wslot Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data processed by the wslot platform, operated at wslot.asia (the "Platform"). It applies to all registered Players, prospective registrants, and visitors to the wslot website. The Operator (hereinafter "wslot", "we", "us", or "our") acts as the Personal Information Controller in respect of all personal data processed under this Policy.

wslot operates as a PAGCOR-licensed online gaming platform serving Filipino players. Our data processing activities are conducted in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, relevant National Privacy Commission (NPC) issuances, and the data protection requirements imposed by PAGCOR on licensed operators.

By registering a wslot account or continuing to use the Platform after being presented with this Policy, you acknowledge that you have read and understood how we process your personal data. This Policy should be read alongside our Terms and Conditions and Responsible Gaming Policy, which are published at wslot.asia.

2. Personal Data We Collect

wslot collects personal data that falls into the following categories:

2.1 Identity and Registration Data

Collected when you register a wslot account and during KYC verification:

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify the 21+ age requirement under PAGCOR regulations);
• Residential address in the Philippines;
• Government-issued identification document type, number, and images (Philippine passport, PhilSys National ID, UMID, driver's license, PRC ID, voter's ID, or SSS/GSIS ID);
• Photograph or selfie submitted as part of liveness verification during KYC;
• Tax Identification Number (TIN), where required for tax reporting obligations.

2.2 Contact Data

• Email address registered to your wslot account;
• Philippine mobile number registered to your wslot account;
• Preferred communication language.

2.3 Financial Data

• GCash account number or registered mobile number associated with your GCash wallet;
• Maya (PayMaya) account identifier;
• Bank account name, number, and bank name for BPI, BDO, or Metrobank withdrawals;
• Cryptocurrency wallet address for USDT transactions;
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method references;
• Source of funds declaration, where required by anti-money laundering (AML) procedures.

2.4 Gaming and Activity Data

• Game history, including games played, wager amounts, outcomes, and session durations;
• Bonus and promotion participation history;
• Account balance history and transaction logs;
• Responsible gaming settings configured on your account, including deposit limits and self-exclusion status.

2.5 Technical and Device Data

• IP address at login and during active sessions;
• Device type, operating system, and browser type;
• Session timestamps and login/logout records;
• Cookies and similar tracking technologies (see Section 9).

2.6 Communications Data

• Records of customer support interactions, including live chat transcripts and email correspondence;
• Complaint and dispute records;
• Marketing preference settings and consent records.

3. How We Collect Your Personal Data

wslot collects personal data through the following channels:

4. Legal Basis for Processing

wslot processes personal data under one or more of the following lawful bases as recognized under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our obligations under the wslot Terms and Conditions and to provide the gaming services you have registered for, including KYC verification, account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with PAGCOR's licensing requirements, the Anti-Money Laundering Act (AMLA) and its implementing rules, the DPA, NPC issuances, and applicable Philippine taxation laws including BIR reporting obligations.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, abuse detection, and responsible gaming monitoring — where such interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes such as marketing communications, where we have obtained your explicit, informed, and freely given consent. You may withdraw this consent at any time through your account settings.

5. How We Use Your Personal Data

wslot uses your personal data for the following purposes:

5.1 Account Management and Service Delivery

To create and maintain your wslot account; to verify your identity and age (21+ requirement); to process deposits and withdrawals; to grant access to games and services; to apply bonuses and promotions to eligible accounts; and to provide customer support.

5.2 Regulatory Compliance

To comply with PAGCOR licensing obligations including player registration records, transaction reporting, and responsible gaming documentation. To fulfil AML/CFT obligations under the Anti-Money Laundering Act, including screening against watchlists and reporting suspicious transactions to AMLC. To comply with BIR tax reporting requirements applicable to gaming winnings.

5.3 Security and Fraud Prevention

To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and terms violations on the wslot platform. To monitor login activity for suspicious access patterns and to enforce account security measures including 2FA verification.

5.4 Responsible Gaming

To monitor gaming activity for indicators of problem gambling as required under PAGCOR's responsible gaming framework. To enforce self-exclusion and deposit limit settings configured by the Player. To share relevant data with PAGCOR's player protection programs where required by regulation.

5.5 Marketing Communications

Where you have provided explicit consent, to send promotional emails, SMS notifications, or in-platform messages about wslot bonuses, new games, and events. Marketing communications can be opted out of at any time through your account settings or by contacting support.

5.6 Platform Improvement

To analyze aggregated and anonymized usage data to improve platform performance, game selection, and user experience. Individual gameplay data used for this purpose is anonymized before analysis.

