PlayPH Privacy Policy –
How We Protect Your Personal Data

Your privacy matters to us. When you create an account on PlayPH, deposit funds, play a game, or contact our support team, you share personal information with us. This Privacy Policy explains exactly what that information is, why PlayPH needs it, how we use it, and how we protect it in line with Philippine law.

This Privacy Policy applies to all players, visitors, and users of the PlayPH website at playph.best and all associated mobile interfaces and gaming services. By registering a PlayPH account or using any part of the platform, you confirm that you have read and understood this policy and consent to the processing of your personal data as described here.

PlayPH is committed to full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. If you have concerns about how PlayPH handles your data at any point, please contact our Data Protection Officer directly at the details in Section 13 of this policy.

For the purposes of the Philippine Data Privacy Act and this Privacy Policy, PlayPH is the Data Controller responsible for your personal information. This means PlayPH determines the purpose and means of processing your data in connection with your use of the playph.best platform and all its gaming services.

PlayPH operates as an online gaming platform serving players in the Philippines. Our operations are conducted in accordance with Philippine gaming regulations and the Data Privacy Act of 2012. We have appointed a Data Protection Officer (DPO) who is responsible for ensuring our ongoing compliance with data privacy obligations. Contact details for our DPO are in Section 13.

Any third-party service providers who process personal data on our behalf — such as payment processors, identity verification services, or analytics providers — do so only under written agreements that require them to maintain standards of data protection consistent with this policy and with Philippine law.

PlayPH collects personal data in three main ways: information you provide directly, information generated by your use of the platform, and information obtained from third-party verification services where required by law.

Information you provide directly:

• Full legal name, date of birth, and gender
• Mobile number and email address
• Residential address in the Philippines
• Government-issued ID details (for KYC verification)
• Payment method details (GCash number, bank account details, card details — stored and processed securely)
• Communications with PlayPH support, including chat logs and emails
• Self-reported responsible gaming information such as deposit limit preferences

Information collected automatically when you use PlayPH:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session duration, pages visited, and in-platform navigation patterns
• Game history, bet records, and transaction logs
• Login timestamps and access logs
• Cookie and tracking pixel data (see Section 9)

PlayPH uses your personal data only for the purposes described in this policy. We do not use your data for any purpose that is incompatible with the reason it was collected.

Account and platform operations: Your identity and contact data are used to create and manage your PlayPH account, verify your eligibility to play, process deposits and withdrawals, and maintain accurate records of your gaming activity. Without this data, PlayPH cannot provide its services to you.

Payment processing and AML compliance: Financial data is used to process your deposits and withdrawals via GCash, Maya, BDO, BPI, and other supported Philippine payment methods. PlayPH also uses transaction data to fulfil its anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under Philippine law. This may include sharing transaction information with regulators or law enforcement when legally required.

Security and fraud prevention: Technical and usage data — including IP addresses, device identifiers, and session logs — are analysed by PlayPH's security systems to detect suspicious activity, prevent unauthorised account access, and protect the integrity of the platform for all players.

Responsible gaming: PlayPH uses your gaming activity data — bet frequency, session duration, deposit patterns — to monitor for indicators of problem gambling and to power the responsible gaming tools available in your account settings. This analysis is done to protect you, not to profile you for marketing purposes.

Platform improvement and analytics: Anonymised and aggregated usage data helps PlayPH understand how players use the platform, which games are most popular, and where the experience can be improved. This data cannot identify you individually.

Marketing communications: If you have opted in to marketing messages, PlayPH may use your contact details to send you information about promotions, new games, tournaments, and platform updates. You can withdraw your marketing consent at any time through your account settings or by emailing support@playph.best.

Under the Philippine Data Privacy Act of 2012 (RA 10173), PlayPH must have a valid legal basis for every type of personal data processing it carries out. The following bases apply to PlayPH's data processing activities:

• Contract performance: Processing your identity, contact, and financial data is necessary to fulfil PlayPH's contractual obligations to you as a registered player — including processing your deposits, calculating and paying out winnings, and maintaining your account.
• Legal obligation: PlayPH is required by Philippine law to collect and retain certain data for anti-money laundering compliance, gaming regulatory reporting, and tax obligations. This processing is non-negotiable and cannot be opted out of.
• Legitimate interests: PlayPH has a legitimate interest in using your technical and usage data for fraud detection, security monitoring, and platform improvement. These interests are balanced against your privacy rights and do not override them.
• Consent: Marketing communications and optional personalisation features are processed only on the basis of your explicit opt-in consent. This consent can be withdrawn at any time without affecting your ability to use PlayPH.

PlayPH does not sell your personal data to any third party. Full stop. We share data only in the limited circumstances described below, and always with appropriate safeguards in place.

Payment service providers: When you deposit or withdraw funds via GCash, Maya, BDO, BPI, UnionBank, InstaPay, PESONet, or Visa/Mastercard, we share the minimum payment information necessary with your chosen provider to complete the transaction. These providers operate under their own privacy policies and are regulated by the Bangko Sentral ng Pilipinas (BSP).

Identity verification services: For KYC compliance, PlayPH uses third-party identity verification services to confirm the authenticity of government-issued documents. These services are contractually bound to process your data solely for verification purposes and are prohibited from retaining or using it for any other reason.

