wpslot Privacy Policy

wpslot, operating at wpslot.app, is the data controller responsible for personal data collected through our platform. As data controller, wpslot determines the purposes and means of processing your personal information and is accountable for ensuring that such processing complies with the Philippine Data Privacy Act of 2012 (RA 10173) and all applicable regulations issued by the National Privacy Commission (NPC).

wpslot has appointed a designated Data Protection Officer (DPO) to oversee privacy compliance across our platform. The DPO can be reached at any time via our official support email. All formal privacy inquiries, data subject requests, and data breach concerns should be directed to the DPO using the contact details provided in Section 15 of this policy.

wpslot collects personal data across several categories, depending on how you interact with our platform. The following table provides a comprehensive overview of the categories and specific types of data we collect:

wpslot does not intentionally collect sensitive personal information beyond what is required for identity verification (e.g., Philippine government-issued ID numbers). We do not collect biometric data beyond the selfie photograph required for KYC facial matching. We do not collect information about your religious beliefs, political opinions, or sexual orientation.

wpslot collects personal data through the following channels and methods:

• Direct Submission: Data you provide actively during account registration, KYC document upload, deposit and withdrawal requests, and when contacting our support team via live chat or email.
• Automated Technical Collection: Data collected automatically when you access the wpslot platform, including your IP address, device fingerprint, browser information, session duration, and pages visited. This data is collected via cookies, server logs, and similar tracking technologies.
• Third-Party Verification Partners: Identity and age verification data received from our KYC partners when they cross-reference your submitted documents against Philippine government databases.
• Payment Processors: Transaction confirmation data received from GCash, Maya, GrabPay, and Philippine banking institutions when you make deposits or receive withdrawals through the wpslot platform.
• Game Content Providers: Gameplay data (session logs, bet histories, RTP records) received from our licensed game providers including Pragmatic Play, PG Soft, and Jili Games, who supply games to the wpslot platform under license.

wpslot processes your personal data for the following specific, legitimate purposes:

• Account Creation & Management: To register your wpslot account, verify your identity and age (21+ requirement under PAGCOR), manage your account settings, and provide you with access to the platform.
• Regulatory Compliance (KYC/AML): To fulfill our obligations under PAGCOR licensing conditions and Philippine AML laws, including verifying your identity, monitoring transactions, and reporting to the Anti-Money Laundering Council (AMLC) where required.
• Payment Processing: To process your deposits and withdrawals via GCash, Maya, Philippine banks, and other approved payment methods, and to maintain accurate financial records for audit purposes.
• Gaming Services: To deliver the games you play on wpslot, maintain accurate bet and win records, calculate jackpots, and ensure fair play in accordance with PAGCOR technical standards.
• Customer Support: To respond to your queries, resolve disputes, process complaints, and provide assistance through our Filipino-speaking support team.
• Platform Security & Fraud Prevention: To detect and prevent unauthorized account access, bonus abuse, money laundering, use of prohibited software, and other fraudulent or illegal activities.
• Responsible Gaming: To monitor gaming behavior for indicators of problem gambling, to implement deposit limits and self-exclusion tools, and to communicate responsible gaming resources to at-risk players.
• Marketing & Promotions: To send you personalized promotional offers, bonus notifications, and updates about new games or features on wpslot — but only where you have provided consent and have not opted out. You may withdraw marketing consent at any time.
• Legal Proceedings: To establish, exercise, or defend legal claims involving wpslot, PAGCOR, or Philippine courts.

Under the Philippine Data Privacy Act, every processing activity must be grounded in a recognized legal basis. wpslot processes your personal data under the following legal bases:

• Consent: For marketing communications, optional personalization features, and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Contractual Necessity: Processing required to fulfill our obligations under the wpslot Terms & Conditions that you accepted upon registration, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with Philippine laws and PAGCOR regulations, including KYC identity verification, AML transaction monitoring, age verification (21+), and regulatory reporting.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where these interests do not override your fundamental privacy rights.

wpslot does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited and controlled circumstances:

