philplus Privacy Policy

Introduction

philplus ("we," "us," or "our") is committed to protecting the privacy and personal data of all users of the philplus online gaming platform, accessible at philplus.vip. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you access or use any part of the philplus platform, including our website, games, and customer support services.

This policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines. It also reflects applicable requirements under PAGCOR's regulatory framework for online gaming operators.

We encourage you to read this Privacy Policy carefully and in full. If you have questions about any part of this policy, please contact our Data Protection Officer using the details provided in Section 16.

Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, philplus acts as the Personal Information Controller (PIC) in respect of the personal data you provide when using the platform. This means philplus determines the purposes and means by which your personal data is processed.

Where philplus engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and analytics services — those parties act as Personal Information Processors (PIPs) and are contractually bound to process your data only in accordance with philplus's instructions and this Privacy Policy.

Personal Data We Collect

philplus collects the following categories of personal data, depending on how you interact with the platform:

philplus does not intentionally collect sensitive personal information (as defined under RA 10173) unless strictly required for regulatory compliance, such as government-issued ID details for KYC purposes. Where sensitive data is collected, it is handled with heightened security measures.

How We Collect Your Data

philplus collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the platform, including IP addresses, device identifiers, browser information, and cookies. See Section 8 for details on our cookie practices.
• Third-party sources: Identity and fraud verification data from KYC service providers; payment confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors; and publicly available information used for AML screening.
• Regulatory sources: Information received from PAGCOR or other competent Philippine authorities in connection with regulatory compliance obligations.

How We Use Your Personal Data

philplus uses your personal data for the following purposes:

• Account management: To create, maintain, and manage your philplus account, including verifying your identity and age (21+ requirement) during registration and at any subsequent point.
• Service delivery: To provide access to all philplus games, process deposits and withdrawals, and deliver customer support services.
• Payment processing: To facilitate financial transactions via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to verify the ownership of payment instruments.
• Legal and regulatory compliance: To comply with PAGCOR licensing requirements, Philippine anti-money laundering (AML) laws, the Data Privacy Act of 2012, and any other applicable legal obligations, including reporting suspicious transactions to the Anti-Money Laundering Council (AMLC).
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats to the platform and its users.
• Responsible gaming: To monitor gaming activity for signs of problem gambling, enforce self-exclusion requests, and apply deposit and loss limits set by users.
• Platform improvement: To analyze usage patterns, troubleshoot technical issues, and improve the performance, features, and user experience of the philplus platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent to receive such communications. You may withdraw consent at any time.
• Dispute resolution: To investigate and resolve disputes relating to game outcomes, transactions, or account activity.

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, philplus processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to when registering your philplus account, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, AML reporting obligations under Republic Act No. 9160 (as amended), and the Data Privacy Act of 2012.
• Legitimate interests: Processing necessary for philplus's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

philplus does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Third-party services engaged to verify your identity, age, and document authenticity as required by PAGCOR and AML regulations.
• Game software providers: Licensed game suppliers whose software powers philplus games. These providers may receive anonymized or pseudonymized gaming data for technical and audit purposes.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or court order.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by philplus, subject to professional confidentiality obligations.
• IT and security service providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on philplus's behalf under strict data processing agreements.

Cookies & Tracking Technologies

philplus uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather analytics data. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function correctly, including session authentication, security tokens, and load balancing. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytics cookies: Collect anonymized data about how users interact with the platform — such as pages visited, session duration, and navigation paths — to help us improve the platform's performance and usability.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and bot traffic.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the philplus platform. philplus does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.

Data Retention

philplus retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention guidelines:

• Account data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and Philippine AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by Republic Act No. 9160 (Anti-Money Laundering Act, as amended).
• KYC documents: Retained for the duration of the account relationship and for five (5) years after account closure.
• Customer support communications: Retained for up to three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Technical and analytics data: Retained in anonymized or aggregated form for up to two (2) years for platform improvement purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with philplus's data disposal procedures.

Data Security

philplus implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the philplus platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by philplus:

• Right to be informed: The right to be notified of how your personal data is being collected and processed — which this Privacy Policy fulfills.
• Right of access: The right to request a copy of the personal data philplus holds about you, along with information about how it is being used.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your philplus account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to philplus's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. philplus will respond to all verified data rights requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

Children's Privacy

The philplus platform is strictly intended for users who are 21 years of age or older, in accordance with Philippine gaming regulations. philplus does not knowingly collect personal data from individuals under the age of 21.

If philplus becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all associated data will be deleted, and any deposits will be returned through the original payment method following verification procedures.

If you are a parent or guardian and believe that a minor has registered on the philplus platform, please contact us immediately at [email protected] so that we can take prompt action.

International Data Transfers

philplus primarily processes and stores personal data within the Republic of the Philippines. In certain circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where cloud infrastructure or game software providers operate internationally.

Where such transfers occur, philplus ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring overseas recipients to apply data protection standards equivalent to those required under Philippine law.
• Transfers only to jurisdictions that the NPC has recognized as providing adequate levels of data protection.
• Technical and organizational measures ensuring the security of data during and after transfer.

By using the philplus platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards outlined above.

Third-Party Links

The philplus platform may contain links to third-party websites or services — for example, payment provider portals or regulatory body websites. This Privacy Policy applies solely to the philplus platform and does not cover the privacy practices of any third-party websites.

philplus is not responsible for the content, privacy policies, or data handling practices of any third-party websites. We encourage you to review the privacy policy of any third-party site you visit before providing personal information.

Updates to This Privacy Policy

philplus reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The most current version will always be published on this page, with the effective date clearly indicated at the top.

For material changes that significantly affect how we process your personal data, philplus will notify registered users via the email address associated with their account at least seven (7) days before the changes take effect, where reasonably practicable.

Your continued use of the philplus platform after any amendments have been published constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with any changes, you should discontinue use of the platform and may request account closure in accordance with our Terms & Conditions.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by philplus, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights under RA 10173 have been violated. philplus encourages users to contact us first so we can attempt to resolve any concerns directly.