plasph Privacy Policy

1. Information We Collect

plasph collects personal information from you in several ways when you use our platform. The types of information we collect, and the purposes for which we collect them, are described in detail below. All personal data is collected only to the extent necessary to provide you with our gaming services, comply with legal and regulatory obligations, and protect the security and integrity of the plasph platform.

1.1 Information You Provide Directly

When you register for a plasph account, you are required to provide certain personal information to establish your identity and create your user profile. This information includes:

• Identification Information: Your full legal name, date of birth, gender, nationality, and government-issued identification numbers (such as passport number, driver's licence number, or other officially recognized ID) when you complete identity verification (KYC) procedures.
• Contact Information: Your email address, mobile telephone number, and residential address within the Philippines.
• Account Credentials: Your chosen username and password for accessing your plasph account.
• Financial Information: Payment method details such as GCash mobile number, PayMaya account information, bank account numbers, or credit/debit card details (which are processed securely through our payment partners and are not stored in full on plasph servers).
• Correspondence: Any information you provide when you contact plasph customer support, participate in surveys, provide feedback, or otherwise communicate with us.

1.2 Information Collected Automatically

When you access and use the plasph platform, certain technical and usage information is collected automatically through cookies, web beacons, and similar tracking technologies. This information includes:

• Device Information: The type of device you use to access plasph (smartphone, tablet, laptop, or desktop), operating system and version, browser type and version, screen resolution, and device unique identifiers.
• Connection Information: Your IP address, Internet Service Provider (ISP), geographic location (city and region level, not precise GPS coordinates), and time zone settings.
• Usage Data: Details of your activity on plasph, including pages visited, games played, bets placed, deposit and withdrawal transactions, session duration, click patterns, and navigation paths through the platform.
• Performance Data: Technical diagnostics and error logs that help plasph troubleshoot platform issues and optimize user experience.

1.3 Information from Third Parties

plasph may receive information about you from third-party service providers who assist us in operating the platform, processing payments, verifying identities, and preventing fraud. These third parties include:

• Payment Processors: GCash, PayMaya, bank networks, and payment gateway providers that confirm transaction completion and provide limited account verification data.
• Identity Verification Services: Third-party KYC service providers that verify your identity documents against government databases and watchlists to comply with anti-money laundering regulations.
• Game Providers: JILI, PG Soft, Pragmatic Play, Evolution Gaming, and other game developers that provide gameplay data, bet history, and game outcome records.

2. How We Use Your Information

plasph processes your personal information only for specific, legitimate purposes that are clearly communicated to you. The legal bases for processing your data under the Philippine Data Privacy Act include: (a) performance of our contract with you when you use plasph services; (b) compliance with legal obligations imposed on plasph by Philippine gaming regulations and anti-money laundering laws; (c) legitimate business interests in operating a secure and efficient gaming platform; and (d) your explicit consent where required.

2.1 Providing and Managing Our Services

plasph uses your personal information to:

• Create and maintain your plasph account, allowing you to access games and services
• Process deposits, withdrawals, and other financial transactions through your chosen payment methods
• Deliver game content from our partner providers (slots, live dealer games, sports betting, bingo, etc.)
• Maintain your account balance, transaction history, and gaming activity records
• Provide customer support through live chat, email, and other communication channels
• Send you important account notifications, transaction confirmations, and service updates
• Enable responsible gaming tools including deposit limits, self-exclusion, and session management features

2.2 Security, Fraud Prevention, and Compliance

plasph processes personal data to protect the platform, our users, and our business from fraud, abuse, and unlawful activity. This includes:

• Verifying your identity and age (21+ requirement) through KYC procedures before processing significant withdrawals or at our discretion
• Detecting and preventing multiple account creation, bonus abuse, collusion, and other prohibited conduct
• Monitoring transactions for patterns consistent with money laundering or financial fraud as required by Philippine anti-money laundering regulations
• Complying with legal obligations imposed by PAGCOR and other regulatory authorities
• Investigating disputes, game outcome challenges, and suspected Terms & Conditions violations
• Maintaining logs and records for the retention periods required by law

2.3 Platform Improvement and Analytics

plasph uses aggregated and anonymized data to understand how Filipino players use the platform and to make improvements. This includes:

• Analyzing which games are most popular, which features are most used, and where players encounter difficulties
• Optimizing mobile performance, page load times, and user interface design based on real usage patterns
• Identifying technical issues, bugs, and areas where the platform experience can be enhanced
• Conducting A/B testing to improve navigation, game discovery, and payment flows

When data is used for analytics purposes, plasph aggregates and anonymizes it wherever possible so that individual users cannot be identified. Personal data is only used in identifiable form for analytics when necessary to understand specific user journey issues.