• KYC & Identity Verification Partners: Licensed identity verification providers who verify your Philippine government-issued ID and confirm your age and identity for PAGCOR compliance. These partners are contractually bound to use your data solely for verification purposes.
• Payment Service Providers: GCash, Maya (PayMaya), GrabPay, BPI, BDO, Metrobank, InstaPay, and QR Ph. Transaction data is shared to the minimum extent necessary to process your deposits and withdrawals.
• Game Content Providers: Licensed game suppliers (e.g., Pragmatic Play, PG Soft, Jili) who host game servers and require session data to deliver gameplay and calculate results fairly under PAGCOR-certified RNG standards.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies — where legally required by regulation, court order, or law enforcement request.
• Technology & Infrastructure Providers: Cloud hosting providers, content delivery networks, cybersecurity firms, and platform development partners who process data on wpslot's behalf under strict data processing agreements (DPAs).
• Legal & Professional Advisors: Philippine law firms, auditors, and compliance consultants engaged by wpslot where data disclosure is necessary for legal proceedings, regulatory defense, or statutory auditing.

All third parties with whom wpslot shares personal data are required to maintain appropriate technical and organizational security measures and to process data only for the specific purposes authorized by wpslot.

wpslot uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage patterns, and deliver relevant promotions. The following categories of cookies are used on wpslot.app:

• Strictly Necessary Cookies: Essential for the wpslot platform to function. These include session authentication tokens, security cookies, and load balancing cookies. These cannot be disabled as they are required for basic platform operation.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming tool configurations. Disabling these may affect your platform experience.
• Analytics Cookies: Collect anonymized data about how users navigate the wpslot platform to help us improve game discovery, page performance, and the overall Filipino player experience. Used with your consent.
• Marketing Cookies: Used to deliver personalized promotional content relevant to your gaming preferences and activity on wpslot. Used with your consent and can be withdrawn at any time.

You may manage your cookie preferences at any time via the wpslot Cookie Preferences panel accessible from the platform footer. Note that disabling strictly necessary cookies will prevent you from logging in and using core platform features.

wpslot retains personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to mandatory retention periods imposed by Philippine law and PAGCOR regulations. The following retention periods apply:

• Active Account Data: Retained for the duration of your active wpslot account, plus a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of verification, as required by PAGCOR and Philippine AML regulations (RA 9160 as amended by RA 10365).
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and AMLC regulations.
• Customer Support Communications: Retained for three (3) years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained for the period of the consent plus three (3) years to demonstrate compliance with consent requirements under RA 10173.
• Technical & Log Data: Retained for twelve (12) months from the date of collection, unless retained longer for specific security investigation purposes.

Upon expiry of the applicable retention period, wpslot will securely destroy or anonymize personal data in a manner that prevents reconstruction or re-identification. Anonymized aggregate data may be retained indefinitely for platform analytics and improvement purposes.

wpslot implements a comprehensive set of technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

• Encryption: All data in transit is protected with TLS 1.3 encryption. Sensitive data at rest — including KYC documents and financial records — is encrypted using AES-256 standards.
• Access Controls: Personal data is accessible only to wpslot staff and contractors with a documented need-to-know basis. Access is controlled via role-based permissions, multi-factor authentication, and regular access reviews.
• Infrastructure Security: The wpslot platform is hosted on geographically redundant, ISO 27001-aligned infrastructure with Web Application Firewall (WAF) protection, DDoS mitigation, and 24/7 intrusion detection monitoring.
• Security Testing: We conduct regular vulnerability assessments and annual penetration testing by independent cybersecurity firms. Identified vulnerabilities are remediated according to a risk-prioritized schedule.
• Staff Training: All wpslot staff with access to personal data undergo regular data privacy and security awareness training in accordance with NPC guidelines.

The wpslot platform is strictly intended for adults. Under PAGCOR regulations and Philippine law, participation in online casino gaming is restricted to individuals who are at least 21 years of age. wpslot does not knowingly collect personal data from individuals under the age of 21.

All registered wpslot accounts are subject to mandatory age verification as part of the KYC process. Accounts where the holder is found to be under 21 years of age will be immediately suspended, all balances will be returned to the source payment method, and the account will be permanently closed. Any bonus funds associated with an underage account will be voided.

If you have reason to believe that a person under the age of 21 has registered or is attempting to access the wpslot platform, please notify us immediately at [email protected] so we can take appropriate action.

