wagi Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how wagi ("wagi," "we," "us," or "our"), the operator of the online gaming platform accessible at wagi.lat, collects, processes, stores, and protects the personal data of users ("Players," "you," or "your") of the Platform. This Policy applies to all personal data collected in connection with your use of the wagi website, mobile interface, games, customer support channels, and all related services.

wagi is committed to protecting the privacy and personal data of Filipino players in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission of the Philippines. We take our obligations as a personal data controller seriously and apply appropriate technical and organizational measures to safeguard your information.

This Policy should be read together with our Terms & Conditions, which are available at wagi.lat/terms-conditions and are incorporated herein by reference.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, wagi is the personal information controller responsible for your personal data collected through the Platform. wagi has appointed a Data Protection Officer ("DPO") who can be contacted using the details in Section 16 of this Policy.

As a PAGCOR-regulated gaming operator, wagi is subject to both the National Privacy Commission and PAGCOR with respect to personal data handling and player information requirements. Our privacy practices are reviewed regularly to ensure continued compliance with applicable Philippine regulations.

3. Information We Collect

wagi collects the following categories of personal data from Players:

3.1 Identity & Contact Information:

• Full legal name as appearing on your government-issued Philippine identification;
• Date of birth (for age verification in compliance with the 21+ PAGCOR requirement);
• Philippine residential address;
• Email address;
• Philippine mobile number.

3.2 Identity Verification Documents (KYC):

• Copies of government-issued identification documents submitted during Know Your Customer (KYC) verification, such as Philippine Passport, PhilSys National ID, SSS card, Driver's License, or PRC ID;
• Selfie photographs submitted for identity matching purposes;
• Any supplementary documents requested for enhanced due diligence.

3.3 Financial Information:

• GCash account mobile number linked to your wagi account;
• PayMaya account details where applicable;
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) for withdrawal processing;
• Transaction history including deposits, withdrawals, and gaming transactions.

3.4 Gaming & Activity Data:

• Game session logs, including games played, wagers placed, results, and timestamps;
• Account login history, including IP addresses and device identifiers;
• Bonus usage and promotion participation history;
• Player support interactions and communication records.

3.5 Technical Data:

• IP address and geolocation data (country and region level);
• Device type, operating system, and browser information;
• Cookie identifiers and session tokens (see Section 8);
• Platform usage patterns and navigation data.

4. How We Collect Your Data

wagi collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, contacting customer support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access and use the Platform, including through cookies, web beacons, and server logs;
• Third-party payment providers: Financial transaction data received from GCash, PayMaya, and banking partners to facilitate deposits and withdrawals;
• Game providers: Game session and outcome data from wagi's licensed game studio partners as part of normal platform operations;
• Identity verification services: Results from third-party identity verification processes used during KYC compliance checks.

5. Legal Basis for Processing

wagi processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and wagi (i.e., to operate your account, process transactions, and provide gaming services);
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing obligations, Anti-Money Laundering Act (AMLA) requirements, and KYC mandates;
• Legitimate interests: Processing necessary for wagi's legitimate business interests, including fraud prevention, platform security, and customer service improvements, where these interests are not overridden by your data protection rights;
• Consent: Where required by law and not covered by the bases above, wagi will obtain your explicit consent before processing your personal data for specific purposes such as marketing communications.

6. How We Use Your Personal Data

wagi uses your personal data for the following purposes:

• Account registration, verification, and ongoing account management;
• Age verification to enforce the mandatory 21+ minimum age requirement under PAGCOR regulations;
• Processing deposits, withdrawals, and in-game transactions in Philippine Peso;
• KYC identity verification and Anti-Money Laundering (AML) compliance;
• Detecting and preventing fraud, cheating, collusion, and abuse of the Platform;
• Providing customer support and resolving disputes;
• Sending transactional notifications (account activity, deposit confirmations, withdrawal updates);
• Administering bonuses, promotions, and the wagi VIP program;
• Enforcing our Terms & Conditions and responsible gaming policies;
• Complying with PAGCOR reporting obligations and other legal requirements;
• Improving Platform performance, game offerings, and user experience through anonymized analytics;
• Sending marketing communications about wagi offers and promotions, where you have consented or where permitted under applicable law.

7. Data Sharing & Disclosure

wagi does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary and for the purposes described in this Policy:

• PAGCOR and Philippine regulatory authorities: As required under our operating authorization and applicable gaming regulations, including mandatory reporting obligations;
• Anti-Money Laundering Council (AMLC): As required under the Anti-Money Laundering Act of 2001 (RA 9160, as amended) for suspicious transaction reporting;
• Payment processors: GCash (Mynt – Globe Fintech Innovations), PayMaya Philippines, and banking partners, for the sole purpose of processing financial transactions;
• Game studios and software providers: Licensed game content providers receive limited session data necessary to operate and audit games played on the wagi platform;
• Identity verification and fraud prevention services: Third-party KYC and AML compliance service providers engaged by wagi for identity verification;
• Cloud hosting and infrastructure providers: Data center and cloud service providers hosting the wagi platform infrastructure, subject to data processing agreements;
• Legal authorities: Philippine law enforcement agencies, courts, or other competent authorities when required by a valid court order, subpoena, or applicable law.

