Your privacy matters to phplay. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a phplay player under Philippine law.
Notice: This Privacy Policy applies to all personal data collected and processed by phplay in connection with your use of the phplay Platform, including the website at phplay.one and any related services. By registering for or using phplay, you acknowledge that you have read and understood this Privacy Policy. Please read it carefully alongside our Terms & Conditions.
phplay ("phplay," "we," "us," "our") is committed to protecting the privacy and personal data of every player who uses the phplay Platform. We understand that Filipino players trust us with sensitive personal and financial information, and we take that responsibility seriously.
This Privacy Policy has been prepared in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. It also reflects phplay's obligations under PAGCOR's licensing requirements regarding player data protection.
This Policy describes:
For the purposes of the Data Privacy Act of 2012, phplay is the personal information controller in respect of all personal data collected through the phplay Platform. phplay determines the purposes and means of processing your personal data.
phplay has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection law. Contact details for the DPO are provided in Section 15 of this Policy.
Registered with the NPC: phplay is registered with the National Privacy Commission of the Philippines as required under the Data Privacy Act of 2012. Our data processing activities are conducted in accordance with NPC guidelines and circulars.
phplay collects the following categories of personal data from players and prospective players:
Sensitive Personal Information: Government-issued ID numbers and financial account details are classified as sensitive personal information under the DPA. phplay processes this data only to the extent strictly necessary for identity verification, AML compliance, and payment processing, and applies heightened security measures to its protection.
phplay collects personal data through the following means:
phplay does not purchase personal data from data brokers or other third-party data vendors.
phplay processes your personal data for the following purposes:
Under the Data Privacy Act of 2012, phplay relies on the following legal bases for processing your personal data:
phplay does not sell your personal data to third parties. phplay may share your personal data with the following categories of recipients, strictly on a need-to-know basis:
Third-party service providers who assist phplay in operating the Platform, including KYC verification providers, payment processors (GCash, PayMaya, banking partners), cloud hosting providers, and customer support platform providers. All service providers are contractually bound to process your data only on phplay's instructions and in accordance with applicable data protection law.
phplay is required by law to disclose certain player data to regulatory and law enforcement authorities, including:
Third-party game providers whose games are available on the phplay Platform may receive limited technical data (such as player session identifiers) necessary to deliver their games. These providers are not permitted to use this data for their own marketing purposes.
In the event of a merger, acquisition, or sale of all or part of phplay's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. phplay will notify affected players of any such transfer in advance where practicable.
phplay retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:
Upon expiry of the applicable retention period, phplay will securely delete or anonymise your personal data in accordance with NPC guidelines on data disposal.
phplay implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
Your Responsibility: While phplay takes extensive measures to protect your data, you are also responsible for keeping your phplay account credentials secure. Never share your password or OTP with anyone, including phplay staff. phplay will never ask for your password via email, chat, or phone.
phplay uses cookies and similar tracking technologies on the phplay Platform to enhance your experience and to collect technical and usage data as described in Section 3.4 of this Policy.
You can manage your cookie preferences through the cookie settings panel available on the phplay Platform. You may also control cookies through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the phplay Platform.
phplay does not use cookies to track your activity on third-party websites unrelated to phplay.
Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phplay:
To exercise any of the rights listed above, please contact phplay's Data Protection Officer using the contact details in Section 15. phplay will respond to all data subject requests within fifteen (15) calendar days of receipt, as required by the DPA. In complex cases, this period may be extended by a further fifteen (15) days with prior notice to you.
Identity Verification: To protect your privacy, phplay will verify your identity before processing any data subject request. You may be asked to provide a copy of a government-issued ID to confirm that the request is being made by the account holder.
The phplay Platform is strictly intended for individuals who are at least 21 years of age. phplay does not knowingly collect personal data from persons under 21 years of age. The 21+ age requirement is enforced through identity verification at the point of registration and at any subsequent point where phplay has reason to question a player's age.
If phplay discovers that personal data has been collected from a person under 21 years of age, phplay will:
If you are a parent or guardian and believe that a minor has registered on phplay, please contact our support team immediately so that we can take appropriate action.
phplay's primary data processing activities are conducted within the Philippines. However, some of phplay's third-party service providers — including cloud infrastructure providers and certain game providers — may process data in other countries.
Where personal data is transferred outside the Philippines, phplay ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include:
You may request further information about cross-border data transfers and the safeguards in place by contacting phplay's Data Protection Officer.
phplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, phplay will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect, where practicable.
The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of the phplay Platform after any amendments to this Privacy Policy have taken effect constitutes your acknowledgement of the revised Policy.
We encourage you to review this Privacy Policy periodically to stay informed about how phplay protects your personal data.
If you have any questions, concerns, or requests regarding this Privacy Policy or phplay's data processing practices, please contact our Data Protection Officer:
Data Protection Officer
Email:
General Support
Email:
phplay's support team is available 24 hours a day, 7 days a week via live chat on the phplay Platform. For data privacy matters, please mark your message clearly as a data privacy inquiry so it can be directed to the DPO promptly.
You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe phplay has not handled your personal data in accordance with the Data Privacy Act of 2012.
Data Protection Commitments
Privacy isn't just a legal requirement for phplay — it's a core part of how we operate. Here's what we do every day to protect your personal information.
All data transmitted between your device and phplay is protected by TLS encryption. Your financial details and personal information are never sent in plain text — ever.
phplay's data practices are fully aligned with Republic Act No. 10173, the Data Privacy Act of 2012. We are registered with the National Privacy Commission and maintain a dedicated Data Protection Officer.
Access, correct, or delete your data at any time. phplay responds to all data subject requests within 15 days. Your privacy rights are not just acknowledged — they are actively upheld.
phplay does not sell, rent, or trade your personal data to third-party marketers or data brokers. Your information is used solely to operate and improve the phplay Platform.
phplay doesn't hold your data indefinitely. Defined retention periods apply to every data category, and data is securely deleted or anonymised once those periods expire.
In the unlikely event of a data breach, phplay will notify the NPC and affected players within the timeframes required by the DPA. Transparency is non-negotiable when your data is at risk.
Play with Confidence
Now that you know exactly how phplay handles your personal data, you can play with full confidence. Sign in to your account or explore everything phplay has to offer — all in Philippine Peso, all PAGCOR regulated.
PAGCOR regulated · DPA 2012 compliant · 21+ only · Gambling is addictive. Know when to stop.