Regulatory and law enforcement authorities: PlayPH is legally required to share player data with Philippine gaming regulators, the Anti-Money Laundering Council (AMLC), and law enforcement agencies when lawfully demanded. We will only ever provide the specific data requested and will notify affected players if permitted to do so under the terms of the legal demand.

Technology and infrastructure providers: PlayPH uses trusted cloud infrastructure, platform analytics, and cybersecurity service providers who may process limited technical data on our behalf. All such providers are vetted and bound by data processing agreements that require compliance with standards equivalent to the Philippine Data Privacy Act.

No international transfers without safeguards: If any data processing occurs outside the Philippines, PlayPH ensures that equivalent privacy protections are in place through contractual clauses or that the receiving jurisdiction has been recognised as providing adequate data protection under Philippine law.

PlayPH retains personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by Philippine law, whichever is longer. Here's how that works in practice:

• Active account data: Retained for the full duration your account is active on PlayPH.
• Transaction and gaming records: Retained for a minimum of five (5) years from the date of each transaction, in line with AML regulatory requirements under the AMLA and its amendments.
• KYC and identity verification documents: Retained for five (5) years from account closure or the date of last transaction, whichever is later.
• Support communications: Retained for three (3) years from the date of the last interaction, to enable resolution of future disputes.
• Marketing consent records: Retained for the duration of your consent and for two (2) years after withdrawal, to demonstrate compliance.
• Technical and security logs: Retained for twelve (12) months for fraud detection and security monitoring purposes.

When the applicable retention period expires, PlayPH securely destroys or anonymises your personal data so it can no longer be linked to you as an individual.

PlayPH takes data security seriously and has implemented multiple layers of protection to keep your personal and financial information safe. Our security programme includes:

• Encryption in transit and at rest: All data transmitted between your device and PlayPH is encrypted using industry-standard TLS 1.2/1.3 protocols. Sensitive data stored in our databases — including passwords and payment details — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within PlayPH is restricted to employees and contractors who genuinely need it for their role. All internal access is logged and audited regularly.
• Multi-factor authentication (MFA): PlayPH supports MFA for player accounts and mandates it for all internal staff with access to production systems.
• Penetration testing: PlayPH engages independent cybersecurity specialists to conduct regular penetration testing and vulnerability assessments of the platform.
• Incident response: PlayPH maintains a documented data breach response procedure. If a breach occurs that affects your personal data, we will notify the National Privacy Commission (NPC) within 72 hours and affected players as soon as practicable, in line with RA 10173.

PlayPH uses cookies and similar tracking technologies to make the platform work properly, to keep you logged in between sessions, and to understand how players use the platform so we can improve it. Here's a breakdown of the types of cookies PlayPH uses:

• Essential cookies: These are necessary for the PlayPH platform to function. They manage your login session, keep your game state when you switch pages, and protect against cross-site request forgery (CSRF) attacks. You cannot opt out of essential cookies without disabling the platform entirely.
• Analytics cookies: These help PlayPH understand which games are most played, how long players spend on different sections of the platform, and where the user experience can be improved. Analytics data is anonymised and aggregated — it does not identify you individually.
• Preference cookies: These remember your display settings and other preferences so you don't have to reconfigure them every time you log in.
• Marketing cookies: If you have opted in to marketing, these cookies help PlayPH understand which promotions are effective. They are only placed with your consent.

You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking essential cookies will affect your ability to use the PlayPH platform.

Under the Philippine Data Privacy Act and PlayPH's own commitments, you have the following rights over your personal data. To exercise any of these rights, contact PlayPH at support@playph.best or through the live chat on the platform.

PlayPH is strictly a 21+ platform. We do not knowingly collect personal data from anyone under the age of 21. Age verification is performed during the registration process, and accounts that cannot be verified as belonging to an eligible adult will be closed.

If you believe that a minor has created a PlayPH account or that PlayPH has inadvertently collected personal data belonging to a minor, please contact us immediately at support@playph.best. We will investigate promptly and, if confirmed, close the account and delete all associated personal data without delay.

PlayPH reviews this Privacy Policy regularly and will update it when our data practices change, when new features are added to the platform, or when changes in Philippine law require it. The "last updated" date at the top of this page reflects when the most recent revision was made.

When we make material changes to this policy — changes that significantly affect how we use your data or your rights as a player — we will notify you by email to the address registered on your PlayPH account and by posting a notice on the platform homepage at least seven (7) days before the changes take effect.

Your continued use of PlayPH after the effective date of any updated Privacy Policy constitutes acceptance of the changes. If you disagree with any update, you have the right to close your account and request deletion of your data. PlayPH will honour any such requests subject to applicable legal retention obligations.

If you have questions about this Privacy Policy, want to exercise your data rights, or have a concern about how PlayPH is handling your personal information, our Data Protection Officer and support team are here to help.

• Email: support@playph.best — mark your subject line with "Privacy Request" for fastest routing to our DPO
• Live chat: Available 24/7 on the PlayPH platform — our Filipino support team can assist with privacy queries in English or Filipino

We aim to respond to all privacy-related enquiries within five (5) business days and to formally resolve all data rights requests within fifteen (15) business days. If you are not satisfied with our response, you may escalate your concern to the National Privacy Commission (NPC) of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act.