts regular security assessments and vulnerability testing to identify and address potential weaknesses in its systems.
• Staff Training: windream staff who handle personal data receive regular training on data protection obligations and security best practices.

While windream takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. windream cannot guarantee the absolute security of data transmitted over the internet. You are responsible for keeping your windream account credentials confidential and for notifying windream immediately if you suspect unauthorized access to your account.

9Your Data Protection Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by windream. windream is committed to facilitating the exercise of these rights in a timely and transparent manner.

• Right to Be Informed: You have the right to be informed about how windream collects and uses your personal data. This Privacy Policy fulfills that obligation.
• Right of Access: You have the right to request a copy of the personal data windream holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request that windream correct any inaccurate or incomplete personal data it holds about you. You can update certain account details directly through your windream account settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to windream's legal retention obligations.
• Right to Object: You have the right to object to windream's processing of your personal data where that processing is based on legitimate interests or for direct marketing purposes.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to windream in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where windream processes your data on the basis of your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe windream has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact the windream support team using the contact details provided in Section 12 of this Privacy Policy. windream will respond to all data rights requests within thirty (30) days of receipt, or within such other period as may be required by applicable law.

10Children's Privacy

The windream Platform is strictly intended for adults aged 21 years and above, in accordance with applicable Philippine gaming regulations. windream does not knowingly collect personal data from individuals under the age of 21.

If windream discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, windream will immediately suspend the associated account, delete the personal data in question, and take such further action as may be required by applicable law, including notifying the relevant regulatory authorities.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to windream, please contact the windream support team immediately so that windream can take appropriate action.

11Changes to This Privacy Policy

windream reserves the right to update or amend this Privacy Policy at any time to reflect changes in windream's data practices, applicable law, or regulatory requirements. When windream makes material changes to this Privacy Policy, windream will notify registered players by posting a prominent notice on the Platform or by sending a notification to the email address associated with your windream account.

The updated Privacy Policy will become effective on the date specified in the notice. Your continued use of the windream Platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. windream encourages you to review this Privacy Policy periodically to stay informed about how windream protects your personal data.

The "Last Updated" date at the top of this document indicates when this Privacy Policy was most recently revised. If you do not agree with any changes to this Privacy Policy, you must cease using the windream Platform and may request account closure by contacting windream support.

12Contact & Data Privacy Inquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or windream's handling of your personal data, please contact the windream Data Privacy team. windream's customer support is available 24 hours a day, 7 days a week via live chat on the Platform.

You may also reach windream by email for data privacy matters:

For general support inquiries unrelated to data privacy, you may contact the windream support team at:

If you are not satisfied with windream's response to your privacy inquiry, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. windream fully supports your right to seek independent regulatory review of any data protection concern.