- 1. Introduction
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. Purposes & Legal Basis
- 6. Sharing Your Data
- 7. International Transfers
- 8. Data Retention
- 9. Your Rights
- 10. Cookies & Tracking
- 11. Children's Privacy
- 12. Security Measures
- 13. Third-Party Links
- 14. Policy Updates
- 15. Contact & Complaints
Introduction
philplus ("philplus", "we", "us", "our") operates the online gaming platform accessible at philplus.app and related services (collectively, the "Platform"). This Privacy Policy describes how philplus collects, uses, discloses, stores, and protects the personal data of individuals who register for or use the philplus Platform ("you", "Member", "user").
This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its implementing rules and regulations issued by the National Privacy Commission ("NPC"). It applies to all personal data processed by philplus in connection with the operation of the Platform, regardless of where you are located within the Philippines.
By registering a philplus account, accessing the Platform, or submitting any personal information to philplus, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms of this Policy, you must not use the philplus Platform.
Note: This Privacy Policy should be read together with the philplus Terms & Conditions, which are incorporated by reference. In the event of any inconsistency between the two documents regarding privacy matters, this Privacy Policy shall prevail.
Data Controller
philplus is the personal information controller ("PIC") with respect to all personal data collected through the Platform. As the PIC, philplus is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing complies with the Data Privacy Act of 2012 and all applicable regulations.
For all data privacy inquiries, data subject rights requests, and complaints, you may contact the philplus Data Protection Officer ("DPO") using the contact details provided in Section 15 of this Policy. philplus has appointed a DPO in accordance with NPC requirements.
Personal Data We Collect
philplus collects only the personal data that is necessary to deliver and operate the Platform securely and in compliance with applicable law. The categories of personal data we collect are as follows:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number | Registration, KYC verification |
| Contact Data | Philippine mobile number, email address, city/province of residence | Registration, account updates |
| Financial Data | GCash number, bank account details (BDO, BPI, Metrobank), transaction history | Deposit, withdrawal, KYC |
| Technical Data | IP address, device type, browser type, operating system, session tokens | Every platform session |
| Usage Data | Games played, bets placed, session duration, pages visited, features used | During active sessions |
| Communications Data | Support chat transcripts, email correspondence, complaint records | When contacting support |
| Verification Documents | Copies of government-issued ID (PhilSys, passport, driver's license, SSS/GSIS ID), selfie verification images | KYC process |
philplus does not collect sensitive personal information as defined under Section 3(l) of the DPA (such as health data, sexual orientation, or political affiliation) unless specifically required by law or regulatory obligation and you have given your explicit consent.
How We Collect Your Data
philplus collects your personal data through the following means:
- Direct collection: Information you provide when registering a philplus account, completing KYC verification, submitting a deposit or withdrawal, contacting customer support, or responding to a promotion.
- Automated collection: Technical and usage data collected automatically through cookies, server logs, and session tracking technologies when you access and use the philplus Platform.
- Third-party sources: Identity and financial verification data received from payment processors (e.g., GCash, PayMaya, BDO, BPI), identity verification service providers, and fraud prevention services as part of the KYC and AML compliance process.
Purposes & Legal Basis for Processing
philplus processes your personal data for the following purposes, each supported by an applicable legal basis under the Data Privacy Act of 2012:
5.1 Account Registration & Platform Access
Purpose: To create and manage your philplus account, authenticate your identity at login, and deliver the core gaming services. Legal basis: Performance of contract (your agreement to the philplus Terms & Conditions).
5.2 Identity Verification (KYC) & Age Verification
Purpose: To verify your identity and confirm that you are at least 21 years of age, in compliance with PAGCOR requirements and the philplus Terms & Conditions. Legal basis: Compliance with a legal obligation; performance of contract.
5.3 Payments, Deposits & Withdrawals
Purpose: To process your GCash, PayMaya, or bank deposits and withdrawals, maintain your peso wallet balance, and generate transaction records. Legal basis: Performance of contract; compliance with legal obligation (AML/CFT record-keeping).
5.4 Fraud Prevention & Anti-Money Laundering
Purpose: To detect, investigate, and prevent fraudulent transactions, bonus abuse, collusion, money laundering, and other prohibited conduct. Legal basis: Compliance with legal obligation (Republic Act No. 9160, Anti-Money Laundering Act); legitimate interests of philplus in protecting the integrity of the Platform.