2.4 Marketing Communications (With Your Consent)

If you opt in to receive promotional communications from plasph, we may use your email address and mobile number to send you information about:

• New game releases, featured slots, and live casino updates
• Bonus offers, free spin promotions, and deposit match campaigns
• VIP programme benefits and exclusive player rewards
• Tournaments, leaderboard competitions, and special events

You can withdraw your consent and unsubscribe from marketing communications at any time by clicking the "Unsubscribe" link in any promotional email or by adjusting your communication preferences in your plasph account settings. Unsubscribing from marketing emails will not affect transactional emails related to your account, deposits, withdrawals, or customer support correspondence, which we are required to send regardless of your marketing preferences.

3. How We Share Your Information

plasph does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we do share your information with carefully selected service providers and partners to the extent necessary to operate the platform, process transactions, and comply with legal obligations. All third parties with whom we share data are bound by strict confidentiality and data protection obligations.

3.1 Service Providers

plasph works with third-party companies that provide essential services including:

• Payment Processors: GCash, PayMaya, bank payment gateways, and card networks that process deposits and withdrawals on your behalf.
• Game Providers: JILI, PG Soft, Pragmatic Play, Evolution Gaming, and other developers whose games you access through plasph. These providers receive limited data necessary to deliver game content and maintain gameplay records.
• Identity Verification Providers: KYC service providers that verify your identity documents and conduct anti-money laundering checks as required by Philippine regulations.
• Customer Support Tools: Live chat platforms and helpdesk software that enable our support team to respond to your enquiries efficiently.
• Technical Infrastructure: Cloud hosting providers, content delivery networks (CDNs), and cybersecurity services that keep the plasph platform fast, reliable, and secure.

All service providers are contractually obligated to process your data only as instructed by plasph, to implement appropriate security measures, and to use the data solely for the purpose of providing their specified service.

3.2 Legal and Regulatory Disclosures

plasph may disclose your personal information to government authorities, regulators, and law enforcement agencies when required by law or when we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or regulatory directive from PAGCOR or other Philippine government entities
• Enforce our Terms & Conditions and investigate potential breaches
• Protect the rights, property, or safety of plasph, our users, or the public
• Detect, prevent, or address fraud, security vulnerabilities, or illegal activity
• Report suspicious transactions as required under the Philippine Anti-Money Laundering Act

3.3 Business Transfers

In the event that plasph undergoes a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity or successor organization as part of the business transaction. In such circumstances, plasph will provide notice to affected users and ensure that the receiving party agrees to treat your personal data in accordance with this Privacy Policy and applicable data protection laws.

4. Data Security

plasph takes the security of your personal information seriously and implements industry-standard technical and organizational measures to protect against unauthorized access, alteration, disclosure, or destruction of data. Our security measures include:

• Encryption: All data transmitted between your device and plasph servers is encrypted using 256-bit SSL/TLS encryption. Sensitive data stored on our servers (such as passwords) is encrypted using advanced cryptographic algorithms.
• Access Controls: Access to personal data is restricted to plasph employees and service providers who require it to perform their specific job functions. All personnel with data access are bound by confidentiality obligations and receive regular data protection training.
• Secure Infrastructure: plasph uses reputable cloud hosting providers with ISO 27001 certification and maintains firewalls, intrusion detection systems, and regular security audi ts to identify and address vulnerabilities.
• Payment Security: Financial transaction data is processed through PCI-DSS compliant payment gateways. plasph does not store full card numbers, CVV codes, or complete banking credentials on our servers.
• Two-Factor Authentication: plasph offers optional two-factor authentication (2FA) for account login, which we strongly encourage all users to enable for enhanced account security.
• Session Management: Inactive user sessions are automatically terminated after a defined period to prevent unauthorized access from shared or unattended devices.

While plasph employs robust security practices, no system is completely immune to security risks. In the event of a data breach that is likely to result in risk to your rights and freedoms, plasph will notify affected users and the National Privacy Commission (NPC) in accordance with the timelines and requirements specified in the Philippine Data Privacy Act and its implementing rules.

5. Cookies and Tracking Technologies

5.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. plasph uses cookies and similar technologies such as web beacons, pixel tags, and local storage to operate the platform, remember your preferences, analyze usage patterns, and support security functions. Cookies set by plasph remain on your device for the duration of your browsing session (session cookies) or for a defined period thereafter (persistent cookies).

5.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include cookies that authenticate your login session, remember your language preference, and maintain your account security state. You cannot opt out of strictly necessary cookies while continuing to use plasph.
• Performance and Analytics Cookies: Help us understand how players use plasph by collecting anonymized usage data such as pages visited, time on site, and navigation paths. This data is used to improve platform performance and user experience.
• Functional Cookies: Enable the platform to remember your preferences and settings, such as your preferred currency display, notification settings, and game history view mode.
• Responsible Gaming Cookies: Store your responsible gaming settings such as deposit limits, session reminders, and cooling-off period status to ensure these protections remain active across your browsing sessions.

