This Privacy Policy explains how playphp collects, processes, stores, and protects your personal information in compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and applicable PAGCOR regulations. Your privacy is a commitment we take seriously.
This Privacy Policy ("Policy") describes how playphp ("playphp," "we," "us," "our") — the operator of the online gaming platform accessible at https://playphp.lat — collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("you," "Data Subject," "Player") who access or use the playphp platform and its associated services.
This Policy applies to all personal data processed by playphp in connection with:
This Policy does not apply to third-party websites, payment processors, or game software providers accessible through or linked from the playphp platform. Those entities operate under their own independent privacy policies, and playphp is not responsible for their data practices.
playphp acts as the personal information controller ("PIC") in respect of all personal data collected and processed in connection with your use of the playphp platform, as defined under Republic Act No. 10173 and its Implementing Rules and Regulations.
As Data Controller, playphp determines the purposes and means of processing your personal data. playphp has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with RA 10173, responding to data subject requests, and coordinating with the National Privacy Commission (NPC) where required.
You may contact playphp's Data Protection Officer at any time using the contact details provided in Section 15 of this Policy.
playphp collects the following categories of personal data from players and website visitors. We collect only what is necessary for the purposes described in this Policy:
| Data Category | Specific Data Points | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID type and number, nationality | Mandatory (KYC) |
| Contact Data | Philippine mobile number (+63), email address, residential address (province/city) | Mandatory |
| Financial Data | GCash number, PayMaya number, bank account details (BDO/BPI/Metrobank), transaction amounts, deposit/withdrawal history | Mandatory for transactions |
| Gaming Activity Data | Game sessions, bet history, win/loss records, bonus usage, responsible gaming tool settings | Mandatory |
| Technical Data | IP address, device type, browser type, operating system, session timestamps, login history | Automatic |
| Communications Data | Support chat logs, email correspondence, feedback submissions | When applicable |
| Cookie & Analytics Data | Cookie identifiers, page views, navigation paths, referral source | Consent-based |
playphp does not collect sensitive personal information (as defined under RA 10173, Section 3(l)) beyond what is strictly required for PAGCOR-mandated KYC and age verification. We do not collect religious beliefs, political affiliation, health data, or sexual orientation. Any government-issued ID data collected for KYC purposes is processed solely for identity and age verification and is not retained beyond the legally required retention period.
playphp collects personal data through the following channels and mechanisms:
Under Republic Act No. 10173, playphp processes your personal data on the following legal bases:
playphp uses collected personal data for the following specific purposes. We do not use your data for any purpose beyond those described here without obtaining your explicit consent or unless required by law:
playphp does not sell your personal data to third parties. playphp does not share your personal data with any external party except in the following circumstances and strictly on a need-to-know basis:
playphp retains personal data only for as long as necessary to fulfil the purpose for which it was collected, comply with legal and regulatory obligations, or resolve disputes. The following general retention periods apply:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | PAGCOR / AML requirement |
| Transaction Records | 10 years from transaction date | RA 9160 (AMLA) obligation |
| KYC Documents | 5 years after account closure | PAGCOR / AMLC requirement |
| Gaming Activity Logs | 5 years from session date | PAGCOR licensing condition |
| Support Communications | 3 years from last interaction | Legitimate interest / dispute resolution |
| Marketing Preferences | Until opt-out, then deleted within 30 days | Consent-based |
| Technical / Server Logs | 12 months rolling | Security / fraud prevention |
Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymized so that it can no longer be associated with any identifiable individual. playphp conducts periodic data retention reviews to ensure compliance with this schedule.
playphp implements technical, organizational, and physical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, playphp will notify affected Data Subjects and the National Privacy Commission (NPC) within the timeframes mandated by RA 10173 and NPC Circular No. 16-03.
The playphp platform uses cookies and similar tracking technologies to deliver and improve its services. A cookie is a small text file stored on your device when you visit a website. playphp uses the following categories of cookies:
You can manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to use the playphp platform. For detailed cookie information, please refer to the playphp Cookie Notice accessible from the platform footer.
Under Republic Act No. 10173, you have the following rights as a Data Subject. These rights may be exercised by contacting playphp's Data Protection Officer at [email protected]:
playphp will respond to verifiable Data Subject requests within 30 calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days with written notification to you. Requests may be submitted by email to [email protected] with the subject line "Data Subject Request." Identity verification will be required before any request is processed.
