philplus Privacy Policy

1. Who We Are (Data Controller)

philplus ("philplus," "we," "us," or "our") is the data controller responsible for the personal data collected through the philplus online gaming platform at philplus.net. philplus is a PAGCOR-regulated online casino and sports betting platform operating in the Philippines.

As data controller, philplus determines the purposes and means by which your personal data is processed. philplus is registered with the National Privacy Commission (NPC) of the Philippines as required under Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and its implementing rules and regulations.

2. Personal Data We Collect

philplus collects the following categories of personal data from account holders and platform visitors:

Identity Data:

• Full legal name as it appears on your government-issued Philippine identification document
• Date of birth
• Gender
• Government ID type and ID number (UMID, PhilSys National ID, Passport, Driver's License, SSS ID, or Voter's ID)
• Selfie or photograph submitted for identity verification purposes

Contact Data:

• Philippine mobile number (primary account identifier)
• Email address
• Residential address (province, city, barangay) as required for KYC compliance

Financial Data:

• GCash mobile number and account name
• PayMaya (Maya) account details
• Bank account details (BPI, BDO, Metrobank) where provided for withdrawals
• Transaction history including deposit amounts, withdrawal amounts, dates, and reference numbers

Gaming and Behavioural Data:

• Game session history, bet amounts, game outcomes, and wagering activity
• Platform usage patterns, login timestamps, and session durations
• Bonus and promotion redemption history
• Responsible gaming tool usage (deposit limits set, self-exclusion periods)

Technical Data:

• IP address at time of login and registration
• Device type, operating system, and browser information
• Cookie identifiers and session tokens

3. How We Collect Your Data

philplus collects your personal data through the following methods:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or completing any other platform forms.
• Automated collection: Technical data collected automatically when you access the philplus website or mobile-optimized platform, including IP address, device information, and cookie data.
• Third-party sources: Identity verification data cross-referenced through PAGCOR-approved KYC service providers. Payment confirmation data received from GCash, PayMaya, and banking partners strictly for transaction processing and fraud prevention purposes.

4. Purposes of Data Processing

philplus processes your personal data for the following specific, legitimate purposes:

• Account creation and management: To register your account, verify your identity, and maintain your account profile.
• Age and eligibility verification: To confirm you are 21 years of age or older and legally eligible to access online gambling services in the Philippines, as required by PAGCOR regulations.
• Transaction processing: To process deposits via GCash, PayMaya, and Philippine banks, and to facilitate withdrawals to your nominated account.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, identity theft, and unauthorized account access.
• Regulatory compliance: To fulfil philplus's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
• Customer support: To respond to your enquiries, complaints, and account-related requests.
• Platform improvement: To analyse aggregated usage data for the purpose of improving the philplus platform, game library, and user experience.
• Responsible gaming: To monitor gaming activity for indicators of problem gambling and to administer responsible gaming tools including deposit limits and self-exclusion.
• Promotional communications: Where you have provided consent, to send you information about philplus promotions, new games, and platform updates relevant to your account.

5. Legal Bases for Processing

philplus processes your personal data under the following legal bases as provided by the Data Privacy Act of 2012 and its implementing rules:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a philplus account holder, including account management, game access, and payment processing.
• Legal obligation: Processing required to comply with PAGCOR licensing requirements, AMLA obligations, NPC registration requirements, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud detection, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.
• Consent: Processing for optional promotional communications, where you have provided explicit, freely given, and informed consent that you may withdraw at any time.

6. Data Sharing and Disclosure

philplus does not sell, rent, or trade your personal data to third parties for any purpose. philplus shares your personal data only in the following limited circumstances:

• Payment processors: GCash (Mynt – Globe Fintech Innovations, Inc.), PayMaya (Maya Philippines, Inc.), BPI, BDO, and Metrobank receive transaction data strictly to facilitate deposits and withdrawals. These partners are bound by their own privacy policies and Philippine data protection regulations.
• KYC and identity verification providers: PAGCOR-approved third-party KYC service providers receive identity documents for verification purposes only, under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and Philippine law enforcement agencies may receive your data where disclosure is required by law, court order, or valid regulatory demand.
• Technology and infrastructure providers: Cloud hosting and platform infrastructure providers who process data on philplus's behalf under data processing agreements that mandate compliance with the DPA.

7. Data Retention

philplus retains your personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Account data: Retained for the duration of your active account relationship with philplus, plus a minimum of five (5) years following account closure, in compliance with PAGCOR recordkeeping requirements and AMLA obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine anti-money laundering regulations.
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the last transaction, whichever is later.
• Marketing consent records: Retained for the duration of your consent, plus a reasonable period thereafter to demonstrate compliance.
• Technical logs: Retained for a maximum of twelve (12) months, unless retention is required for an ongoing security investigation or legal proceeding.

Following the expiry of applicable retention periods, philplus will securely destroy or anonymise your personal data such that it can no longer be attributed to you as an identifiable individual.

8. Data Security Measures

philplus implements technical and organisational security measures appropriate to the sensitivity of the personal data it holds. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the philplus platform.
• Encryption of sensitive data at rest, including identity documents and financial account details.
• Role-based access controls ensuring that philplus staff can only access personal data necessary for their specific job function.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Regular security audits and penetration testing conducted by independent security professionals.
• Formal incident response procedures aligned with NPC breach notification requirements under the DPA.

In the event of a personal data breach that is likely to result in harm to your rights and freedoms, philplus will notify you and the National Privacy Commission within the timeframes prescribed by the DPA and its implementing rules.

9. Cookies and Tracking Technologies

The philplus website uses cookies and similar tracking technologies to ensure platform functionality and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Required for platform operation, including session management, login authentication, and security functions. These cannot be disabled without preventing core platform functionality.
• Functional cookies: Store your preferences such as language settings, remembered login details (where enabled), and game lobby configurations.
• Analytics cookies: Collect aggregated, anonymised data about how visitors use the philplus platform to help us improve performance and user experience. Individual users are not identified through analytics data.

You may control cookie settings through your browser preferences. Disabling strictly necessary cookies will impair your ability to use the philplus platform. philplus does not use third-party advertising or behavioural targeting cookies.

10. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by philplus:

• Right to be Informed: The right to know what personal data philplus collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data philplus holds about you.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data held by philplus.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary, subject to philplus's legal retention obligations under PAGCOR and AMLA requirements.
• Right to Object: The right to object to processing of your personal data for direct marketing purposes. You may withdraw marketing consent at any time by contacting philplus support.
• Right to Data Portability: The right to receive a copy of the personal data you have provided to philplus in a structured, machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe philplus has violated your data privacy rights.

To exercise any of these rights, contact philplus's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." philplus will respond within the timeframes prescribed by the DPA.

11. Children and Minors

The philplus platform is strictly prohibited for use by individuals under 21 years of age. philplus does not knowingly collect personal data from minors. Age verification is conducted as a mandatory part of the account registration and KYC process.

If philplus becomes aware that personal data has been collected from an individual under 21 years of age, that data will be deleted immediately, the associated account will be closed, and any balance will be forfeited in accordance with philplus's Terms & Conditions.

If you believe a minor has accessed the philplus platform, please contact [email protected] immediately.

12. Changes to This Privacy Policy

philplus may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform operations. Material changes will be communicated to registered account holders via email to the address on file and/or via a prominent notice on the philplus website at least seven (7) days before the updated policy takes effect.

Your continued use of the philplus platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the changes. The current version of the Privacy Policy is always accessible at philplus.net/privacy-policy. The "Last updated" date at the top of this document indicates when the most recent revision was made.

13. How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or philplus's data processing practices, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with philplus's response to your data privacy concern.