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling certain categories of cookies may affect the functionality and performance of the plasph platform.

6. Data Retention

plasph retains your personal information for as long as your account remains active and for a period thereafter as required by applicable law and our legitimate business interests. The following retention principles apply:

• Active Account Data: Personal information associated with your active plasph account is retained for the duration of your account's existence plus a minimum of five (5) years following account closure, as required by Philippine anti-money laundering regulations.
• Transaction Records: Financial transaction records, including deposits, withdrawals, and bet history, are retained for a minimum of five (5) years as required by the Anti-Money Laundering Act of the Philippines (Republic Act No. 9160, as amended) and applicable PAGCOR directives.
• KYC and Identity Verification Documents: Identity verification documents and associated records are retained for a minimum of five (5) years after account closure or the completion of the relevant transaction, in line with Philippine financial regulations.
• Customer Support Correspondence: Records of customer support interactions, complaints, and dispute resolution proceedings are retained for three (3) years from the date of the final resolution of the matter.
• Marketing Data: If you have withdrawn your consent to marketing communications, plasph will retain a record of your opt-out preference to ensure we do not inadvertently contact you again in the future.

When data is no longer required for the purpose for which it was collected and the applicable retention period has expired, plasph will securely delete or anonymize the data so that it can no longer be linked back to you as an individual.

7. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information held by plasph:

• Right to Be Informed: You have the right to know what personal data plasph collects about you, why it is collected, how it is processed, and with whom it is shared. This Privacy Policy fulfils that obligation.
• Right to Access: You may request a copy of the personal data plasph holds about you. We will provide this information within 30 calendar days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it. You can update most account information directly through your plasph account settings.
• Right to Erasure: You may request that plasph delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (where processing was based on consent), or where you object to processing and there are no overriding legitimate grounds. Note that this right is subject to plasph's legal obligations to retain certain data under Philippine law.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time without providing a reason. You may also object to other processing activities on grounds relating to your particular situation.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider, where technically feasible.
• Right to Lodge a Complaint: If you believe that plasph has processed your personal data in violation of the Philippine Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact plasph's Data Privacy Officer by emailing [email protected] with the subject line "Data Privacy Request." Please include your full name, registered email address, and a description of your request. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days, or notify you if additional time is required for complex requests.

8. Children's Privacy

plasph's gaming services are strictly restricted to individuals aged 21 years and above in the Philippines. We do not knowingly collect, use, or store personal information from any person under the age of 21. Age verification is conducted as part of the registration and KYC process to enforce this requirement.

If plasph becomes aware that personal data has been collected from a person under the age of 21 without parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered for a plasph account, please notify us immediately at [email protected] so we can take appropriate action.

9. International Data Transfers

plasph's primary operations and data processing infrastructure are based in the Asia-Pacific region. However, some of our third-party service providers — including cloud hosting providers, game developers, and identity verification services — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, plasph ensures that appropriate safeguards are in place to protect your data in accordance with the Philippine Data Privacy Act. These safeguards include contractual clauses requiring overseas recipients to maintain standards of data protection equivalent to those required under Philippine law. plasph will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing the additional protections required by the NPC.

10. Links to Third-Party Content

The plasph platform is an integrated gaming environment and does not contain links to external third-party websites for browsing purposes. However, our games are developed and operated by third-party providers (such as JILI, PG Soft, Evolution Gaming, and others), and those providers may have their own privacy policies governing how they process gameplay data. plasph is not responsible for the privacy practices of its game providers beyond the contractual obligations we impose on them as data processors. We recommend reviewing the privacy notices of individual game providers if you have specific questions about how your gameplay data is handled at the provider level.

11. Changes to This Privacy Policy

plasph may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, legal requirements, or regulatory guidance. When material changes are made to this Privacy Policy, we will notify you by posting a prominent notice on the plasph platform and, where appropriate, sending a notification to your registered email address no fewer than 7 calendar days before the changes take effect.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how plasph protects and handles your personal information. Your continued use of plasph after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

12. Data Privacy Officer and Contact Details

If you have any questions, concerns, or requests regarding this Privacy Policy or plasph's data processing practices, you may contact our Data Privacy Officer through the following channel:

• Email: [email protected] — Subject line: "Data Privacy Enquiry"
• Live Chat: Available 24/7 from within your logged-in plasph account dashboard
• Response Commitment: All data privacy enquiries are acknowledged within 5 business days and substantively addressed within 30 calendar days

You also have the right to escalate unresolved privacy concerns to the National Privacy Commission of the Philippines at any time. Information about how to file a complaint with the NPC is publicly available through official Philippine government channels.