wagi Casino – Privacy Policy

1. Data Controller

wagi Casino ("wagi," "we," "us," "our"), the operator of the online gaming platform accessible at wagi.vu, is the Data Controller responsible for the personal information of players and visitors processed in connection with the use of wagi services. As Data Controller, wagi determines the purposes and means of processing personal data collected through the platform.

wagi designates a Data Protection Officer (DPO) in accordance with the requirements of the National Privacy Commission (NPC) of the Philippines. The DPO is responsible for overseeing wagi's compliance with the Data Privacy Act of 2012 and this Privacy Policy. Queries directed to the DPO may be submitted via the contact information provided in Section 14 of this policy.

2. Personal Data We Collect

wagi collects the following categories of personal data, depending on your interaction with the platform:

Registration & Account Data:

• Full legal name as it appears on your government-issued Philippine ID;
• Date of birth (for age verification — minimum age 21 years);
• Philippine mobile number and email address;
• Residential address;
• Username and encrypted password (passwords are stored in hashed form only).

Identity Verification (KYC) Data:

• Government-issued photo ID documents (PhilSys National ID, passport, driver's license, UMID/SSS ID);
• Selfie or liveness verification image where required;
• Proof of address documentation where required for enhanced due diligence.

Financial Data:

• GCash account number or registered mobile number;
• Maya (PayMaya) account details;
• Philippine bank account details (BPI, BDO, Metrobank) where provided for bank transfer transactions;
• Transaction history including deposit amounts, withdrawal requests, and game wagering records.

Gameplay & Platform Usage Data:

• Game history, bet records, win/loss outcomes, and session durations;
• IP address, device type, browser type, and operating system;
• Login timestamps and session activity logs;
• Responsible gaming settings and interaction history.

Communication Data:

• Content of support interactions conducted via live chat, email, or other channels;
• Survey responses, feedback submissions, and promotional opt-in records.

3. How We Collect Personal Data

wagi collects personal data through the following means:

• Direct submission: Information you provide during account registration, KYC verification, payment processing, support interactions, and promotional opt-ins;
• Automated collection: Technical data collected automatically when you access wagi.vu, including IP address, device identifiers, browser information, and cookies (see Section 9);
• Third-party sources: Identity verification data cross-referenced against Philippine government databases or third-party KYC service providers for the purpose of age and identity verification; transaction data received from payment processors including GCash, Maya, and Philippine bank partners;
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory authorities in the exercise of their regulatory functions.

4. Purposes of Processing

wagi processes your personal data for the following purposes:

• Account management: Creation, maintenance, and administration of your wagi account;
• Identity and age verification: KYC compliance to verify that you are at least 21 years of age and are who you represent yourself to be, as required by PAGCOR and anti-money laundering regulations;
• Payment processing: Processing deposits and withdrawals via GCash, Maya, Philippine banks, and other supported payment channels;
• Regulatory compliance: Fulfilment of wagi's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and PAGCOR reporting requirements;
• Fraud prevention and security: Detection and prevention of fraud, money laundering, collusion, and other prohibited conduct;
• Gameplay and service delivery: Provision of casino games, sports betting, bingo, and all wagi platform features;
• Responsible gaming: Monitoring for indicators of problem gambling behaviour and administering responsible gaming tools including deposit limits and self-exclusion;
• Customer support: Responding to player queries, complaints, and disputes;
• Marketing and promotions: Sending promotional offers and communications to players who have opted in to receive them. You may opt out at any time by contacting wagi support;
• Platform improvement: Analysis of aggregated, anonymised platform usage data to improve wagi's services and user experience.

5. Legal Basis for Processing

wagi processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions you accepted upon registration — including account management, payment processing, and gameplay delivery;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLA reporting obligations, KYC requirements, and other applicable Philippine laws;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications, where you have affirmatively opted in. Consent for marketing may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

wagi does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. wagi may share your personal data with the following categories of recipients in the circumstances described:

• Payment processors: GCash (GXI), Maya Philippines, BancNet, and other payment partners, to the extent necessary to process your deposits and withdrawals;
• KYC and identity verification providers: Third-party services engaged to assist with age and identity verification, operating under data processing agreements with wagi;
• Game content providers: Game studios and platform providers (e.g., PG Soft, Jili Games) may receive limited session and gameplay data necessary to deliver their game content;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where required by law, court order, or regulatory mandate;
• Law enforcement: Philippine law enforcement agencies where wagi is legally obligated to disclose information in connection with a criminal investigation or legal proceeding;
• Professional advisers: Legal, accounting, and compliance advisers engaged by wagi, under obligations of professional confidentiality.