5.5 Customer Support
Purpose: To respond to your support inquiries, complaints, and feedback, and to maintain records of such communications for quality assurance. Legal basis: Performance of contract; legitimate interests.
5.6 Responsible Gaming
Purpose: To monitor gaming patterns for signs of problem gambling, implement self-exclusion and deposit limits, and provide responsible gaming tools as required by applicable regulations. Legal basis: Compliance with legal obligation; protection of vital interests of the data subject.
5.7 Marketing & Promotions
Purpose: To send you information about philplus promotions, bonuses, and new features that may be relevant to your gaming activity. Legal basis: Your consent, which you may withdraw at any time by updating your communication preferences in your philplus account settings.
5.8 Platform Improvement & Analytics
Purpose: To analyse aggregated usage data to improve Platform performance, game selection, and user experience. Where possible, philplus uses anonymised or pseudonymised data for analytics. Legal basis: Legitimate interests of philplus.
Sharing Your Personal Data
philplus does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:
- Payment processors: GCash, Maya (PayMaya), BDO, BPI, Metrobank, Coins.ph, and other payment service providers require your payment details to process transactions. These providers are bound by their own privacy policies and applicable Philippine payment regulations.
- Identity verification providers: Third-party KYC and identity verification services that process your government ID and biometric data solely to verify your identity for account opening and withdrawal processing.
- Game providers: Where technically required, limited technical identifiers may be shared with certified game providers (e.g., JILI, Pragmatic Play, PG Soft) to deliver game content and maintain game fairness records. No personally identifiable information beyond technical session data is shared.
- Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government agencies as required by law, court order, or regulatory instruction.
- Professional advisers: Legal counsel, auditors, and compliance consultants bound by professional confidentiality obligations.
- Fraud prevention and security services: Third-party providers engaged to detect suspicious activity, prevent fraud, and maintain Platform security.
All third-party service providers with access to your personal data are required by philplus to implement appropriate data protection safeguards and to process your data only on documented instructions from philplus and in accordance with applicable law.
International Data Transfers
philplus's primary data processing infrastructure is located within the Philippines. In certain circumstances — for example, where game providers operate servers outside the Philippines, or where cloud service providers have data centers in other countries — your data may be transferred to and processed in jurisdictions outside the Philippines.
Where such transfers occur, philplus ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. These safeguards may include contractual data protection clauses, NPC-approved mechanisms, or transfers to countries recognised as providing adequate data protection.
Your right: You may request information about the specific safeguards applied to international transfers of your personal data by contacting the philplus Data Protection Officer at the address in Section 15.
Data Retention
philplus retains your personal data for the period necessary to fulfill the purposes set out in this Policy, unless a longer retention period is required by Philippine law or regulatory obligation. Specific retention periods include:
- Account and identity data: Retained for the lifetime of your philplus account plus five (5) years following account closure, in accordance with AML record-keeping obligations under RA 9160.
- Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC and BIR requirements.
- KYC documents: Retained for five (5) years following account closure or the most recent KYC renewal, whichever is later.
- Customer support communications: Retained for two (2) years from the date of the last relevant interaction.
- Marketing consent records: Retained for the duration of your active marketing consent plus two (2) years.
Upon expiry of the applicable retention period, philplus will securely delete or anonymise your personal data in accordance with its data disposal procedures.
Your Data Subject Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by philplus. To exercise any of these rights, contact the philplus Data Protection Officer as described in Section 15. philplus will respond to all verified requests within thirty (30) calendar days.
Right to Be Informed
The right to be notified of how your personal data is collected, processed, and used by philplus before it is processed.
Right of Access
The right to obtain a copy of your personal data held by philplus and information about how it is being processed.
Right to Rectification
The right to have inaccurate or incomplete personal data about you corrected without unreasonable delay.
Right to Erasure
The right to request deletion of your personal data where it is no longer necessary for the stated purpose, subject to philplus's legal retention obligations.
Right to Object
The right to object to processing of your data for direct marketing, profiling, or processing based on legitimate interests.
Right to Data Portability
The right to receive a copy of your personal data in a structured, machine-readable format and to request its transmission to another controller.
Right to Damages
The right to seek compensation for damages sustained due to inaccurate, incomplete, outdated, false, or unlawfully obtained personal data held by philplus.
