Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how playphp ("we", "us", "our") collects, processes, stores, and protects personal information provided by users ("you", "your") when you access or use the playphp website and online gaming platform (collectively, the "Platform"). This Policy applies to all registered players, visitors, and any other individuals who interact with the playphp Platform.

By registering an account or continuing to use the playphp Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller

playphp acts as the data controller in respect of personal data collected through the Platform. As data controller, playphp determines the purposes and means of processing your personal information and is responsible for ensuring that such processing complies with applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC).

If you have any questions or concerns about how playphp handles your personal data, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 13 of this Policy.

3. Data We Collect

playphp collects personal data in several ways — directly from you when you register or use the Platform, automatically through your use of the Platform, and in some cases from third-party sources. The categories of personal data we collect include:

3.1 Information You Provide Directly

• Registration data: Full name, date of birth, email address, mobile number, and residential address.
• Identity verification (KYC) data: Government-issued photo ID (e.g., Philippine passport, driver's licence, SSS/UMID card), proof of address, and selfie photographs for identity verification purposes.
• Payment data: GCash account number, PayMaya account details, bank account information (BPI, BDO, Metrobank), and transaction records. playphp does not store full card numbers or banking passwords.
• Communications: Messages sent to our support team via live chat or email, including the content of those communications and any attachments.
• Responsible gaming preferences: Deposit limits, loss limits, session time settings, and self-exclusion requests.

3.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage data: Pages visited, games played, session duration, betting history, wagering patterns, and feature interactions.
• Location data: General geographic location derived from your IP address, used to verify eligibility and comply with jurisdictional restrictions.
• Cookies and tracking data: As described in Section 9 of this Policy.

3.3 Information from Third Parties

• Identity verification results from KYC service providers.
• Fraud detection signals from anti-fraud and anti-money laundering screening services.
• Payment confirmation data from GCash, PayMaya, and banking partners.

4. How We Use Your Data

playphp uses your personal data for the following purposes:

5. Legal Basis for Processing

playphp processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws, including gaming regulations, AMLA, and tax obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time.

6. Sharing Your Personal Data

playphp does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• KYC and identity verification providers: To verify your identity and age as required by Philippine gaming regulations.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to process deposits and withdrawals.
• Anti-fraud and AML service providers: To screen transactions and detect suspicious activity in compliance with AMLA obligations.
• IT and hosting providers: Cloud infrastructure and technology service providers who host and maintain the Platform under strict data processing agreements.
• Regulatory authorities: The Anti-Money Laundering Council (AMLC), National Privacy Commission (NPC), and other Philippine government agencies where required by law.
• Legal and professional advisers: Lawyers, auditors, and other professional advisers where necessary for legal proceedings or compliance purposes.

All third-party service providers who process personal data on behalf of playphp are required to implement appropriate technical and organisational security measures and to process data only in accordance with playphp's instructions.

7. Data Retention

playphp retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law. Specific retention periods include:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required under Philippine anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for two (2) years from the date of the communication, unless required longer for legal proceedings.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter for compliance documentation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with playphp's data disposal procedures.

8. Security Measures

playphp implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including payment information and identity documents.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing.
• Multi-factor authentication for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While playphp takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying playphp immediately if you suspect any unauthorised access to your account.

9. Cookies & Tracking Technologies

playphp uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and responsible gaming limits.
• Analytics cookies: Collect anonymised data about how players use the Platform to help us improve performance and user experience.
• Marketing cookies: Used to deliver relevant promotional content where you have consented to receive marketing communications.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information on managing cookies, refer to your browser's help documentation.

10. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by playphp:

• Right to be informed: The right to know what personal data playphp collects and how it is used — as set out in this Policy.
• Right of access: The right to request a copy of the personal data playphp holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to legal retention obligations.
• Right to object: The right to object to processing of your personal data for direct marketing purposes.
• Right to data portability: The right to receive your personal data in a structured, commonly used format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 13. playphp will respond to all verified requests within thirty (30) days. We may require proof of identity before processing your request.

11. Minors

The playphp Platform is strictly intended for individuals aged 21 years and above. playphp does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an underage individual, we will immediately close the associated account and delete the data in question. If you believe a minor has registered on the Platform, please contact us immediately.

12. Changes to This Policy

playphp reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered players via email or in-platform notification prior to the changes taking effect. The date of the most recent revision is displayed at the top of this page. Continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the playphp Data Protection Officer:

Data Protection Officer – playphp

Email: [email protected]

Support: [email protected]

Email addresses are provided as plain text for reference only. For the fastest response, use the 24/7 live chat feature inside your playphp account dashboard.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.