windy.con Privacy Policy

1. Who We Are

This Privacy Policy is issued by windy.con ("the Platform," "we," "us," or "our"), the operator of the online gaming platform accessible at windycon.vip. windy.con provides online casino games, bingo, slots, live dealer tables, and related promotional services to players in the Philippines.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), windy.con acts as the Personal Information Controller in respect of the personal data of registered players and website visitors. This means we determine the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through the windy.con website, mobile interface, customer support channels, and any other touchpoint through which you interact with us. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.

2. Personal Data We Collect

windy.con collects only the personal data that is necessary to provide our services, comply with our legal obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect include:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Nationality and country of residence
• Email address and mobile phone number
• Residential address (barangay, city/municipality, province, ZIP code)

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, PhilSys National ID, SSS ID, driver's license, UMID)
• Proof of address documents (e.g., utility bill, bank statement dated within 90 days)
• Selfie or liveness check images where required for enhanced verification
• Source of funds declarations where required by anti-money laundering regulations

2.3 Financial Data

• GCash or PayMaya account reference numbers (we do not store full wallet credentials)
• Bank account details provided for withdrawal processing (bank name, account name, account number)
• Debit card details (card number is tokenized; we do not store full card numbers)
• Transaction history including deposits, withdrawals, and bonus credits

2.4 Gaming Activity Data

• Game session logs including games played, wagers placed, and outcomes
• Bonus and promotion usage history
• Responsible gaming settings and self-exclusion records
• Customer support interaction history

2.5 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session timestamps and duration
• Pages visited and features used within the Platform
• Referral source (how you arrived at windycon.vip)

3. How We Collect Your Data

windy.con collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment confirmation data from GCash, PayMaya, and banking partners.

4. How We Use Your Personal Data

windy.con uses your personal data for the following purposes:

windy.con will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for the new processing activity.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, windy.con processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws and regulations, including PAGCOR requirements, AML obligations, and tax reporting duties.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have given your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

windy.con does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• KYC and identity verification providers: To verify your identity and age in compliance with regulatory requirements.
• Payment processors and banking partners: GCash, PayMaya, and Philippine banking institutions, solely to process your deposits and withdrawals.
• AML and fraud screening services: To screen transactions against sanctions lists and detect suspicious activity as required by law.
• IT infrastructure and cloud service providers: Hosting, database, and security service providers who process data on our behalf under strict data processing agreements.
• Customer support platforms: Third-party live chat and ticketing systems used to manage support interactions.
• Regulatory authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants, subject to professional confidentiality obligations.

7. Cookies & Tracking Technologies

windy.con uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage patterns. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled. They include session authentication cookies and security tokens.
• Functional cookies: Remember your preferences such as language settings and responsible gaming limits you have set.
• Analytics cookies: Help us understand how players use the Platform so we can improve it. Data collected is aggregated and anonymized where possible.
• Marketing cookies: Used to deliver relevant promotional content. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent the Platform from functioning correctly. Withdrawing consent for marketing cookies will not affect your ability to use the Platform.

8. Data Retention

windy.con retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR regulations and AML obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with Philippine tax and AML regulations.
• Gaming activity logs: Retained for three (3) years from the date of the session, or longer where required for dispute resolution or regulatory purposes.
• Customer support records: Retained for two (2) years from the date of the last interaction.
• Marketing consent records: Retained for the duration of your account and for two (2) years following account closure.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with windy.con's data destruction procedures.

9. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by windy.con. To exercise any of these rights, please contact our Data Privacy Officer using the details in Section 13.

windy.con will respond to all valid data rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

Please note that certain rights are subject to limitations. For example, we cannot delete data that we are legally required to retain under PAGCOR regulations or AML obligations. Where we are unable to fulfil a request in full, we will explain the reason in our response.

10. Data Security

windy.con implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the windy.con Platform is protected using TLS 1.3 encryption.
• Encryption at rest: Personal data stored in our databases is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorized personnel on a strict need-to-know basis. All staff with access to personal data undergo data privacy training.
• Multi-factor authentication: Administrative access to systems containing personal data requires multi-factor authentication.
• Regular security audits: windy.con conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident response: windy.con maintains a data breach response procedure. In the event of a personal data breach that poses a risk to your rights, we will notify the National Privacy Commission and affected players within the timeframes prescribed by the Data Privacy Act.

While windy.con takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

11. Children's Privacy

The windy.con Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. windy.con does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data, and report the matter to the relevant regulatory authority where required.

If you are a parent or guardian and believe that a minor has registered an account with windy.con, please contact us immediately using the details in Section 13 so that we can investigate and take appropriate action.

12. Changes to This Privacy Policy

windy.con reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes, we will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how windy.con protects your personal data. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the updated Policy.

13. Contact Our Data Privacy Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by windy.con, please contact our designated Data Privacy Officer (DPO):

For general support enquiries, you may also reach our team via the 24/7 live chat feature available on the Platform after login.