As a data subject under RA 10173, you may exercise any of your privacy rights — access, correction, erasure, objection, restriction, or portability — by submitting a request to wpslot's Data Protection Officer. To exercise your rights:

1. Submit a Request: Contact wpslot's DPO via email at [email protected] with the subject line "Data Privacy Request" and specify the right you wish to exercise and the data concerned.
2. Identity Verification: To protect your data, we will verify your identity before processing any data subject request. You will be asked to confirm your account details and may be required to submit identity verification documents.
3. Processing Timeline: wpslot will acknowledge your request within 5 business days and provide a substantive response within 15 business days, as required by NPC regulations. Complex requests may require up to 30 business days, in which case we will notify you of the extension.
4. No Fee for Reasonable Requests: wpslot will not charge a fee for processing data subject requests unless the request is manifestly unfounded, repetitive, or excessive, in which case we may charge a reasonable administrative fee or decline to act on the request.

If you are unsatisfied with wpslot's response to your data privacy request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file an NPC complaint is available on the NPC's official website.

wpslot primarily stores and processes personal data within the Philippines on locally compliant infrastructure. However, some of our third-party technology partners — including game content providers and cloud infrastructure partners — may process data on servers located outside the Philippines.

Where personal data is transferred outside the Philippines, wpslot ensures that appropriate safeguards are in place as required by Section 21 of RA 10173, including:

• Data processing agreements (DPAs) with all overseas sub-processors that impose equivalent privacy obligations to those required under Philippine law
• Transfer impact assessments for transfers to jurisdictions that do not provide an adequate level of personal data protection equivalent to that afforded by RA 10173
• Standard contractual clauses that bind overseas recipients to appropriate data handling obligations enforceable by wpslot

wpslot will not transfer personal data to jurisdictions subject to Philippines government travel bans or international sanctions without explicit NPC authorization.

In the event of a personal data breach that is likely to result in a real risk of harm to affected wpslot members, we will comply with the NPC's mandatory breach notification requirements under RA 10173 and NPC Circular 16-03:

• NPC Notification: wpslot will notify the National Privacy Commission within 72 hours of becoming aware of a notifiable personal data breach, as required by NPC regulations.
• Player Notification: Where a breach is likely to adversely affect the rights and freedoms of affected players, wpslot will notify those players directly as soon as practicable — typically within 7 days of confirming the breach scope and affected accounts.
• Breach Notification Contents: Notifications to affected players will describe the nature of the breach, the categories and approximate volume of personal data involved, the likely consequences of the breach, the measures wpslot has taken or proposes to take to address the breach, and the contact details of our Data Protection Officer.
• Containment & Remediation: Upon detecting a breach, wpslot will immediately activate our Incident Response Plan, isolate affected systems, and engage our cybersecurity team to contain the breach and prevent further unauthorized access.

We maintain a Personal Data Breach Register as required by the NPC, documenting all breaches — whether or not they are notifiable — including the facts relating to the breach, its effects, and the remedial action taken.

wpslot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. When we make material changes to this policy, we will:

• Post the updated Privacy Policy on wpslot.app with a revised "Last Updated" date at the top of the page
• Display a prominent in-platform notification to all registered wpslot members informing them of the update
• Send an email notification to registered members for any material changes that significantly affect how we process your personal data
• Where required by RA 10173 or NPC guidelines, seek fresh consent from affected data subjects before implementing the revised processing activities

Your continued use of the wpslot platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the changes, you must discontinue use of wpslot and may request account closure by contacting our support team.

We encourage all wpslot members to review this Privacy Policy periodically to stay informed about how we protect your personal data. The current version of the policy will always be accessible at wpslot.app/privacy-policy.

For any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by wpslot, please contact our Data Protection Officer using the details below. Our DPO is available to assist all Filipino players with privacy-related matters in English and Filipino.

• Data Protection Officer: wpslot Privacy & Compliance Team
• Email: [email protected] (subject line: "Data Privacy Request" or "DPO Inquiry")
• Platform: wpslot.app — accessible from Manila, Cebu, Davao, Quezon City, Makati, and all regions across the Philippines
• Response Time: Our DPO team acknowledges all privacy inquiries within 5 business days

If you are not satisfied with our response, or if you believe your data privacy rights under RA 10173 have been violated, you have the right to file a complaint with the National Privacy Commission of the Philippines. Complaints to the NPC should be filed in accordance with the procedures outlined in NPC Circular 16-04.