pphpark Privacy Policy

1. Introduction

pphpark ("pphpark," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the pphpark platform, including the website at pphpark.org and any associated mobile applications or services (collectively, the "Platform"). This Privacy Policy ("Policy") describes how pphpark collects, uses, stores, shares, and protects your personal information when you access or use the Platform.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission ("NPC"). It also reflects pphpark's obligations under the PAGCOR regulatory framework governing online gaming operations in the Philippines.

By registering for a pphpark account, accessing the Platform, or otherwise providing your personal data to pphpark, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not use the pphpark Platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, pphpark is the personal information controller responsible for the personal data collected through the Platform. pphpark determines the purposes and means of processing your personal data and is accountable for ensuring that your data is handled in accordance with applicable Philippine privacy law.

pphpark has designated a Data Protection Officer ("DPO") who is responsible for overseeing compliance with the DPA and this Policy. If you have any questions, concerns, or requests relating to your personal data, you may contact the DPO using the details provided in Section 15 of this Policy.

3. Data We Collect

pphpark collects the following categories of personal data from players and Platform users:

3.1 Identity & Registration Data

• Full legal name as it appears on a government-issued identification document
• Date of birth (used to verify that you meet the 21+ age requirement)
• Gender (optional, for personalisation purposes)
• Nationality and country of residence
• Government-issued ID number (e.g., Philippine passport, SSS, UMID, or driver's licence number)
• Username and encrypted password

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (including barangay, city or municipality, province, and postal code)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in Philippine Peso (PHP), timestamps, and payment method used
• GCash account reference, PayMaya account reference, or bank account details (BPI, BDO, Metrobank) as applicable
• Betting history, game activity records, and account balance information
• Bonus and promotional credit records

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session duration, pages visited, and features used on the Platform
• Login timestamps and access logs
• Cookies and similar tracking technology data (see Section 8)

3.5 Communications Data

• Records of your communications with pphpark customer support via live chat, email, or other channels
• Feedback, survey responses, and complaints submitted to pphpark
• Marketing preferences and opt-in or opt-out records

3.6 Responsible Gaming Data

• Self-exclusion requests and status
• Deposit, loss, and session limits set by the player
• Responsible gaming assessments or interactions with the pphpark support team

4. How We Collect Your Data

pphpark collects your personal data through the following means:

• Direct collection: Information you provide when registering for a pphpark account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access and interact with the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-money laundering screening services; payment data from GCash, PayMaya, BPI, BDO, and Metrobank as part of transaction processing.
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with licensing, compliance, or investigation requirements.

5. How We Use Your Data

pphpark uses your personal data for the following purposes:

Purpose	Data Used
Account registration and management	Identity, contact, and login data
Identity verification (KYC) and age verification (21+)	Identity data, government ID, date of birth
Processing deposits, withdrawals, and bets	Financial and transaction data
Anti-money laundering and fraud prevention	Identity, financial, and technical data
Customer support and dispute resolution	Identity, contact, and communications data
Responsible gaming monitoring and tools	Responsible gaming and transaction data
Platform improvement and analytics	Technical and usage data (anonymised where possible)
Marketing communications (with consent)	Contact data and marketing preferences
Regulatory reporting and compliance	Identity, financial, and transaction data
Security monitoring and access control	Technical data and login records

pphpark will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

6. Legal Basis for Processing

pphpark processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and game operation.
• Legal obligation: Processing required to comply with Philippine law, including anti-money laundering regulations, PAGCOR licensing requirements, and tax obligations.
• Legitimate interests: Processing necessary for pphpark's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including for marketing communications and certain optional data collection. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Data

pphpark does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary and for the purposes described in this Policy:

7.1 Service Providers

pphpark engages trusted third-party service providers to assist in operating the Platform, including KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), cloud hosting providers, customer support platform providers, and analytics service providers. These providers are contractually bound to process your data only on pphpark's instructions and in accordance with applicable privacy law.

7.2 Regulatory and Law Enforcement Authorities

pphpark may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, Philippine law enforcement agencies, or other competent authorities where required by law, court order, or regulatory direction. pphpark will notify you of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of pphpark's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Policy that result from it.

7.4 With Your Consent

pphpark may share your data with other third parties where you have given your explicit consent to such sharing, for example in connection with a specific promotion or partnership programme.

8. Cookies & Tracking Technologies

pphpark uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and understand how you use the Platform.

8.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to provide a more personalised experience.
• Analytics cookies: Help us understand how players use the Platform so we can improve performance and user experience. Data collected is aggregated and anonymised where possible.
• Marketing cookies: Used to deliver relevant promotional content to you on the pphpark Platform, based on your activity and preferences. These are only set with your consent.

8.2 Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the pphpark Platform. For marketing cookies, you can also update your preferences through your pphpark account settings.

9. Data Retention

pphpark retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR regulations and anti-money laundering laws.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, in compliance with the Anti-Money Laundering Act and PAGCOR requirements.
• Customer support communications: Retained for three (3) years from the date of the interaction, or longer if the communication relates to an ongoing dispute or legal matter.
• Marketing preferences: Retained until you withdraw consent or update your preferences, plus a reasonable period to process the change.
• Technical and usage data: Retained for up to 13 months in identifiable form, after which it is anonymised or deleted.

When personal data is no longer required, pphpark will securely delete or anonymise it in accordance with industry best practices and applicable Philippine law.

10. Data Security

pphpark implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• TLS encryption for all data transmitted between your device and the pphpark Platform
• Encryption of sensitive data at rest using industry-standard algorithms
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular security assessments, penetration testing, and vulnerability scanning
• Multi-factor authentication for administrative access to systems holding personal data
• Incident response procedures for detecting, reporting, and managing personal data breaches
• Staff training on data privacy and security obligations

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pphpark will notify the National Privacy Commission and, where required, affected players in accordance with the timelines prescribed by the DPA and NPC regulations.

11. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pphpark. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15.

pphpark will respond to all data rights requests within 15 business days of receipt. In complex cases, this period may be extended by a further 15 business days, and you will be notified of the extension and the reason for it.

12. Children's Privacy

The pphpark Platform is strictly intended for individuals who are 21 years of age or older, as required under Philippine law. pphpark does not knowingly collect personal data from individuals under the age of 21. If pphpark becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended and the data will be deleted in accordance with applicable law.

If you are a parent or guardian and believe that a minor has registered for a pphpark account or provided personal data to pphpark, please contact us immediately at [email protected] so that we can take appropriate action.

13. International Data Transfers

pphpark primarily processes and stores personal data within the Philippines. In some cases, personal data may be transferred to or accessed by service providers located outside the Philippines, for example in connection with cloud hosting infrastructure or technical support services.

Where such transfers occur, pphpark ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012 and NPC guidelines. These safeguards may include contractual clauses requiring the recipient to apply equivalent data protection standards, or reliance on the recipient country's adequacy determination by the NPC.

By using the pphpark Platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.

14. Changes to This Policy

pphpark reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, pphpark will notify registered players by email and by displaying a prominent notice on the Platform prior to the changes taking effect.

The "Effective" date at the top of this Policy indicates when the current version was last updated. We encourage you to review this Policy periodically to stay informed about how pphpark protects your personal data. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how pphpark handles your personal data, please contact our Data Protection Officer through any of the following channels:

• General Privacy Enquiries: [email protected]
• Data Protection Officer: [email protected] (subject line: "Data Privacy Request")
• Responsible Gaming & Safety: [email protected]
• Live Chat: Available 24/7 on the pphpark Platform

pphpark aims to resolve all privacy-related enquiries and complaints promptly and fairly. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.