Right to File a Complaint
The right to file a complaint with the Philippine National Privacy Commission if you believe philplus has violated your data privacy rights.
How to Exercise Your Rights: Send a written request identifying yourself (with a copy of valid Philippine ID) and specifying the right you wish to exercise to the philplus DPO at [email protected]. philplus will verify your identity before processing any data subject rights request to protect your account security.
Cookies & Tracking Technologies
philplus uses cookies and similar tracking technologies (collectively, "cookies") to operate the Platform and provide you with a secure, functional experience. Cookies are small text files stored on your device when you visit the philplus Platform.
10.1 Types of Cookies We Use
- Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and anti-fraud cookies. These cannot be disabled without affecting Platform functionality.
- Functional Cookies: Used to remember your preferences (e.g., language settings, preferred game lobby view) and to personalise your philplus experience across sessions.
- Analytics Cookies: Used to collect aggregated, anonymised data about Platform usage — pages visited, session duration, game preferences — to help philplus improve the Platform. These are used only with your consent.
- Security Cookies: Used to detect suspicious login attempts, fraudulent activity, and bot access. These are strictly necessary and cannot be opt-out.
10.2 Managing Cookies
You may control non-essential cookies through your browser settings. Most browsers allow you to block, delete, or restrict cookies through their privacy or settings menu. Note that disabling strictly necessary cookies may impair your ability to log in to philplus or use key Platform features. Consult your browser's help documentation for instructions specific to your browser and device.
Children's Privacy
The philplus Platform is strictly restricted to persons who are twenty-one (21) years of age or older. philplus does not knowingly collect, process, or retain personal data from individuals under 21. Age verification is required as part of the account registration process.
If philplus discovers that personal data has been collected from a person under the age of 21 without verified parental or guardian consent, such data will be promptly deleted and the associated account will be closed. If you believe a minor has registered a philplus account, please contact the philplus DPO immediately at the address in Section 15.
Age Restriction: All real-money gaming on philplus is restricted to players aged 21 and over, in accordance with PAGCOR regulations. Please visit the philplus Responsible Gaming page for further information on player protection measures.
Security Measures
philplus implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the philplus Platform
- Encrypted storage of passwords and sensitive credential data using industry-standard hashing algorithms
- Access controls limiting internal access to personal data to authorised personnel only, on a need-to-know basis
- Two-factor authentication (2FA) available on all philplus member accounts
- Regular security audits, penetration testing, and vulnerability assessments
- Incident response procedures, including breach notification protocols compliant with NPC requirements
Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, philplus will notify you and the National Privacy Commission in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-03.
Third-Party Links & Services
The philplus Platform does not contain links to external third-party websites for advertising purposes. Where references to payment providers (GCash, BDO, BPI, etc.) or game providers appear, these are operational integrations rather than outbound links to third-party sites.
philplus is not responsible for the privacy practices of third-party payment processors, game providers, or other service partners. Each third-party provider operates under its own privacy policy. philplus selects service partners that demonstrate appropriate data protection standards and requires contractual data protection commitments from all processors.
Updates to This Privacy Policy
philplus reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal or regulatory requirements, or Platform features. The revised Policy will be published on this page with an updated Effective Date.
Where changes are material — meaning they significantly affect your rights or how we use your data — philplus will provide advance notice to registered Members via your registered email address or through an in-Platform notification, at least seven (7) calendar days before the revised Policy takes effect.
Your continued use of the philplus Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must discontinue use of the Platform and may request account closure.
Contact & Complaints
For all privacy-related inquiries, data subject rights requests, and complaints regarding philplus's handling of your personal data, please contact the philplus Data Protection Officer:
Data Protection Officer — philplus
Email: [email protected]
Subject line: "Data Privacy Request — [Your Name]"
Please include a copy of a valid Philippine government-issued ID with your request so that philplus can verify your identity before processing the request. philplus will acknowledge receipt within three (3) business days and will respond fully within thirty (30) calendar days of verified receipt.
National Privacy Commission
If you are not satisfied with philplus's response to your privacy complaint, you have the right to file a complaint with the National Privacy Commission of the Philippines. Information about the NPC complaint process is available on the NPC's official website. philplus encourages Members to contact us first so that we have the opportunity to resolve any concern directly before escalation.