6. Data Sharing and Disclosure

wslot shares personal data with third parties only in the following circumstances:

• PAGCOR and Regulatory Authorities: As required by our operating license, player data is shared with PAGCOR for compliance monitoring, responsible gaming programs, and regulatory reporting. Data may also be disclosed to the Anti-Money Laundering Council (AMLC), Bureau of Internal Revenue (BIR), or other Philippine government authorities where legally required.
• Payment Processors: Transaction data is shared with the payment processing partners necessary to execute your deposit and withdrawal requests (GCash, Maya, GrabPay, BPI, BDO, Metrobank). These processors operate under their own privacy policies and applicable Philippine financial regulations.
• KYC Verification Providers: Identity document data is shared with certified third-party KYC verification service providers solely for the purpose of completing identity verification. These providers are contractually bound to process your data only for this purpose.
• Game Software Providers: Game providers integrated into the wslot platform receive only the session data necessary to operate the game (e.g., Player ID, session token, bet amounts). Game providers do not receive full KYC data.
• IT and Security Service Providers: Hosting, cybersecurity, and fraud detection service providers may access certain platform data to deliver their contracted services. All such providers are subject to data processing agreements.
• Legal and Law Enforcement: Where required by a valid court order, subpoena, or other legally binding request from a Philippine law enforcement authority, wslot will disclose data as legally obligated.

7. Data Retention

wslot retains personal data for the following minimum periods, after which data is securely deleted or anonymized:

Where retention is required by law beyond these periods, data will be retained for the legally mandated duration.

8. Data Security

wslot implements technical and organizational measures designed to protect your personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• SSL/TLS Encryption: All data transmitted between your device and the wslot platform is encrypted using TLS 1.3 with 256-bit encryption.
• Data-at-Rest Encryption: Personal data stored on wslot's servers is encrypted at rest.
• Access Controls: Strict role-based access controls limit employee access to personal data to those with a legitimate operational need. Access is logged and audited.
• Two-Factor Authentication: wslot employees with access to sensitive data are required to use 2FA. Players are strongly encouraged to enable 2FA on their accounts.
• Regular Security Audits: wslot undergoes periodic security assessments, including penetration testing, as part of PAGCOR's licensing compliance requirements.
• Data Breach Response: wslot maintains a data breach response procedure that includes notification to the National Privacy Commission (NPC) within 72 hours of discovery of a qualifying breach, as required under the DPA.

9. Cookies and Tracking Technologies

wslot uses cookies and similar client-side storage technologies to operate the platform and improve your experience. The following types of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, responsible gaming limits displayed, and lobby layout preferences.
• Analytics Cookies: Used to collect aggregated, anonymized information about how the platform is used, which helps us improve performance and game selection. These are subject to your consent.
• Security Cookies: Used for fraud detection and security monitoring, including device fingerprinting for suspicious login detection.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging in or using core platform features.

10. Your Data Subject Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by wslot:

10.1 Right to Access

You have the right to request a copy of the personal data wslot holds about you. Access requests will be fulfilled within 15 business days of receipt, subject to identity verification.

10.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data held by wslot. Minor corrections (e.g., email address updates) can be made through account settings; corrections to KYC identity data require contacting support.

10.3 Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that erasure requests are subject to legal retention obligations described in Section 7 — data required under AMLA, PAGCOR, or BIR obligations cannot be deleted during the mandatory retention period.

10.4 Right to Object and Block

You have the right to object to processing based on legitimate interests (Section 4) and to request temporary blocking of your data pending investigation of a dispute about its accuracy or lawfulness.

10.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.

10.6 Right to Complain to the NPC

If you believe your data protection rights have been violated, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. Please refer to the NPC's official website for the complaints process.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Subject Rights Request". Include your registered name and account email. We will acknowledge your request within 3 business days and respond fully within 15 business days.

11. Children's Privacy and Age Restriction

Age verification is a mandatory step in the wslot KYC process. Government-issued identification confirming date of birth is required before any real-money gaming access is granted. Parents or guardians who believe a minor has registered a wslot account should contact support immediately at [email protected].

12. Cross-Border Data Transfers

Some of the third-party service providers engaged by wslot — including KYC verification providers, game software developers, and certain payment infrastructure partners — may process personal data outside of the Philippines. Where such transfers occur, wslot ensures that:

• The recipient country provides an adequate level of data protection as assessed under the Philippine DPA framework; or
• Appropriate contractual safeguards are in place through Data Sharing Agreements or similar instruments that impose DPA-equivalent obligations on the recipient; and
• Such transfers are reported to the NPC where required under applicable NPC circulars.

13. Third-Party Services and Limitations

Game software integrated into the wslot platform is developed and operated by third-party providers. While wslot vets and contracts with these providers, your gameplay data within individual game interfaces is also subject to the data practices of the relevant game provider as a sub-processor. wslot contractually requires all game providers to handle player data in compliance with applicable data protection law.

wslot is not responsible for the privacy practices of any third-party service that you access independently outside of the wslot platform. This Privacy Policy applies exclusively to data processing conducted by or on behalf of wslot.

14. Updates to This Privacy Policy

wslot reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, PAGCOR requirements, or our data processing practices. Material updates will be communicated to registered Players via email notification to the address on file and by posting a notice on the wslot platform not less than 7 calendar days before the effective date of the revised Policy.

Continued use of the wslot platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. The current version of this Policy is always accessible at wslot.asia/privacy-policy. The version date is indicated in the "Last Updated" field above.

15. Contact and Data Protection Officer

For any privacy-related queries, data subject rights requests, or concerns about how wslot processes your personal data, please contact our Data Protection Officer (DPO) through the following channel: