windy.con Privacy Policy

windy.con ("we," "us," or "our") is committed to protecting the privacy and personal data of all players who access and use the windy.con platform, including its website, mobile interface, games, and related services (collectively, the "Platform"). This Privacy Policy describes our practices regarding the collection, use, storage, sharing, and protection of your personal information.

This Privacy Policy applies to all users of the windy.con Platform, with particular relevance to players based in the Philippines. It is to be read in conjunction with our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and windy.con.

By registering an account on windy.con, accessing the Platform, or otherwise providing us with your personal data, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

windy.con collects personal data from you in several ways: directly when you register or interact with the Platform, automatically through your use of the Platform, and from third parties where permitted by law. The categories of personal data we collect include the following:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify you are 21 years of age or older)
• Residential address in the Philippines (e.g., Metro Manila, Cebu, Davao, Quezon City, Makati)
• Valid email address and mobile number registered in your name
• Username and encrypted password
• Government-issued ID details (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS ID, PRC ID) submitted for KYC verification

2.2 Financial Data

• Payment method details (e.g., GCash account reference, PayMaya account reference, BPI/BDO/Metrobank account details) — stored in tokenized form only; full account numbers are never stored on windy.con servers
• Transaction history including deposits, withdrawals, and bonus credits denominated in Philippine Peso (₱)
• Source of funds documentation where required for AML compliance

2.3 Gaming & Activity Data

• Game history, wager amounts, win/loss records, and session durations
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, self-exclusion status, cooling-off periods)
• Customer support interaction records

2.4 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Platform access timestamps and navigation patterns

windy.con processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your personal data are set out in the table below:

windy.con will never use your personal data to make fully automated decisions that produce significant legal effects on you without human review, except where expressly permitted by applicable Philippine law.

Under the Philippine Data Privacy Act of 2012, windy.con is required to have a lawful basis for each type of personal data processing it undertakes. The legal bases on which windy.con relies are as follows:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including KYC requirements, AML obligations, tax reporting, and regulatory reporting to relevant gaming authorities.
• Legitimate Interests: Processing necessary for windy.con's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

windy.con does not sell, rent, or trade your personal data. We share your personal data only in the following limited circumstances:

5.1 Service Providers

windy.con engages trusted third-party service providers to assist in operating the Platform. These include payment processors (e.g., GCash, PayMaya, and banking partners), identity verification providers, game software providers, cloud hosting services, and customer support platforms. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.

5.2 Regulatory & Law Enforcement Authorities

windy.con may disclose your personal data to Philippine regulatory authorities, law enforcement agencies, or courts where required by law, court order, or regulatory directive. This includes disclosures required under AML legislation, gaming regulations, and tax laws applicable in the Philippines.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of windy.con's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

5.4 With Your Consent

windy.con may share your personal data with third parties in other circumstances where you have given your explicit prior consent to such sharing.

windy.con uses cookies, web beacons, pixel tags, and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use the Platform.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations.
• Analytics Cookies: Help us understand how players use the Platform so we can improve it. Data collected is aggregated and anonymized where possible.
• Marketing Cookies: Used only with your consent to deliver relevant promotional content within the windy.con Platform. windy.con does not use third-party advertising networks.

6.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the windy.con Platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

windy.con retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with AML and gaming regulatory requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, as required by Philippine AML legislation.
• Gaming activity data: Retained for a minimum of 3 years following account closure for responsible gaming monitoring and dispute resolution purposes.
• Customer support records: Retained for 3 years from the date of the last interaction.
• Marketing consent records: Retained for the duration of your consent and for 1 year following withdrawal of consent as evidence of compliance.

Upon expiry of the applicable retention period, windy.con will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

windy.con implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Sensitive data at rest, including passwords and payment method tokens, is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data within windy.con is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data protection training.
• Infrastructure Security: windy.con's servers are hosted in secure, access-controlled data centers with physical security measures, redundant systems, and regular security audits.
• Penetration Testing: windy.con conducts regular vulnerability assessments and penetration testing to identify and remediate security weaknesses.
• Incident Response: windy.con maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) and affected players within the timeframes required by RA 10173.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by windy.con. To exercise any of these rights, please contact our Data Protection Officer (DPO) using the details in Section 13.

• Right to Be Informed: The right to be informed about how your personal data is collected and processed — which this Privacy Policy fulfills.
• Right of Access: The right to request a copy of the personal data windy.con holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

windy.con will respond to all verified data subject rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it.

The windy.con Platform is strictly intended for adults aged 21 years and above. windy.con does not knowingly collect, process, or store personal data from any person under the age of 21. This is a firm requirement under Philippine gaming regulations and our own responsible gaming commitments.

If windy.con becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, delete all personal data collected from that individual, and take appropriate steps to prevent recurrence.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to windy.con, please contact our Data Protection Officer immediately using the contact details in Section 13 so that we can take prompt action.

windy.con primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and game software suppliers — may process data in other countries. Where personal data is transferred outside the Philippines, windy.con ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Philippine law.

Such safeguards may include contractual clauses approved by the National Privacy Commission, binding corporate rules, or transfers to countries that have been assessed as providing an adequate level of data protection. windy.con will not transfer your personal data to a jurisdiction that does not provide adequate protections without your explicit consent or a lawful basis under RA 10173.

windy.con reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players by email and/or by posting a prominent notice on the Platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this document reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how windy.con protects your personal data.

Your continued use of the windy.con Platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with any changes, you should stop using the Platform and may request account closure by contacting our support team.

windy.con has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO using the details below.

• Data Protection Officer: windy.con DPO Office
• Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 within the windy.con Platform
• Location: Metro Manila, Philippines

Our support and DPO teams include Filipino-speaking staff who can assist players from Manila, Cebu, Davao, Quezon City, Makati, and all across the Philippines. We aim to acknowledge all privacy-related inquiries within 3 business days and to resolve them within 30 calendar days.