py2ph Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how py2ph ("we," "us," "our," or the "Company"), a gaming platform operated under license from the Philippine Amusement and Gaming Corporation (PAGCOR), collects, uses, processes, stores, discloses, and protects personal information obtained from users ("you," "your," or "User") of our website at https://py2ph.cam (the "Website"), mobile applications, and related gaming services (collectively, the "Services").

By accessing or using py2ph Services, creating an account, or providing us with your personal information, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. This Policy should be read in conjunction with our Terms and Conditions, which govern your use of py2ph Services.

py2ph complies with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable data protection laws of the Republic of the Philippines. We implement appropriate technical, organizational, and physical security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction.

2. Data Controller and Contact Information

py2ph is the data controller responsible for the processing of your personal information. For any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, you may contact our Data Protection Officer through the following channels:

• Data Protection Officer Email: [email protected]
• Privacy Inquiries: [email protected]
• Customer Support: [email protected]
• 24/7 Live Chat: Available through your py2ph account dashboard

We will respond to privacy-related inquiries within fifteen (15) business days of receipt or as otherwise required by applicable law.

3. Personal Information We Collect

3.1 Information You Provide Directly

When you register for a py2ph account or use our Services, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full name, date of birth, nationality, government-issued identification number (e.g., passport, driver's license, or UMID number), and copies of identification documents for verification purposes;
• Contact Information: Email address, mobile phone number, residential address, and postal code;
• Account Credentials: Username, password (encrypted and not accessible to py2ph staff), and security questions;
• Financial Information: Payment method details (GCash number, Maya account, bank account information, cryptocurrency wallet addresses), transaction history, deposit and withdrawal records;
• Gaming Activity: Betting history, game preferences, wagering patterns, bonus utilization, winnings and losses, session duration;
• Communications: Content of messages sent to customer support, feedback, complaints, and any other correspondence with py2ph;
• Verification Documents: Proof of identity (ID cards), proof of address (utility bills, bank statements), and source of funds documentation for anti-money laundering (AML) compliance.

3.2 Information Collected Automatically

When you access or use py2ph Services, we automatically collect certain technical and usage information through cookies, web beacons, and similar technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers, mobile network information;
• Usage Data: IP address, geographic location (country, region, city), pages visited, time spent on pages, clickstream data, referral source, access times and dates;
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and analytics tags to enhance user experience, analyze platform performance, and prevent fraud;
• Geolocation Data: Precise or approximate geographic location obtained through GPS, Wi-Fi, IP address, or mobile network triangulation to verify that you are physically located within the Philippines as required by PAGCOR regulations.

3.3 Information from Third Parties

py2ph may receive personal information about you from third-party sources, including:

• Payment Processors: GCash, Maya, banks, and cryptocurrency payment gateways that process your deposits and withdrawals;
• Identity Verification Services: Third-party identity verification and KYC (Know Your Customer) service providers;
• Fraud Prevention Services: Anti-fraud and security service providers that help detect suspicious activity;
• Affiliate Partners: Referral sources and marketing partners who refer you to py2ph;
• Regulatory Authorities: PAGCOR and other government agencies that provide information relevant to our compliance obligations.

4. How We Use Your Personal Information

py2ph processes your personal information for the following lawful purposes:

4.1 Provision of Services

• Creating, managing, and maintaining your py2ph gaming account;
• Processing deposits, withdrawals, and other financial transactions;
• Providing access to gaming content, including bingo, slots, live casino, and other games;
• Processing bets, calculating winnings, and distributing payouts;
• Administering bonuses, promotions, and loyalty programs;
• Providing customer support and responding to inquiries;
• Communicating with you regarding your account, transactions, and service updates.

4.2 Legal and Regulatory Compliance

• Verifying your identity, age (21+ requirement), and eligibility to use py2ph Services;
• Complying with PAGCOR licensing requirements and gaming regulations;
• Preventing and detecting fraud, money laundering, terrorist financing, and other illegal activities;
• Complying with anti-money laundering (AML) and counter-terrorist financing (CTF) obligations;
• Maintaining records required by law and providing information to regulatory authorities upon request;
• Enforcing our Terms and Conditions and other legal agreements;
• Responding to legal process, court orders, and government requests.

4.3 Security and Fraud Prevention

• Monitoring for suspicious account activity, irregular betting patterns, and potential fraud;
• Protecting the integrity of games and preventing cheating, collusion, or exploitation;
• Implementing security measures to protect your account and personal information;
• Conducting internal investigations of policy violations or suspected illegal activity;
• Verifying geolocation to ensure compliance with jurisdiction restrictions.

4.4 Business Operations and Improvement

• Analyzing usage patterns and gaming behavior to improve our Services;
• Conducting market research and data analytics to enhance user experience;
• Developing new products, features, and gaming content;
• Testing and troubleshooting technical issues;
• Generating aggregate, anonymized statistics for business intelligence purposes.