All third parties with whom wagi shares personal data are contractually bound to handle that data in accordance with applicable privacy laws and wagi's data protection standards.

8. Cookies & Tracking Technologies

wagi uses cookies and similar tracking technologies to operate the Platform and enhance your experience. Cookies are small data files stored on your device. The types of cookies used by wagi include:

• Strictly necessary cookies: Essential for Platform operation, including session authentication, security tokens, and load balancing. These cannot be disabled without affecting Platform functionality;
• Functional cookies: Remember your preferences such as language settings, game lobby layout, and login state to personalize your experience;
• Analytics cookies: Collect anonymized data about how Players navigate and use the wagi Platform to help us identify areas for improvement;
• Fraud prevention cookies: Used to detect and prevent bot activity, multiple-account creation, and other abusive behavior on the Platform.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the wagi Platform. wagi does not use third-party advertising cookies or retargeting pixels.

9. Data Retention

wagi retains personal data for as long as necessary to fulfill the purposes described in this Policy and to comply with our legal and regulatory obligations. Specific retention periods include:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR regulations and Philippine AML law;
• Financial transaction records: Retained for a minimum of five (5) years following each transaction, in compliance with AMLC record-keeping requirements;
• Game session logs: Retained for three (3) years from the date of each session for dispute resolution and audit purposes;
• Customer support records: Retained for three (3) years following resolution of each support interaction;
• Marketing consent records: Retained until you withdraw consent, plus an additional two (2) years for compliance documentation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with wagi's data destruction procedures.

10. Data Security

wagi implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the wagi Platform;
• Encryption of sensitive data at rest within wagi's database infrastructure;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular penetration testing and security audits of the Platform;
• Two-Factor Authentication (2FA) available for Player accounts and enforced for administrative access;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While wagi employs industry-standard security measures, no online system can guarantee absolute security. You are responsible for maintaining the security of your account credentials. If you suspect unauthorized access to your wagi account, contact our support team immediately.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by wagi:

• Right to be Informed: You have the right to be informed of how your personal data is collected and processed, as described in this Policy;
• Right of Access: You may request a copy of the personal data wagi holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to wagi's legal and regulatory retention obligations;
• Right to Object: You may object to certain processing of your personal data, including direct marketing;
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format;
• Right to File a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact wagi's Data Protection Officer using the details in Section 16. wagi will respond to all valid requests within fifteen (15) business days. Some requests may be subject to identity verification before processing.

12. Children & Minors

The wagi Platform is strictly intended for adults who are 21 years of age or older as required by PAGCOR regulations. wagi does not knowingly collect personal data from persons under the age of 21. If wagi discovers that a person under 21 has provided personal data or registered an account, that account will be immediately suspended, all associated data will be deleted (except where retention is required by law), and any funds deposited will be returned through the original payment method.

If you believe that a minor has registered or attempted to register on the wagi Platform, please notify our support team immediately at [email protected]. We take underage access very seriously and act promptly on all such reports.

13. Cross-Border Data Transfers

wagi primarily processes and stores personal data within the Republic of the Philippines. In certain circumstances, personal data may be transferred to or processed in other countries, for example where wagi's game studio partners or cloud infrastructure providers operate servers outside the Philippines. Where such transfers occur, wagi ensures that:

• The recipient country provides an adequate level of data protection as recognized under Philippine law;
• Appropriate contractual safeguards (such as data processing agreements with standard contractual clauses) are in place to protect your personal data; and
• Such transfers are disclosed to the National Privacy Commission where required by applicable regulations.

14. Third-Party Services

The wagi Platform integrates third-party services to operate effectively, including licensed game studios, GCash and PayMaya payment processing, and identity verification providers. These third parties operate under their own privacy policies for the data they process directly. wagi is not responsible for the privacy practices of third-party services operating on their own platforms.

Where third parties process personal data on behalf of wagi (as data processors), they do so only under wagi's instructions and are bound by data processing agreements that require them to implement appropriate security measures and process data only for the purposes specified by wagi.

15. Amendments to This Policy

wagi reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, services, or legal obligations. Where changes are material, wagi will notify you via the email address registered on your account at least fourteen (14) days before the updated Policy takes effect. The updated effective date will be clearly displayed at the top of this document.

Your continued use of the wagi Platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the amended Policy, you should discontinue use of the Platform and may request account closure through wagi customer support.

16. Contact Information & Data Protection Officer

For questions, concerns, or to exercise your data subject rights under the Data Privacy Act of 2012, please contact wagi's Data Protection Officer through the following channel:

Email: [email protected] — Subject line: "Privacy / Data Subject Request"

Live Chat: Available 24/7 within the wagi Platform after logging in. Indicate "Privacy Request" at the start of your conversation to be routed to the appropriate team. Response time is typically under 24 hours for privacy-related requests.

Players who are not satisfied with wagi's response to a privacy concern may escalate their complaint to the National Privacy Commission of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act of 2012.