ppgames Privacy Policy

1. Introduction

ppgames ("we," "us," "our") is committed to protecting the privacy and personal data of all players who use our PAGCOR-licensed online gaming platform. We understand that Filipino players entrust us with sensitive information — including financial data, identity documents, and gaming history — and we take that responsibility seriously.

This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of your personal data. It applies to all services offered through the ppgames platform and any related communications we send to you. It should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

By creating a ppgames account or by continuing to use the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not consent, you must discontinue use of the Platform and request account closure through our support team.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations, ppgames is the Personal Information Controller responsible for your personal data processed in connection with the ppgames platform.

ppgames operates under a licence issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the oversight of both PAGCOR and the National Privacy Commission (NPC) of the Philippines. Our Data Protection Officer (DPO) can be contacted at the address set out in Section 14 of this Policy.

3. Personal Data We Collect

ppgames collects the following categories of personal data about you:

ppgames does not collect special categories of sensitive personal data (e.g., health data, political opinions, religious beliefs) except where such data is incidentally contained in identity documents submitted for KYC verification. Such data is processed solely for the purpose of identity verification and is not used for any other purpose.

4. How We Collect Your Data

ppgames collects your personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to promotions.
• Automated technologies: Technical and usage data collected automatically as you navigate the Platform, via cookies, server logs, and similar tracking technologies (see Section 6).
• Third-party payment providers: Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, and other payment processors when you make a deposit or withdrawal.
• Identity verification services: Data returned by KYC verification service providers during identity document authentication.
• Regulatory sources: Data received from PAGCOR or other regulatory bodies in the course of our compliance obligations.

5. Legal Basis and Purposes of Processing

ppgames processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to provide you with the ppgames service, including account management, game access, deposit and withdrawal processing, and bonus administration.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and other applicable Philippine laws and regulations.
• Legitimate interests: Processing for fraud detection and prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time by contacting ppgames support.

ppgames does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances.

6. Cookies & Tracking Technologies

ppgames uses cookies and similar tracking technologies to operate the Platform, maintain your login session, remember your preferences, analyze usage patterns, and detect fraudulent activity. The following categories of cookies are used:

• Strictly necessary cookies: Essential for Platform operation, including session authentication and security tokens. Cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and recently played games.
• Analytical cookies: Collect anonymised data about how players use the Platform to help ppgames improve performance and user experience. Data is aggregated and does not identify individual players.
• Security cookies: Used to detect and prevent fraudulent account access, bot activity, and other security threats.

You may manage non-essential cookies through your browser settings. Disabling certain cookies may affect Platform functionality. ppgames does not use third-party advertising cookies or behavioral targeting cookies.

7. Data Sharing & Disclosure

ppgames shares your personal data only with the following categories of recipients and only to the extent necessary for the stated purpose:

• Payment processors: GCash, Maya, and banking partners receive only the data necessary to process your specific transaction.
• KYC and identity verification providers: Identity document data is shared with certified verification service providers for the purpose of PAGCOR-required player authentication.
• Game software providers: Game session data (player ID, bet amounts, outcomes) is shared with licensed game studios to deliver game services. Providers are contractually prohibited from using this data for any purpose other than game delivery.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where disclosure is required by law or valid legal process.
• Professional advisers: Legal, accounting, and audit firms under strict confidentiality obligations.
• Fraud prevention services: Anonymised or pseudonymised data shared with industry fraud prevention networks to protect all players.

8. International Data Transfers

Some of our game software providers and technical service providers operate data processing infrastructure located outside the Philippines. Where personal data is transferred to a jurisdiction outside the Philippines, ppgames ensures that such transfers are subject to adequate safeguards, including:

• Data processing agreements incorporating the standard contractual clauses approved by the National Privacy Commission;
• Transfers to jurisdictions recognised by the NPC as providing adequate levels of data protection; or
• Other transfer mechanisms compliant with the Data Privacy Act of 2012 and its implementing rules.

You may request details of the specific safeguards applied to any international transfer of your data by contacting the ppgames Data Protection Officer (see Section 14).

9. Data Retention

ppgames retains your personal data for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Financial transaction records: Retained for a minimum of five (5) years following each transaction, as required by applicable financial regulations.
• Gaming activity records: Retained for a minimum of three (3) years following the relevant activity.
• Customer support communications: Retained for three (3) years following the resolution of the relevant support interaction.
• Technical and log data: Typically retained for twelve (12) months unless retention is required for an ongoing security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ppgames' data destruction procedures.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by ppgames:

• Right to be informed: The right to know how your personal data is being collected and processed — which is the purpose of this Privacy Policy.
• Right of access: The right to obtain confirmation that ppgames holds personal data about you and to receive a copy of that data.
• Right to rectification: The right to have inaccurate personal data corrected and incomplete personal data completed.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding retention obligations under PAGCOR and AML regulations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format, where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact the ppgames Data Protection Officer using the contact details in Section 14. ppgames will respond to all data subject requests within thirty (30) calendar days of receipt.

11. Security Measures

ppgames implements technical and organisational security measures appropriate to the risk associated with the personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ppgames platform;
• Encryption of sensitive data at rest, including financial account details and identity documents;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• Multi-factor authentication requirements for all ppgames internal systems that access player data;
• Formal data breach response procedures, including NPC notification within seventy-two (72) hours of discovery of a breach affecting your rights and freedoms.

While ppgames takes all reasonable steps to protect your personal data, no internet transmission is 100% secure. You are responsible for maintaining the confidentiality of your ppgames login credentials. If you suspect unauthorised access to your account, contact ppgames support immediately.

12. Minors

The ppgames platform is strictly intended for individuals who are at least 21 years of age, as required by PAGCOR regulations. ppgames does not knowingly collect personal data from persons under the age of 21.

If ppgames becomes aware that personal data has been collected from an individual under the age of 21, the associated account will be immediately suspended, the data will be promptly deleted (subject only to regulatory retention obligations), and any deposited funds will be returned to the originating payment method after verification.

If you believe that a minor has created a ppgames account, please notify us immediately via [email protected] (plain text — not a link) so that we can take appropriate action.

13. Changes to This Privacy Policy

ppgames reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. Where changes are material, ppgames will provide advance notice via email to your registered address or via a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is shown at the top of this Policy. We encourage you to review this Policy periodically. Your continued use of the ppgames platform following notification of any change constitutes your acceptance of the updated Privacy Policy.

14. Contact & Data Protection Officer

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or wish to raise a data protection concern, please contact the ppgames Data Protection Officer:

• Live Chat: Available 24/7 through the ppgames platform
• Email: [email protected] (plain text — not a clickable link)

ppgames aims to acknowledge all Privacy Policy enquiries within three (3) business days and to resolve data subject requests within thirty (30) calendar days of receipt of all required information. If you are not satisfied with ppgames' response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.