4.5 Marketing and Communications

• Sending promotional offers, bonuses, and marketing communications (with your consent);
• Personalizing content, recommendations, and advertising based on your preferences;
• Conducting customer satisfaction surveys and soliciting feedback;
• Informing you about changes to our Services, policies, or terms.

4.6 Responsible Gaming

• Implementing responsible gaming tools such as deposit limits, loss limits, and self-exclusion;
• Monitoring gaming behavior for signs of problem gambling;
• Providing access to responsible gaming resources and support services;
• Enforcing cooling-off periods and account restrictions when necessary.

5. Legal Basis for Processing

py2ph processes your personal information based on the following legal grounds under the Data Privacy Act of 2012:

• Consent: You have given explicit consent for the processing of your personal information for specific purposes, such as receiving marketing communications or using optional features;
• Contractual Necessity: Processing is necessary to perform our contract with you, including providing access to gaming services, processing transactions, and fulfilling our obligations under the Terms and Conditions;
• Legal Obligation: Processing is required to comply with legal or regulatory obligations, including PAGCOR licensing requirements, AML/CTF laws, tax regulations, and data retention requirements;
• Legitimate Interests: Processing is necessary for py2ph's legitimate business interests, such as fraud prevention, security, improving our Services, and conducting analytics, provided that such interests are not overridden by your fundamental rights and freedoms;
• Vital Interests: Processing is necessary to protect the vital interests of you or another person, such as preventing harm or responding to emergencies.

6. Disclosure and Sharing of Personal Information

py2ph does not sell, rent, or trade your personal information to third parties. However, we may share your personal information with the following categories of recipients for the purposes described in this Privacy Policy:

6.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions and provide services on our behalf, including:

• Payment processors and financial institutions (GCash, Maya, banks, cryptocurrency exchanges);
• Identity verification and KYC service providers;
• Fraud detection and prevention services;
• Cloud hosting and data storage providers;
• Customer support and communication platforms;
• Marketing and analytics service providers;
• Gaming platform and software providers;
• IT security and infrastructure services.

These service providers have access to personal information only as necessary to perform their functions and are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.

6.2 Regulatory Authorities and Law Enforcement

py2ph may disclose your personal information to regulatory authorities, law enforcement agencies, government bodies, and courts when:

• Required by PAGCOR or other gaming regulators for licensing and compliance purposes;
• Compelled by legal process, court order, subpoena, or government request;
• Necessary to comply with AML/CTF reporting obligations;
• Required to investigate suspected illegal activity, fraud, or violations of our Terms and Conditions;
• Necessary to protect the rights, property, or safety of py2ph, our users, or the public.

6.3 Affiliates and Corporate Transactions

We may share personal information with our parent company, subsidiaries, and affiliates for business operations, support services, and compliance purposes. In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy, your personal information may be transferred to the successor entity, subject to this Privacy Policy or an equivalent privacy policy.

6.4 With Your Consent

We may disclose your personal information to other third parties when you have given explicit consent for such disclosure.

7. International Data Transfers

py2ph primarily processes and stores your personal information within the Philippines. However, some of our service providers and business partners may be located in other countries. When we transfer personal information outside the Philippines, we implement appropriate safeguards to ensure that your information receives an adequate level of protection, including:

• Entering into data processing agreements incorporating standard contractual clauses;
• Ensuring that the recipient country has been recognized as providing adequate data protection;
• Obtaining your explicit consent for international transfers when required by law.

By using py2ph Services, you acknowledge and consent to the transfer of your personal information to countries outside the Philippines for the purposes described in this Privacy Policy, subject to the safeguards outlined above.

8. Data Retention

py2ph retains your personal information for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, regulatory, accounting, and reporting obligations. Retention periods vary depending on the type of information and the purpose for which it is processed:

• Account Information: Retained for the duration of your active account plus a minimum of five (5) years after account closure as required by PAGCOR and AML regulations;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction or as otherwise required by law;
• Identity Verification Documents: Retained for the duration required by law or regulatory requirements, typically five (5) to seven (7) years;
• Communications: Retained for as long as necessary to address your inquiries and for a reasonable period thereafter for quality assurance and legal purposes;
• Marketing Data: Retained until you withdraw consent or for a reasonable period of inactivity;
• Technical and Usage Data: Retained for shorter periods as necessary for analytics, security, and system optimization, typically twelve (12) to twenty-four (24) months.

After the applicable retention period expires, py2ph will securely delete or anonymize your personal information in accordance with our data retention and deletion policies, unless continued retention is required by law or for the establishment, exercise, or defense of legal claims.