7. International Data Transfers

wagi may transfer personal data to recipients located outside the Philippines in connection with the delivery of game content from international game studios, the use of cloud infrastructure, or the provision of KYC verification services. Such transfers are conducted in accordance with the cross-border data transfer requirements of the Data Privacy Act of 2012 and NPC issuances, including the use of appropriate contractual safeguards to protect transferred data to a standard equivalent to Philippine data protection requirements.

By using wagi services and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to the extent described in this section.

8. Data Retention

wagi retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active account data: Retained for the duration of the account's existence and a minimum of five (5) years following account closure, as required by PAGCOR and AMLA record-keeping obligations;
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the last transaction, whichever is later, in compliance with AMLA requirements;
• Financial transaction records: Retained for a minimum of five (5) years, as required by AMLA and PAGCOR reporting obligations;
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, after which your data will be removed from active marketing lists within a reasonable period;
• Support communications: Retained for a minimum of two (2) years following the resolution of the relevant matter.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with wagi's data deletion procedures.

9. Cookies & Tracking Technologies

wagi.vu uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, and analyse platform usage. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function — session authentication, security tokens, and load balancing. Cannot be disabled without impacting platform functionality;
• Functional cookies: Remember your preferences such as language settings, game display options, and last-visited sections of the platform;
• Analytics cookies: Aggregate, anonymised data on platform usage patterns — pages visited, session duration, feature usage. Used to improve wagi's services. No individual player is identified in analytics reports;
• Security cookies: Detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.

wagi does not use third-party advertising cookies or retargeting pixels. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair your ability to use the wagi platform.

10. Security Measures

wagi implements technical and organisational security measures appropriate to the risk associated with processing player personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and wagi servers;
• One-way cryptographic hashing of account passwords — wagi staff cannot retrieve your actual password;
• Access controls limiting internal access to personal data to authorised personnel with a legitimate operational need;
• Multi-factor authentication on internal systems with access to personal data;
• Regular security assessments and penetration testing of the wagi platform;
• Player fund segregation — your deposited funds are held separately from wagi's operating capital.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, wagi will notify the NPC within 72 hours of becoming aware of the breach, and will inform affected players without undue delay where required by the Data Privacy Act.

11. Your Data Subject Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by wagi:

• Right to be informed: The right to know what personal data wagi holds about you and how it is used — as provided in this Privacy Policy;
• Right of access: The right to request a copy of the personal data wagi holds about you;
• Right to rectification: The right to correct inaccurate or incomplete personal data in your wagi account;
• Right to erasure: The right to request deletion of your personal data, subject to applicable legal retention obligations (see Section 8);
• Right to object: The right to object to processing of your personal data for marketing purposes or where wagi relies on legitimate interests as the legal basis;
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact wagi's Data Protection Officer using the contact details in Section 14. wagi will respond to all data subject requests within fifteen (15) business days of receipt, subject to identity verification requirements.

12. Protection of Minors

wagi Casino is strictly prohibited to persons under the age of twenty-one (21) years, as mandated by PAGCOR regulations governing Philippine online gaming. wagi does not knowingly collect or process personal data from persons under 21. Age verification is enforced through the KYC process at the point of first withdrawal, and wagi reserves the right to conduct age verification at any stage of the account lifecycle.

If wagi becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all deposited funds will be returned to the original payment source, and all personal data associated with the minor will be deleted to the extent not required by law. If you believe a minor has created a wagi account, please contact wagi support immediately.

13. Updates to This Privacy Policy

wagi may update this Privacy Policy from time to time to reflect changes in Philippine data protection law, PAGCOR regulatory requirements, or wagi's data processing practices. Material changes to this policy will be communicated to registered players via email to their registered address and/or via a platform notice at wagi.vu prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Continued use of wagi services following the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy. We encourage you to review this policy periodically. The current version is always available at wagi.vu/privacy-policy.

14. Contact & NPC Complaints

For all privacy-related enquiries, data subject rights requests, or complaints relating to wagi's processing of your personal data, please contact the wagi Data Protection Officer:

Email: [email protected] (mark subject line: "Data Privacy / DPO")

wagi will acknowledge your request within five (5) business days and provide a substantive response within fifteen (15) business days, subject to identity verification.

If you are not satisfied with wagi's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012. The NPC accepts complaints through its official channels at privacy.gov.ph.