If playphp becomes aware that it has inadvertently collected personal data from a person under 21 years of age, it will take immediate steps to delete that data and close the associated account, in accordance with PAGCOR's underage player protection protocols. Winnings accrued by an underage player are subject to forfeiture.
If you are a parent or guardian and believe that your child under 21 has provided personal data to playphp or has accessed the platform, please contact the Data Protection Officer at [email protected] immediately. playphp will cooperate fully to investigate and remediate the situation.
playphp is a Philippines-focused platform and processes the majority of personal data within the Republic of the Philippines. However, some technical services — including cloud infrastructure, game software delivery, and analytics — may involve the transfer of personal data to service providers located in other jurisdictions.
Where personal data is transferred outside the Philippines, playphp ensures that appropriate safeguards are in place in accordance with RA 10173, Section 21, including:
Specifically, game software delivery networks and live dealer studio streaming services may route through servers in Southeast Asia and other regions with adequate data protection frameworks. Financial transaction data processed through GCash, PayMaya, and Philippine banks remains within Philippine jurisdiction.
playphp reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or playphp's data processing practices. The "Last Updated" date at the top of this Policy will be revised upon any amendment.
Material changes to this Policy — meaning changes that significantly affect your rights or playphp's obligations — will be communicated to registered players via email notification at least 15 days prior to the effective date of the change. Non-material clarifications and formatting updates may take effect immediately upon publication.
Your continued use of the playphp platform following notification of any change constitutes your acknowledgment of the updated Policy. If you do not agree to the amended Policy, you may close your playphp account in accordance with the Terms and Conditions.
Previous versions of this Privacy Policy are available upon written request to [email protected]. playphp maintains an internal version history of all Privacy Policy amendments as part of its NPC compliance documentation.
playphp has appointed a Data Protection Officer (DPO) as required under Republic Act No. 10173 and registered with the National Privacy Commission. The DPO is responsible for ensuring playphp's ongoing compliance with RA 10173, handling Data Subject requests, and acting as the primary point of contact with the NPC.
If you have any questions about this Privacy Policy, wish to exercise your Data Subject rights, have a concern about how your personal data is being handled, or wish to report a suspected data breach involving your playphp account, please contact us using the details below:
playphp is committed to resolving all Privacy-related concerns in good faith and in the shortest time practicable. Where a concern cannot be resolved informally, the formal dispute resolution process described in the playphp Terms and Conditions shall apply.
Data privacy at playphp isn't just legal compliance — it's a commitment to every Filipino player who trusts us with their personal information.
playphp's data practices are designed around Republic Act No. 10173 — the Philippine Data Privacy Act — and its Implementing Rules and Regulations. A registered Data Protection Officer oversees compliance, manages Data Subject requests, and coordinates directly with the National Privacy Commission. Every Filipino player's data is handled under the same legal framework that governs Philippine banks and major corporations.
Your personal data and financial information on the playphp platform are encrypted in transit using TLS 1.2+ with 256-bit encryption — the same standard applied by BDO, BPI, and GCash. Data at rest in playphp's databases uses AES-256 encryption. When you deposit via GCash or withdraw to your BPI account, every byte of sensitive data is protected end-to-end.
playphp does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. The only parties who receive your data are those directly involved in delivering your playphp experience: payment processors like GCash and PayMaya, PAGCOR as the regulator, and technology vendors bound by strict data processing agreements. Your information stays within the playphp ecosystem.
Access, rectify, erase, object, or port your data — these aren't just legal terms at playphp. The Data Protection Officer is reachable directly at [email protected], responds within 30 days, and treats every Data Subject request as a genuine obligation. Filipino players have the same data rights as players in any jurisdiction with strong privacy law, and playphp honors them completely.
playphp collects only what is genuinely necessary. Identity and age data is required by PAGCOR — not for marketing. Financial data is required to process your GCash withdrawal — not to build a profile. Game activity is logged for regulatory audit and responsible gaming monitoring — not to sell to advertisers. Every data point collected has a defined, limited purpose aligned to your playphp experience.
Because playphp operates under a PAGCOR license, data governance practices are subject to regulatory audit. PAGCOR's licensing framework includes data security and player protection requirements that reinforce playphp's own privacy commitments. The segregated player fund requirement — which protects your wallet balance — is part of the same regulatory framework that governs how your personal data is handled.
Now you know exactly how playphp handles your personal information — transparently, securely, and in full compliance with Philippine law. Ready to play on a platform that respects your privacy? 21+ only.
🔞 21+ Only | 🛡️ PAGCOR Licensed | 🔒 RA 10173 Compliant | 🇵🇭 Philippines Only