9. Data Security

py2ph implements comprehensive technical, organizational, and physical security measures to protect your personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction. Our security measures include:

• Encryption: All sensitive data, including passwords and financial information, is encrypted using industry-standard SSL/TLS encryption during transmission and at rest;
• Access Controls: Strict access controls and authentication mechanisms limit access to personal information to authorized personnel only on a need-to-know basis;
• Security Monitoring: Continuous monitoring of systems for suspicious activity, intrusion attempts, and security vulnerabilities;
• Regular Audits: Periodic security audits, vulnerability assessments, and penetration testing conducted by independent third parties;
• Employee Training: Regular training of employees on data protection, privacy, and security best practices;
• Incident Response: Documented incident response procedures to detect, respond to, and mitigate data breaches;
• Secure Infrastructure: Use of secure, redundant data centers with physical security controls, fire suppression, backup power, and environmental monitoring.

While py2ph takes reasonable steps to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. You acknowledge that you provide personal information at your own risk and that py2ph cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately of any unauthorized access to your account.

10. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

10.1 Right to Be Informed

You have the right to be informed about the collection, use, and processing of your personal information, which is fulfilled through this Privacy Policy.

10.2 Right to Access

You have the right to obtain confirmation of whether py2ph processes your personal information and to access such information. You may request a copy of your personal information by contacting our Data Protection Officer.

10.3 Right to Rectification

You have the right to correct inaccurate, incomplete, or outdated personal information. You can update most of your account information directly through your py2ph account settings or by contacting customer support.

10.4 Right to Erasure or Blocking

You have the right to request deletion or blocking of your personal information in certain circumstances, such as when:

• The information is no longer necessary for the purposes for which it was collected;
• You withdraw consent and there is no other legal basis for processing;
• You object to processing and there are no overriding legitimate grounds;
• The information has been unlawfully processed;
• Deletion is required to comply with a legal obligation.

Please note that this right is not absolute and may be subject to legal or regulatory retention obligations.

10.5 Right to Object

You have the right to object to the processing of your personal information in certain circumstances, including processing for direct marketing purposes. You can opt out of marketing communications at any time by clicking the unsubscribe link in emails or adjusting your communication preferences in your account settings.

10.6 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that information to another controller, where technically feasible.

10.7 Right to File a Complaint

You have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that py2ph has violated your privacy rights or data protection laws. The NPC can be contacted at:

• National Privacy Commission
• Email: [email protected]
• Website: www.privacy.gov.ph
• Hotline: (+63) 2-8234-2228

10.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] or through the contact methods provided in Section 2. We will respond to your request within fifteen (15) business days or as otherwise required by law. We may require verification of your identity before processing your request to prevent unauthorized access to your personal information.

11. Cookies and Tracking Technologies

py2ph uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze platform usage, and provide personalized content. Cookies are small text files stored on your device that allow us to recognize your browser and remember information about your visit.

11.1 Types of Cookies We Use

• Essential Cookies: Required for the operation of the website, including authentication, security, and basic functionality;
• Performance Cookies: Collect anonymous information about how you use the website to help us improve performance and user experience;
• Functionality Cookies: Remember your preferences and settings to provide enhanced, personalized features;
• Advertising Cookies: Deliver relevant advertisements and track campaign effectiveness (used with your consent);
• Analytics Cookies: Help us understand user behavior through tools like Google Analytics.

11.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling certain cookies may affect the functionality of py2ph Services and limit your ability to use certain features. For more information about managing cookies, visit your browser's help section or www.allaboutcookies.org.

12. Children's Privacy

py2ph Services are intended exclusively for individuals who are at least twenty-one (21) years of age. We do not knowingly collect, use, or disclose personal information from individuals under the age of 21. If we become aware that we have inadvertently collected personal information from a minor, we will take immediate steps to delete such information from our systems. If you believe that we have collected information from a minor, please contact us immediately at [email protected].

13. Third-Party Websites and Services

The py2ph platform may contain links to third-party websites, applications, or services that are not operated or controlled by py2ph. This Privacy Policy applies only to information collected by py2ph and does not cover the privacy practices of third parties. We are not responsible for the content, privacy policies, or practices of third-party websites. We encourage you to review the privacy policies of any third-party websites or services that you visit.

14. Changes to This Privacy Policy

py2ph reserves the right to modify, update, or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. When we make material changes to this Policy, we will notify you by:

• Posting a prominent notice on the py2ph website;
• Sending an email notification to the address associated with your account;
• Displaying an in-app notification when you log in to your account.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of py2ph Services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must stop using py2ph Services and may request closure of your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

15. Consent and Acknowledgment

By creating a py2ph account, accessing our website, or using our Services, you acknowledge that you have read, understood, and agree to the collection, use, processing, storage, and disclosure of your personal information as described in this Privacy Policy. You consent to the processing of your personal information for the purposes outlined in this Policy and in accordance with the Data Privacy Act of 2012.

For processing that requires your explicit consent (such as marketing communications or international data transfers), we will obtain your separate consent through opt-in mechanisms before proceeding with such processing. You may withdraw your consent at any time by contacting us, though withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.